Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33392d3339203d3e20323639323632.roa (raw, json)
Hash identifier:          UsNkCczseu27noV1FMk5Mxv3MFt5Hud3xSOkTXQ1fFg=
Subject key identifier:   B9:A5:C1:24:89:DD:4E:A3:23:B6:5E:10:9C:FC:F9:9D:04:1E:C1:1E
Certificate issuer:       /CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
Certificate serial:       72C6265D9BF61267F9CA63EC4E2AF35FCF9B344B
Authority key identifier: F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa
Signing time:             Thu 04 Apr 2024 07:29:06 +0000
ROA not before:           Thu 04 Apr 2024 07:24:06 +0000
ROA not after:            Thu 03 Apr 2025 07:29:06 +0000
asID:                     269262
IP address blocks:        2804:61e0::/39 maxlen: 39

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c6:26:5d:9b:f6:12:67:f9:ca:63:ec:4e:2a:f3:5f:cf:9b:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E
        Validity
            Not Before: Apr  4 07:24:06 2024 GMT
            Not After : Apr  3 07:29:06 2025 GMT
        Subject: CN=B9A5C12489DD4EA323B65E109CFCF99D041EC11E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:3d:69:0a:ef:dc:f0:07:ce:a5:7b:3b:c8:
                    75:68:5f:7f:81:e2:5e:78:43:fb:31:e3:3b:cf:3f:
                    2e:8d:80:74:e3:b5:db:84:65:44:80:3d:7e:7e:e8:
                    e7:4e:19:29:d1:d9:92:a1:2e:9a:9f:84:35:d2:34:
                    6e:87:57:20:17:b6:66:a7:8a:2d:7a:ec:dc:6f:69:
                    7c:82:a8:8b:d2:d0:3f:75:17:f0:a3:0e:0f:4a:f9:
                    fd:93:40:18:e7:ab:38:ae:ee:42:eb:5f:55:41:a7:
                    20:e4:6a:25:f0:14:3d:3f:fb:65:21:6c:45:df:0e:
                    49:ff:06:f8:b8:f8:88:7d:ad:41:b8:44:de:66:de:
                    1b:f8:b0:2d:50:e4:af:a9:29:9f:79:5c:da:4d:b9:
                    e9:5c:9e:5e:2e:b3:09:46:d5:72:f6:db:52:c0:e3:
                    7f:57:38:01:99:53:97:77:67:28:ce:4b:d5:28:1b:
                    d0:76:27:e3:83:5d:0f:1b:6c:e3:67:17:6d:63:e3:
                    02:fd:62:ff:4a:af:ba:6d:65:57:ea:87:56:e1:fa:
                    33:c0:80:a5:4c:4d:ef:9e:31:4a:0f:aa:77:d5:23:
                    1e:a8:21:eb:5d:4b:6a:fe:d8:81:71:a3:ef:d5:c0:
                    e2:89:cb:d0:22:de:d3:af:ac:cb:8a:08:19:89:f0:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:C1:24:89:DD:4E:A3:23:B6:5E:10:9C:FC:F9:9D:04:1E:C1:1E
            X509v3 Authority Key Identifier:
                keyid:F2:AA:FF:A3:59:9C:06:E8:E6:8A:B7:79:5F:0D:B8:F1:BC:7A:7D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2AAFFA3599C06E8E68AB7795F0DB8F1BC7A7D6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33392d3339203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/39

    Signature Algorithm: sha256WithRSAEncryption
         3b:59:62:d8:c9:bc:29:18:26:77:1f:bb:5f:fa:af:7a:36:08:
         30:15:c8:34:64:46:bd:40:b2:77:d7:e1:26:d2:7c:3a:bc:46:
         14:d2:ff:29:fb:7f:44:b9:ff:b6:c5:77:02:96:1d:74:5b:10:
         94:ce:40:81:16:05:23:8b:72:67:74:aa:6e:df:5d:43:7f:95:
         03:c0:4b:5a:46:98:61:76:26:3f:6a:75:2c:bf:63:4a:2d:c9:
         0c:ef:10:fa:ec:c4:8e:dd:57:d0:4b:01:e4:cd:7f:b1:58:18:
         0c:05:c9:12:b8:d9:5e:33:4b:44:9b:d9:19:c5:27:9e:b3:5c:
         5d:c6:b7:c1:06:90:6c:83:bc:ba:ee:93:61:cd:0d:9d:1a:00:
         f2:8f:db:d6:a2:f1:3a:05:cd:78:0a:26:54:dc:b2:31:4b:c8:
         4d:1f:14:b0:db:d9:ac:df:40:c4:87:4e:bb:9c:3d:13:69:b9:
         bd:62:a3:dc:67:b6:f0:b2:a7:1f:ef:a1:f1:67:20:af:01:24:
         8f:dc:49:21:a0:bd:ad:2e:09:2c:0d:34:bc:20:54:7a:3f:cc:
         bc:18:44:25:d4:05:ca:2c:20:19:ea:44:ba:f8:93:25:a2:ff:
         7b:06:2a:75:7f:28:a1:aa:66:26:56:b0:66:e8:4d:77:8c:a2:
         9b:5a:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org