Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
File:                     323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa (raw, json)
Hash identifier:          yuoPTgYWJReFnqpf9OCStzyMHG6pg293ky194Rns+rs=
Subject key identifier:   FC:39:77:A4:B4:45:16:9D:29:C3:E2:CA:BE:D8:B4:A0:AC:9C:4C:05
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       C398BEE78D47082EC11FD7901797691D2FDD50
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
Signing time:             Fri 24 May 2024 13:50:19 +0000
ROA not before:           Fri 24 May 2024 13:45:19 +0000
ROA not after:            Fri 23 May 2025 13:50:19 +0000
asID:                     264022
IP address blocks:        2804:2990:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c3:98:be:e7:8d:47:08:2e:c1:1f:d7:90:17:97:69:1d:2f:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: May 24 13:45:19 2024 GMT
            Not After : May 23 13:50:19 2025 GMT
        Subject: CN=FC3977A4B445169D29C3E2CABED8B4A0AC9C4C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:ff:80:5e:60:06:a4:f0:31:38:e7:36:78:
                    8c:08:f9:15:1a:0b:62:c0:37:8d:df:5d:38:e8:a1:
                    4a:2c:bc:27:8b:11:d6:37:c5:11:0a:76:78:37:cb:
                    c7:91:2d:9d:05:2d:a3:24:26:df:a4:b0:66:4d:bd:
                    5a:ec:08:b2:84:29:4e:9f:23:62:6b:54:9a:08:ef:
                    0a:73:4e:fe:96:75:37:63:9e:e2:6c:0f:5c:02:99:
                    e7:10:da:24:54:ab:dc:3c:70:e2:40:3c:1c:c9:f3:
                    b6:6a:d3:87:ea:7a:bf:58:e3:35:4d:62:5e:20:2e:
                    c3:1f:bd:ab:5f:a0:3b:91:9e:d7:23:7e:ca:12:e9:
                    4a:94:65:7b:9f:b0:e2:3d:d4:7b:14:dc:50:84:af:
                    94:a4:5f:aa:48:fd:e0:04:ce:b8:fc:0e:c7:dd:36:
                    aa:07:2c:b6:6c:fd:e9:f2:13:32:4c:e0:9d:2c:e3:
                    fa:78:dd:4e:96:7e:05:eb:13:79:9e:4a:a5:b3:e8:
                    30:f2:f7:99:5d:65:73:b8:fb:50:a4:5b:46:ba:c7:
                    c0:df:a3:a2:81:1b:3e:61:18:64:4e:86:13:24:b1:
                    9b:ab:fd:8a:53:27:35:7f:a5:c1:26:22:47:87:c7:
                    9a:64:2b:b8:93:d3:ff:d5:ea:65:6c:da:80:af:64:
                    b5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:77:A4:B4:45:16:9D:29:C3:E2:CA:BE:D8:B4:A0:AC:9C:4C:05
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:61:26:fe:06:03:c2:fa:4d:d4:86:1c:f9:69:5c:65:ef:89:
         96:74:35:b2:b9:29:7a:c6:f8:1d:42:55:3b:7c:c2:4f:cd:30:
         6b:bc:fd:1a:ff:6f:12:65:58:31:71:83:3c:e2:70:44:61:56:
         b1:52:84:68:43:42:dd:d0:5d:91:f5:62:c7:e3:9e:fd:e0:ba:
         08:85:3a:b4:6e:3b:3e:34:9e:b2:b0:37:86:8f:75:22:56:2a:
         42:fa:bd:ae:25:04:f0:52:30:09:d0:e8:cf:08:95:35:09:ba:
         7d:3f:ac:6c:12:7d:c3:48:16:e6:1a:d5:91:4e:99:2a:20:ba:
         38:74:d3:53:50:6a:c9:46:a8:ca:3f:8f:5a:63:1f:93:53:6d:
         8d:83:be:89:6d:4c:92:38:05:45:35:af:28:af:0b:fd:38:76:
         a0:aa:53:a2:57:16:5c:35:c1:15:0c:ac:4b:d5:91:57:2b:88:
         12:1a:ca:d9:59:26:5b:a0:c8:f3:fd:2b:26:33:c7:5c:56:5b:
         bc:aa:8c:aa:7e:03:7d:61:b3:e1:04:57:72:41:95:ed:0f:76:
         cc:ab:5e:1c:54:54:b3:52:93:de:9f:e2:70:83:46:c0:b5:fe:
         8f:fc:f0:63:ef:bf:bd:ab:b5:85:87:dc:8d:e5:ec:88:a1:63:
         d8:97:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org