Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa
File:                     323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa (raw, json)
Hash identifier:          +2syFhHOqy9hUVeIdr1030+ezDjss/B2LNd89kCwl5Y=
Subject key identifier:   45:58:AE:CF:93:54:C4:45:33:CB:93:B4:35:12:51:0F:A9:02:86:1B
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       77C1F9F60DC755C7BA4D6373975DB9DB8F75F7C6
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa
Signing time:             Thu 04 Apr 2024 01:17:48 +0000
ROA not before:           Thu 04 Apr 2024 01:12:48 +0000
ROA not after:            Thu 03 Apr 2025 01:17:48 +0000
asID:                     268938
IP address blocks:        2804:5ce8:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c1:f9:f6:0d:c7:55:c7:ba:4d:63:73:97:5d:b9:db:8f:75:f7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Apr  4 01:12:48 2024 GMT
            Not After : Apr  3 01:17:48 2025 GMT
        Subject: CN=4558AECF9354C44533CB93B43512510FA902861B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:54:d5:f4:46:cd:07:9a:89:5d:47:ba:c4:
                    97:e4:ba:e0:3d:43:27:5c:93:64:38:5a:b7:54:a3:
                    62:5e:ce:54:3c:4c:ca:5f:1b:8d:f6:04:91:e8:db:
                    71:bc:fa:7e:a8:88:1a:45:87:7a:42:80:c0:c3:e7:
                    70:4b:99:c4:a5:5f:63:96:c7:be:ec:02:56:79:e9:
                    c2:7e:a9:7f:7c:fc:02:54:4a:16:c8:6b:f6:a1:c0:
                    45:78:14:bd:08:b5:3a:da:ab:aa:5f:35:6a:28:84:
                    ce:1b:b3:e3:d6:d3:fa:35:ca:3c:3d:90:e8:27:bf:
                    2c:6f:43:f4:68:92:93:24:bf:40:67:84:ff:ae:25:
                    e0:ac:d5:b1:a6:62:ad:17:db:18:1a:72:ad:31:ad:
                    6a:69:cd:ae:33:d5:80:02:d0:c1:7b:0a:2e:02:ba:
                    9f:0b:17:66:96:19:a9:ab:bc:e4:fc:9a:0d:5f:0c:
                    a2:77:96:f2:ec:7f:da:10:e2:a1:61:bf:6a:25:0b:
                    80:30:6b:21:6b:4c:e7:05:f8:89:f3:6b:db:a8:7e:
                    21:13:ed:82:34:4b:a4:8b:0c:52:32:2a:cc:0d:08:
                    99:c2:13:b2:5d:a8:ec:68:37:6e:8f:44:19:76:f3:
                    5d:97:fd:c6:8b:b7:1a:09:aa:06:9e:00:a1:dc:57:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:AE:CF:93:54:C4:45:33:CB:93:B4:35:12:51:0F:A9:02:86:1B
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a343030303a3a2f34302d3430203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:87:1d:04:c4:5a:46:6d:d1:a3:21:50:ef:7a:e1:d5:a5:
         69:6a:e9:7b:1a:9a:f0:b7:ee:ce:db:77:10:b0:85:69:de:c7:
         42:db:bb:ee:2e:b1:2e:64:7c:16:c2:61:3e:cd:71:97:9e:cb:
         49:44:95:a6:7e:7a:94:42:b2:24:8d:6e:0d:79:dd:53:31:6b:
         88:4c:48:f0:c7:f8:2f:f4:c8:58:5a:5f:8d:c5:3b:3b:18:9b:
         37:ac:be:98:00:9c:86:d9:55:8c:0e:d0:42:0e:d6:82:aa:3a:
         cd:50:0d:a1:93:d0:32:ae:39:ba:d3:ef:75:65:b8:28:2f:0e:
         36:c1:01:bb:49:d7:d0:3e:65:d2:e9:d7:ab:a8:b9:96:45:8e:
         9d:71:d2:53:35:b5:aa:31:bf:8d:d3:43:76:77:a5:a8:50:8a:
         da:ce:d6:db:6c:fc:3b:26:c9:aa:ad:eb:97:6b:c2:c3:c3:52:
         cd:48:e6:60:d5:5b:fc:8b:da:ca:5b:89:2b:68:a6:2b:11:3d:
         06:c1:d6:7e:8e:af:81:e3:f5:b5:c1:ae:1d:09:89:94:65:f6:
         8a:23:33:de:ee:25:54:d4:16:a3:1a:aa:cc:ad:8a:3a:e5:0c:
         9c:4e:69:76:bf:a3:82:c4:5b:e7:6a:11:ae:e7:80:25:f2:a8:
         92:fa:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:13:50 2024 by rpki-client on console-ams.rpki-client.org