Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
File:                     323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          stjHjyQC0tBMOZUbeL5obo07qxw2AIvlrA2pa0RGID0=
Subject key identifier:   2C:DC:A3:A2:58:FD:AE:DB:26:B6:33:FF:72:DB:07:1A:39:D0:77:BB
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       53B375F34F015246308623BEB50028689B2A3C39
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa
Signing time:             Wed 29 May 2024 18:17:15 +0000
ROA not before:           Wed 29 May 2024 18:12:15 +0000
ROA not after:            Wed 28 May 2025 18:17:15 +0000
asID:                     52468
IP address blocks:        2804:74:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b3:75:f3:4f:01:52:46:30:86:23:be:b5:00:28:68:9b:2a:3c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: May 29 18:12:15 2024 GMT
            Not After : May 28 18:17:15 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b0:5a:5a:25:19:68:3b:97:fd:c6:4c:63:39:
                    fe:62:8a:16:ff:00:08:25:91:93:27:63:be:45:8b:
                    32:78:3d:04:29:0e:30:14:65:b1:33:8d:6e:df:06:
                    cc:80:f4:c5:29:36:05:7d:85:e9:9a:d9:b1:c4:5a:
                    ba:ca:c2:6b:b9:83:4a:7d:84:35:bd:a2:02:38:92:
                    cc:36:e0:e3:1a:b6:67:85:21:68:e6:ba:ae:f1:60:
                    45:fd:75:38:1c:cb:a4:ca:a7:bd:aa:a1:33:8e:b0:
                    74:7e:39:f9:1a:c5:0f:91:6b:dc:5b:3f:e5:1a:2f:
                    11:c8:14:08:11:38:c4:74:f1:e9:4b:9e:f2:6e:71:
                    2f:76:c8:50:c4:e8:ff:d8:e6:77:fa:ce:c6:bf:e7:
                    06:d0:55:b3:62:27:21:4f:28:0a:52:bf:ff:d7:f6:
                    74:39:db:44:60:d5:9f:ce:03:60:ba:29:03:91:f7:
                    d9:d5:05:19:ff:4d:00:5f:47:a5:06:a3:0c:b9:fe:
                    0c:4f:b6:b5:eb:2d:43:20:e6:80:b4:73:57:2f:2e:
                    4d:f0:9f:7c:b8:0c:3c:d7:31:3e:8f:63:12:df:16:
                    ec:9e:36:af:0c:b8:36:d2:38:53:cc:f4:3b:bb:86:
                    f2:fe:ea:c8:db:c3:a4:11:63:5e:6f:88:67:68:40:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DC:A3:A2:58:FD:AE:DB:26:B6:33:FF:72:DB:07:1A:39:D0:77:BB
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a666666663a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:84:1a:e0:39:eb:e3:a1:c9:cb:f2:cb:53:79:f0:a8:22:c4:
         cf:15:a5:71:0a:f4:1c:28:69:26:32:7d:1e:c0:06:d8:6d:cc:
         4a:97:80:93:38:fe:fd:e4:39:46:e8:89:3f:8a:d2:7e:0d:0a:
         04:63:b7:47:03:48:6b:48:a3:06:48:55:0f:20:c5:d2:25:35:
         50:1d:68:ef:d0:92:4e:77:8a:f2:b2:c6:97:e4:df:d6:c4:b1:
         94:07:cf:22:eb:85:84:cc:52:45:26:5b:29:d7:c3:7f:44:26:
         4d:45:79:0b:6e:98:89:17:e4:e3:02:73:31:4f:51:ba:7b:f6:
         01:2a:6e:c7:a8:48:1f:dd:a0:9c:22:ae:f2:74:43:cc:15:e8:
         40:c5:08:92:9a:a8:1f:ea:34:58:09:80:fe:c9:be:28:49:58:
         93:4b:cb:b7:f9:00:45:1b:61:c8:8f:7e:96:95:59:13:40:af:
         0f:2c:34:01:ba:30:b8:56:f8:dc:13:b7:b1:bd:fe:be:a1:4e:
         b5:7d:9b:ec:94:a1:63:72:f9:c5:6d:69:2b:1d:d0:dd:a9:1a:
         ae:8e:79:25:0e:ce:7a:ab:02:d5:79:d4:cc:de:5d:a9:d8:54:
         b7:02:62:3a:0a:a1:44:88:c5:97:f7:07:92:6c:7a:72:05:6a:
         8c:fc:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:22 2024 by rpki-client on console-ams.rpki-client.org