Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a383030303a3a2f33332d3333203d3e20323635343531.roa
File:                     323830343a333435343a383030303a3a2f33332d3333203d3e20323635343531.roa (raw, json)
Hash identifier:          X9GgciiiZs+FEO5VdNk5Z/V+OZcWzGz/ohEs/b2y7wU=
Subject key identifier:   D6:7A:48:C9:DB:94:C2:04:3A:E7:8F:1C:D2:9F:6A:9F:E2:16:D9:8B
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       1C5467030FCC09702AC5C115E378622B10324135
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a383030303a3a2f33332d3333203d3e20323635343531.roa
Signing time:             Wed 03 Jul 2024 13:49:15 +0000
ROA not before:           Wed 03 Jul 2024 13:44:15 +0000
ROA not after:            Wed 02 Jul 2025 13:49:15 +0000
asID:                     265451
IP address blocks:        2804:3454:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:54:67:03:0f:cc:09:70:2a:c5:c1:15:e3:78:62:2b:10:32:41:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Jul  3 13:44:15 2024 GMT
            Not After : Jul  2 13:49:15 2025 GMT
        Subject: CN=D67A48C9DB94C2043AE78F1CD29F6A9FE216D98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f1:d4:64:8d:42:1a:44:a9:51:ff:4b:65:9c:
                    50:c2:cb:e4:fe:55:46:e3:ac:be:94:07:57:4c:ea:
                    99:fb:14:d1:1f:72:a7:48:fb:dd:dc:14:32:13:9d:
                    3f:2b:20:76:cf:29:62:6a:48:d5:ce:66:00:ea:07:
                    0b:f1:d6:6e:3a:e4:95:9d:74:a0:e5:2c:77:6f:fa:
                    42:1c:30:b6:c0:37:f5:2e:51:bc:f7:ca:22:e9:3e:
                    a8:af:0c:61:cd:b1:1c:5d:7b:b7:ef:dd:c1:d2:3c:
                    a1:9c:ed:34:8b:e4:df:3c:2c:82:b1:39:4c:41:75:
                    33:30:5f:9e:ec:46:6e:79:ad:e8:d4:6a:f3:f1:6c:
                    d9:66:6c:2b:d2:05:4b:7d:41:d1:b5:bc:50:25:62:
                    5e:1e:6c:25:32:af:35:08:74:ac:08:ab:04:11:c0:
                    d1:7e:81:d6:ba:60:f9:77:b4:6b:e3:eb:89:20:ce:
                    d3:4f:c5:fb:fe:d4:bb:08:fa:77:e8:cd:ec:e3:2c:
                    58:26:a1:68:8c:6a:17:f9:d5:1a:ef:34:c9:4d:91:
                    6a:84:52:5c:bc:e9:f0:86:98:5c:1e:df:7b:ad:24:
                    f6:ed:88:4c:13:97:85:84:64:43:f9:0b:12:95:16:
                    09:e2:7f:a9:13:2b:03:c6:c4:f8:7c:9d:7e:da:35:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7A:48:C9:DB:94:C2:04:3A:E7:8F:1C:D2:9F:6A:9F:E2:16:D9:8B
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a383030303a3a2f33332d3333203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:02:d0:b1:54:86:18:41:ce:da:ca:e5:f6:ca:e5:81:7b:36:
         23:35:af:29:a9:67:2b:ac:e1:c7:31:19:8e:89:a3:17:f5:c1:
         ba:63:ba:6d:de:fd:24:18:f1:74:57:3f:82:34:41:cf:b3:77:
         59:03:35:6a:2c:19:e3:9e:49:0f:86:32:0d:66:ff:b2:8f:b3:
         15:8b:0f:ad:8f:62:c5:20:db:b8:6e:37:68:ae:1a:76:5e:85:
         46:bd:7a:a4:6e:7e:b1:39:c9:3b:03:6c:60:15:0d:5a:42:8d:
         42:d0:66:d6:c7:fb:5c:b5:54:f4:1f:8f:47:db:28:a8:76:1f:
         00:88:15:b5:c2:3a:db:22:86:6f:46:32:a9:55:5b:6f:84:97:
         09:58:ef:24:8a:50:b5:32:bf:0f:17:4c:ec:01:b4:23:f8:e4:
         9d:ca:96:30:03:f5:3b:30:b3:9c:67:dc:b5:d6:2d:c3:da:a5:
         ed:8e:f5:8b:78:78:62:cb:e1:60:9a:26:ff:02:4c:9d:5d:38:
         35:56:5c:e6:cc:7a:70:bd:6e:36:6a:7e:52:46:27:7d:58:d8:
         fa:a6:cb:e0:92:70:b5:60:4f:93:b6:b7:8d:62:86:68:15:d1:
         ba:69:07:13:fd:89:33:c5:48:e6:3a:89:c4:86:ff:bf:37:ad:
         e5:38:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:06 2024 by rpki-client on console-fra.rpki-client.org