Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/323830343a346338343a3a2f33322d3332203d3e20323637333735.roa
File:                     323830343a346338343a3a2f33322d3332203d3e20323637333735.roa (raw, json)
Hash identifier:          qGpf0vUuW1yflJ85Md5rwEAKjEH2KXBtvQmKJgMLFgY=
Subject key identifier:   5A:46:D0:DD:73:A9:E3:58:96:59:53:F0:A4:6B:B2:A3:CC:86:E0:82
Certificate issuer:       /CN=F810C50445389ABEA8804CA283554A795AB49C80
Certificate serial:       67EE50D343E9B08999C89ACC3898A72BAC03C022
Authority key identifier: F8:10:C5:04:45:38:9A:BE:A8:80:4C:A2:83:55:4A:79:5A:B4:9C:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/323830343a346338343a3a2f33322d3332203d3e20323637333735.roa
Signing time:             Wed 17 Apr 2024 19:08:00 +0000
ROA not before:           Wed 17 Apr 2024 19:03:00 +0000
ROA not after:            Wed 16 Apr 2025 19:08:00 +0000
asID:                     267375
IP address blocks:        2804:4c84::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.crl
                          rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ee:50:d3:43:e9:b0:89:99:c8:9a:cc:38:98:a7:2b:ac:03:c0:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F810C50445389ABEA8804CA283554A795AB49C80
        Validity
            Not Before: Apr 17 19:03:00 2024 GMT
            Not After : Apr 16 19:08:00 2025 GMT
        Subject: CN=5A46D0DD73A9E358965953F0A46BB2A3CC86E082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:6d:20:61:a3:6c:db:0b:3f:33:dd:a6:de:
                    a1:e8:3d:69:bf:60:5c:17:6c:d5:89:90:19:cf:be:
                    62:ac:6f:3e:b6:45:90:73:b3:cd:02:ac:5b:5e:36:
                    4e:a0:ae:e8:a1:0b:69:71:77:8b:f5:e3:1c:97:62:
                    cf:be:62:5b:30:6e:da:85:cb:00:89:f3:47:8a:a2:
                    c5:4f:5a:68:76:01:8f:2d:8b:1b:69:5b:a1:e9:3a:
                    7b:04:ce:81:65:5f:ed:3e:51:18:a5:25:b0:02:7b:
                    dd:79:8b:df:c3:2b:48:7e:c9:ba:51:8f:f4:4e:69:
                    f6:85:25:74:06:71:fd:81:c4:e1:48:fc:a7:ed:70:
                    06:ca:fa:db:ed:3a:59:f1:ab:b8:51:65:e4:8e:fb:
                    21:4d:89:b1:4d:29:a2:51:47:14:ec:17:f9:f2:fb:
                    63:96:30:4f:dd:b0:3f:23:1a:7c:f4:8f:6a:74:dc:
                    6f:f6:e2:67:af:b8:97:32:bd:c6:dd:1e:47:bc:10:
                    f3:14:23:57:0e:9a:33:40:06:ae:b8:99:21:05:b2:
                    c8:7b:ab:65:b6:a7:08:e3:e8:04:b0:d3:6f:3b:2b:
                    33:9b:6f:c7:db:e1:2e:77:f9:47:53:60:02:d6:12:
                    71:50:d3:4f:d1:43:c6:15:d4:b0:32:00:67:90:51:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:D0:DD:73:A9:E3:58:96:59:53:F0:A4:6B:B2:A3:CC:86:E0:82
            X509v3 Authority Key Identifier:
                keyid:F8:10:C5:04:45:38:9A:BE:A8:80:4C:A2:83:55:4A:79:5A:B4:9C:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/F810C50445389ABEA8804CA283554A795AB49C80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F810C50445389ABEA8804CA283554A795AB49C80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4umefsZ2LuYcP4ruSh4A9sxMNxMatAyB3so1C1hJimuk/0/323830343a346338343a3a2f33322d3332203d3e20323637333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:33:f1:ad:1d:59:1e:49:5e:d4:e0:07:c1:bc:e1:3d:07:c0:
         5d:75:67:f8:a7:fa:b2:26:24:15:53:0b:0b:b8:d7:a1:55:d4:
         cb:d8:5e:1b:16:12:98:ca:ab:9f:43:3a:c6:e4:ad:6b:9f:31:
         16:fe:67:73:ca:6f:b4:c8:7d:9d:86:4a:a0:a6:31:5c:2f:98:
         0b:d6:4d:64:50:ec:7b:4a:40:74:c5:41:ef:03:a5:46:9d:a9:
         f6:5e:ec:a2:0f:ff:66:e1:9d:be:da:d4:71:32:f6:13:fd:48:
         e6:54:e9:b1:76:d4:1f:49:e0:93:06:5e:6a:77:f6:9f:c8:7b:
         90:83:6e:2f:d8:03:8d:39:6a:ef:5b:95:52:dd:98:32:6c:44:
         db:b4:d0:85:57:fa:48:b6:69:ea:e8:38:42:92:7e:5b:83:d4:
         6e:e3:0b:da:5d:64:2e:62:c7:6d:c6:5d:0d:d5:b0:ae:38:99:
         ac:66:44:f9:64:cc:29:fb:d6:08:5c:59:b2:32:15:bb:82:58:
         72:82:86:b8:71:5c:cd:e7:fb:95:b2:92:88:29:02:a5:1a:b6:
         d0:2b:97:bc:96:78:f5:62:e4:47:7e:b8:e0:d3:25:fb:88:c5:
         0c:37:5c:c1:dd:85:7c:5d:c0:6d:44:68:14:6a:a7:31:36:6d:
         ed:cc:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:09 2024 by rpki-client on console-ams.rpki-client.org