Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a633030303a3a2f33342d3334203d3e20323635343531.roa
File:                     323830343a333435343a633030303a3a2f33342d3334203d3e20323635343531.roa (raw, json)
Hash identifier:          a1CQpfztofcCFxx+gR0YZ02lXARcm3CReROG4vyKbtY=
Subject key identifier:   C9:6C:2B:5E:28:49:DD:88:E7:08:F7:1A:D5:BC:F1:5E:73:7D:0C:93
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       29FA8695BCB54CB398EF8BDC990864BD10CDF5EF
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a633030303a3a2f33342d3334203d3e20323635343531.roa
Signing time:             Wed 03 Jul 2024 13:49:14 +0000
ROA not before:           Wed 03 Jul 2024 13:44:14 +0000
ROA not after:            Wed 02 Jul 2025 13:49:14 +0000
asID:                     265451
IP address blocks:        2804:3454:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fa:86:95:bc:b5:4c:b3:98:ef:8b:dc:99:08:64:bd:10:cd:f5:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Jul  3 13:44:14 2024 GMT
            Not After : Jul  2 13:49:14 2025 GMT
        Subject: CN=C96C2B5E2849DD88E708F71AD5BCF15E737D0C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:30:47:45:22:69:ac:60:2c:81:18:07:fc:
                    1a:f6:39:99:86:cf:30:2c:95:b3:81:d8:7b:e6:6a:
                    b6:72:1f:70:9b:1a:91:47:6b:15:d1:40:f7:46:96:
                    58:ff:a6:1a:a8:e7:ea:e1:24:76:6c:ca:91:a2:f1:
                    de:2a:5e:87:d6:82:42:cc:f4:c5:9d:a6:af:df:35:
                    1e:48:be:4b:8f:b9:0b:1f:87:d1:b9:63:a7:43:c0:
                    c9:1d:46:a4:aa:84:ea:4a:d3:b5:30:a5:6c:4e:9f:
                    44:6b:88:f6:2d:ec:55:3c:d4:16:f7:ee:d8:86:4c:
                    32:f6:5f:71:c7:5c:f1:92:69:28:a8:10:7f:e1:90:
                    cb:52:75:34:9a:41:51:6d:cb:34:0e:72:f7:fe:cb:
                    9b:1e:cb:f2:f3:3f:43:09:7a:4a:40:d1:17:e6:fa:
                    6e:b7:f8:0b:74:5e:85:c8:2e:2b:de:1c:fb:e0:8e:
                    dc:16:5d:75:7b:5c:36:b5:4b:80:d6:1b:bd:f9:4e:
                    14:1b:92:08:17:1d:cc:04:aa:1e:a3:87:57:c8:97:
                    5f:06:38:84:84:3a:de:fd:26:db:bf:74:ee:4a:31:
                    6c:05:3b:d7:b6:7c:5c:49:40:2e:2d:e9:0a:2a:29:
                    05:9f:e5:ce:3f:19:f2:32:10:68:92:65:2d:40:77:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6C:2B:5E:28:49:DD:88:E7:08:F7:1A:D5:BC:F1:5E:73:7D:0C:93
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a633030303a3a2f33342d3334203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:9c:8c:f2:d6:d1:04:01:13:48:5a:d6:95:5b:c9:f0:0a:
         16:de:90:22:bf:d1:d5:6b:fb:a1:f1:ee:5b:6b:69:cf:6d:86:
         8c:3f:c1:70:14:ca:67:3f:a1:71:7c:84:fb:f1:47:8e:af:d8:
         f2:2b:00:95:df:0a:45:06:27:8d:9f:7c:8b:43:97:e7:02:55:
         09:cb:36:3f:ce:62:fa:91:41:84:64:84:69:a6:cb:f2:58:ea:
         b3:dc:8d:2d:f1:60:9c:cf:bf:cf:ed:30:69:ae:db:5c:0e:15:
         96:2b:d1:44:77:d4:ca:69:fa:a7:f9:c3:20:d7:41:f3:c8:32:
         af:d8:cd:c4:96:fe:13:fd:a1:27:be:60:2e:ab:8a:9c:2f:b7:
         57:18:82:a6:db:06:33:5e:f1:85:b5:cc:ab:89:20:78:d4:d1:
         43:cc:24:11:0f:5a:0c:5d:33:f6:4c:da:1e:20:b4:86:59:f6:
         c5:17:da:25:7e:95:8c:8d:e6:75:7c:68:6c:fa:8c:d6:b8:48:
         f4:ce:4a:ee:fe:7a:2d:a8:c2:98:b9:d5:f0:6f:ac:75:a7:08:
         12:4b:11:d3:be:dc:df:e0:b9:9b:48:0f:5b:43:df:c3:fe:09:
         69:33:42:79:28:0a:4d:a1:a1:e9:c6:68:10:e0:c3:52:36:e0:
         81:0f:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:01 2024 by rpki-client on console-ams.rpki-client.org