Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33332d3333203d3e20323733353134.roa
File:                     323830343a386664303a383030303a3a2f33332d3333203d3e20323733353134.roa (raw, json)
Hash identifier:          OwouMwdbNoT2CI4g+7fqEOeh6GtPH44a8sPzlb+wh5E=
Subject key identifier:   66:D4:A7:59:72:F7:5C:2A:C2:40:53:C9:AC:2B:B4:33:03:13:30:32
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       075C3184A45500594C4D2C7C49D4D4BD6D351FEF
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33332d3333203d3e20323733353134.roa
Signing time:             Sat 05 Oct 2024 16:42:09 +0000
ROA not before:           Sat 05 Oct 2024 16:37:09 +0000
ROA not after:            Sat 04 Oct 2025 16:42:09 +0000
asID:                     273514
IP address blocks:        2804:8fd0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:31:84:a4:55:00:59:4c:4d:2c:7c:49:d4:d4:bd:6d:35:1f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Oct  5 16:37:09 2024 GMT
            Not After : Oct  4 16:42:09 2025 GMT
        Subject: CN=66D4A75972F75C2AC24053C9AC2BB43303133032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:0b:73:7e:7c:da:c3:ed:bc:05:17:8c:08:
                    be:6a:22:e3:fd:34:4f:df:02:73:19:26:f8:2c:de:
                    18:58:a1:cb:8c:08:b3:98:da:0d:4f:2b:71:1a:73:
                    15:a2:5c:29:31:49:54:d5:c0:4d:10:f8:69:78:64:
                    e5:b4:f8:f9:92:68:95:25:21:c8:7f:32:56:b0:8a:
                    f7:b9:a7:45:e6:3e:fc:8e:df:5d:24:fe:0d:90:0f:
                    63:f7:08:83:e5:05:a9:1f:69:be:46:cb:94:0f:ba:
                    96:51:68:c5:da:49:eb:a3:74:c3:61:32:34:0b:3e:
                    31:4e:4e:4e:71:e9:e8:04:93:20:f7:a3:c1:84:64:
                    81:98:81:ef:63:19:c2:0a:55:6b:6a:0a:0f:3c:b7:
                    ea:35:cd:e5:81:b3:f1:88:1e:f2:d2:9b:ed:26:53:
                    fd:c4:16:3b:60:3d:c0:18:91:e1:47:1f:08:5d:e4:
                    d5:f8:cf:cc:81:fc:59:fd:d9:b2:54:5c:eb:b9:cb:
                    b9:ea:5e:26:7d:bd:79:0c:39:57:a9:fc:ef:71:ec:
                    98:c0:ee:d3:47:41:cd:38:ce:f4:2e:8b:72:df:af:
                    02:81:c3:26:3b:99:fc:16:f2:21:7b:a9:dd:8c:18:
                    44:c3:65:8f:ed:5b:44:01:1b:05:26:24:60:95:39:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:A7:59:72:F7:5C:2A:C2:40:53:C9:AC:2B:B4:33:03:13:30:32
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a383030303a3a2f33332d3333203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         88:2e:bc:a8:53:45:be:40:b0:74:6b:dc:bd:d9:30:3d:49:5a:
         63:60:c6:5b:06:db:d6:de:ea:14:6e:d5:62:98:50:55:41:db:
         bb:e8:f8:70:3f:9f:b9:73:37:77:34:5d:f6:53:14:b7:b3:31:
         24:5d:f7:ea:42:ef:32:0d:ea:5d:6e:ac:25:64:5f:87:da:95:
         1c:92:72:84:bc:d7:2e:09:10:85:af:df:b6:90:e1:8d:25:d9:
         99:51:cc:19:ac:fc:41:e7:aa:24:b3:9f:a3:97:3d:6e:a9:d5:
         38:37:3e:a3:ee:ac:03:8c:67:0b:e2:44:20:3c:fc:38:83:35:
         eb:e4:c3:d4:dc:e3:7b:d1:a4:4d:08:39:99:f5:4b:78:79:04:
         bf:ee:fd:9d:9f:95:8e:3a:d0:ef:b9:12:f2:8d:d6:48:64:79:
         93:01:ea:69:81:5f:a4:7e:a5:1c:8d:43:0e:5a:60:e8:6b:e4:
         7c:bd:a4:96:95:50:66:09:32:de:86:be:b0:67:d7:dc:38:26:
         6b:b1:c9:22:fc:fd:87:2f:84:c8:39:9b:81:77:1c:65:19:1f:
         cc:25:9c:98:21:82:2d:88:eb:c7:58:e2:1e:a4:50:8c:82:27:
         0e:c6:69:4e:89:05:16:2c:c0:2c:56:35:f1:73:ca:df:b9:3c:
         25:4b:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org