Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa
File:                     323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa (raw, json)
Hash identifier:          Y8neVrQvfNlcWVGAC4biVP2sE3se7frzpizkcSA1avo=
Subject key identifier:   2D:87:FF:8F:CB:11:7F:13:ED:06:B3:96:B3:58:55:C7:83:05:A1:FD
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       124654871F377E76501F555A52B28291731542F2
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa
Signing time:             Fri 24 May 2024 13:50:19 +0000
ROA not before:           Fri 24 May 2024 13:45:19 +0000
ROA not after:            Fri 23 May 2025 13:50:19 +0000
asID:                     264022
IP address blocks:        2804:2990:6400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:46:54:87:1f:37:7e:76:50:1f:55:5a:52:b2:82:91:73:15:42:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: May 24 13:45:19 2024 GMT
            Not After : May 23 13:50:19 2025 GMT
        Subject: CN=2D87FF8FCB117F13ED06B396B35855C78305A1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f4:77:c6:ea:8f:78:5c:eb:33:e8:c9:fd:1f:
                    6f:e2:48:2c:a7:43:2f:44:4f:fa:3d:1c:bf:a9:4f:
                    34:d0:0d:e1:22:d1:ef:cd:a2:f6:10:70:b8:0b:2f:
                    a2:7a:a7:8d:8d:c5:65:66:26:68:b6:3d:ae:b7:e3:
                    ca:d3:e0:df:f5:89:38:bb:5e:d1:4e:5e:6b:91:1b:
                    a0:bc:4f:c4:6c:86:d9:06:11:81:63:e4:58:62:90:
                    e0:52:2f:b4:94:4b:f9:20:e1:9e:95:f1:06:5d:e8:
                    9d:a6:63:39:a0:d6:a5:48:a8:3e:68:31:25:bc:bb:
                    40:1f:7a:6d:af:a9:7c:1f:c2:ae:91:b6:f0:47:7a:
                    17:6a:70:82:5f:30:36:da:da:ee:25:e2:92:4e:cc:
                    c6:13:bf:c1:9a:c2:f9:08:70:fc:31:ac:81:1e:00:
                    57:de:5c:15:a5:8d:58:5c:96:f3:f0:43:af:75:39:
                    2d:ad:8a:62:9a:d6:37:be:8d:f7:ac:0c:2c:a4:e7:
                    53:5c:11:d5:87:0c:da:42:3e:08:36:96:c1:3b:2b:
                    a7:fc:79:00:8f:3b:12:e6:4f:ea:70:81:18:f0:c7:
                    c0:db:c9:70:6d:52:3d:63:76:20:08:4e:cf:b8:a7:
                    21:b7:27:cb:5e:7d:a1:44:6a:ad:1c:39:59:59:dc:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:FF:8F:CB:11:7F:13:ED:06:B3:96:B3:58:55:C7:83:05:A1:FD
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a363430303a3a2f33382d3338203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:6400::/38

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:db:25:43:01:86:5e:62:32:e1:d0:f8:28:fe:b7:1e:df:
         8d:06:d6:3b:69:7e:7a:d6:32:35:41:87:53:cb:7b:6b:e5:2b:
         e5:6d:a1:e4:ee:8d:db:26:e6:48:b3:55:91:88:43:31:5f:6e:
         90:30:39:d1:3d:44:d6:d0:cc:b3:fe:f7:9e:49:13:2a:dd:0e:
         76:7b:9e:a5:e3:7d:40:3e:b5:83:4e:97:e0:a2:50:03:9f:db:
         cb:1e:5a:dd:4d:1e:52:f5:30:e7:36:46:82:1f:ff:5a:60:49:
         5a:9f:ea:42:86:bd:e8:82:4c:b6:e5:b6:bc:17:e2:99:81:37:
         81:fa:96:17:f4:ed:f0:55:c1:d6:8c:43:89:da:0e:d0:07:94:
         99:20:f3:f8:29:18:d6:3e:43:38:ce:8e:1d:3f:69:5c:66:fd:
         a7:4a:71:ef:fa:a6:be:aa:2a:5c:98:c3:d9:f3:29:97:f5:d4:
         72:52:3f:e2:b5:94:9d:00:b2:20:02:5b:8e:ce:e7:81:7e:8b:
         4f:eb:79:cd:c6:9b:b2:9e:b1:43:bb:c5:95:68:80:94:18:9b:
         fb:a9:50:56:6d:70:a7:ea:e7:ad:26:ac:6d:78:56:ea:98:bf:
         9b:50:5f:8f:ee:ea:5a:1c:37:a5:f9:1f:de:e6:6c:d4:57:d1:
         f1:fd:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org