Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa
File:                     323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa (raw, json)
Hash identifier:          sT8PttFV2Z/DKIFhG7uJO6So11FPjovTKdfKR+63n/s=
Subject key identifier:   B8:A6:B5:16:4A:55:BB:F1:BA:30:59:E2:17:74:A8:AA:25:16:29:58
Certificate issuer:       /CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
Certificate serial:       261B9E9FE86714EF040EB87CD8A9FDE385B9D21C
Authority key identifier: A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa
Signing time:             Mon 29 Jul 2024 15:35:51 +0000
ROA not before:           Mon 29 Jul 2024 15:30:51 +0000
ROA not after:            Mon 28 Jul 2025 15:35:51 +0000
asID:                     262182
IP address blocks:        2804:1194:f004::/46 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl
                          rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:9e:9f:e8:67:14:ef:04:0e:b8:7c:d8:a9:fd:e3:85:b9:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E570DF80A25DDF3E53E6327D440529EF9EA523
        Validity
            Not Before: Jul 29 15:30:51 2024 GMT
            Not After : Jul 28 15:35:51 2025 GMT
        Subject: CN=B8A6B5164A55BBF1BA3059E21774A8AA25162958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:5c:b4:c2:1e:5d:72:8e:be:14:91:02:73:
                    0f:ef:59:76:f4:35:9c:d4:fd:ed:60:f5:19:76:3f:
                    34:35:e6:cb:5a:6c:5a:e9:7b:29:5b:c4:3b:e4:f0:
                    e8:22:e2:30:07:7e:48:22:23:34:40:b4:c0:69:35:
                    53:b0:7c:d2:01:67:db:7f:09:25:37:5b:43:75:63:
                    1b:24:34:25:51:14:11:43:57:f6:b4:e1:5f:fb:7e:
                    75:d1:99:9b:98:8a:bd:a1:86:46:90:83:4e:ab:ed:
                    2d:88:d3:7a:2f:40:39:36:30:5c:29:06:92:b1:17:
                    a4:ae:85:59:c0:44:23:e2:fe:11:ac:1f:ef:10:bf:
                    59:88:91:19:20:aa:d3:75:94:10:fe:b1:4d:63:81:
                    67:96:78:1b:86:5f:ca:95:4f:bb:60:76:e5:6d:be:
                    39:de:14:56:1a:20:55:2c:01:ef:c8:17:da:f5:18:
                    e4:ec:f2:2b:5b:cb:a7:19:76:13:2d:92:d6:4c:7c:
                    3f:46:24:6f:c1:fe:e7:36:52:f7:c2:e6:57:b6:ec:
                    60:b3:63:62:ac:d2:d5:f9:ba:4a:eb:58:4f:52:a2:
                    d5:9f:6a:9f:49:f3:63:54:cd:a1:3a:bf:49:41:aa:
                    8c:c3:47:17:48:f7:01:45:5b:af:56:a6:cc:ad:c6:
                    0b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:B5:16:4A:55:BB:F1:BA:30:59:E2:17:74:A8:AA:25:16:29:58
            X509v3 Authority Key Identifier:
                keyid:A9:E5:70:DF:80:A2:5D:DF:3E:53:E6:32:7D:44:05:29:EF:9E:A5:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/A9E570DF80A25DDF3E53E6327D440529EF9EA523.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E570DF80A25DDF3E53E6327D440529EF9EA523.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/0/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1194:f004::/46

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:19:1e:8d:65:e8:c5:dc:c2:ec:e8:3f:38:de:a4:b7:89:
         2d:55:e0:77:27:66:30:af:8c:2b:af:f6:63:e1:ba:bf:11:ec:
         fd:16:d3:dd:60:b6:0d:01:17:a3:5e:0e:b9:3a:ef:03:04:52:
         e4:e1:93:8a:33:20:21:f4:44:59:5a:04:95:ed:78:89:5c:2e:
         e3:ee:20:68:0b:4b:25:68:0b:f9:48:cf:7b:fa:dc:4f:d7:c8:
         f9:a4:9f:17:96:04:02:1c:b8:87:f5:94:b5:5d:b4:c6:7c:93:
         95:bc:95:ed:77:0b:cf:99:23:43:2f:cf:3a:1a:3a:8a:c9:48:
         03:ae:3f:f6:4c:c7:1b:56:48:01:7a:7a:32:c5:84:a7:7d:21:
         49:2b:4d:50:2d:97:09:9f:c7:ff:6b:d8:e5:f2:31:97:9a:88:
         64:c5:af:7d:c8:6e:1c:7d:aa:c7:e6:1a:6d:9f:8b:ec:d5:a1:
         32:77:69:29:cd:ce:60:08:9d:09:20:e1:67:46:0c:9f:01:0b:
         9d:72:82:22:7a:36:02:81:66:1b:87:61:22:82:72:11:5d:3c:
         64:4d:73:47:c2:a0:7d:42:34:2e:29:32:1b:bd:78:86:4a:b2:
         ae:42:54:3e:82:aa:93:6c:2d:fb:b7:f7:83:d2:c1:b7:ab:c7:
         c6:00:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:05 2024 by rpki-client on console-ams.rpki-client.org