Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
File:                     323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa (raw, json)
Hash identifier:          IWgNy3uaEFO+VEyf/16IPjkxDYvYhGnDagL2xoGschA=
Subject key identifier:   43:FC:55:07:69:3E:25:BE:3A:40:FF:B9:9E:39:0D:2E:4B:96:28:C3
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       26EE1A8D59831B1B5BF6F341288DD6CEA0515606
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa
Signing time:             Thu 04 Apr 2024 01:17:48 +0000
ROA not before:           Thu 04 Apr 2024 01:12:48 +0000
ROA not after:            Thu 03 Apr 2025 01:17:48 +0000
asID:                     268938
IP address blocks:        2804:5ce8:9000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ee:1a:8d:59:83:1b:1b:5b:f6:f3:41:28:8d:d6:ce:a0:51:56:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Apr  4 01:12:48 2024 GMT
            Not After : Apr  3 01:17:48 2025 GMT
        Subject: CN=43FC5507693E25BE3A40FFB99E390D2E4B9628C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:57:e4:11:03:78:a5:1f:98:f9:70:50:06:
                    d8:d0:f8:ec:15:ca:27:8e:14:e8:dd:03:fc:07:89:
                    3b:ae:9a:0d:f8:9c:20:e6:99:68:12:af:9e:96:b3:
                    bb:13:77:43:03:77:a2:1b:dc:cb:92:d8:dc:7f:03:
                    08:81:a5:ac:a1:70:3b:3c:f4:91:70:f2:3b:e5:6e:
                    15:e7:de:6a:1d:c3:63:69:12:2b:4d:3f:fa:f8:46:
                    3f:a5:02:5f:18:93:85:ea:11:7f:87:54:f9:af:bb:
                    4c:f8:21:35:28:3c:b7:4e:0e:69:43:e0:89:0f:eb:
                    88:b1:d7:b7:56:da:c5:33:10:ec:bf:14:42:bc:60:
                    8c:41:a0:fe:36:1b:cd:07:b9:34:d6:bf:10:60:3d:
                    59:6b:90:2d:e7:5c:5f:92:67:24:97:e0:bc:aa:e6:
                    93:8d:04:39:13:46:3d:fc:d0:1b:03:a1:4a:16:cc:
                    0c:d7:9c:0a:46:c7:d5:51:05:3f:26:99:a8:97:de:
                    b8:51:b2:13:65:3d:9e:85:07:94:85:a1:7f:0e:53:
                    b1:f9:d5:dd:ff:6f:04:43:59:26:ad:96:44:2a:cd:
                    c5:37:cb:e2:86:ef:55:74:a2:70:dc:a7:89:60:ce:
                    e5:94:12:a3:ca:ce:af:f8:7f:64:12:b9:33:a8:8c:
                    93:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FC:55:07:69:3E:25:BE:3A:40:FF:B9:9E:39:0D:2E:4B:96:28:C3
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a393030303a3a2f34302d3430203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:79:1b:19:fe:ed:31:ef:65:41:a3:aa:ee:f6:96:ff:a4:cb:
         52:82:7a:f6:8f:7e:4d:bf:3d:6b:81:97:81:47:64:53:ac:e8:
         7e:95:9f:24:c7:71:9b:8e:37:80:81:9a:c9:c2:19:12:29:84:
         1d:50:2c:0a:90:e2:4f:26:8b:19:74:7d:4c:43:7c:c2:47:5f:
         b5:a0:3f:ea:c6:ad:5c:06:9d:40:20:5e:55:75:ac:77:ea:da:
         57:60:b3:19:68:8c:1d:e8:10:bf:dc:64:26:11:b6:44:4b:08:
         d5:10:3d:71:68:ce:0c:6e:7b:3f:df:d6:85:f7:b4:2f:c5:78:
         99:c9:c7:61:b8:31:a5:99:b7:93:38:e6:cc:3e:7e:0d:6d:77:
         41:d8:16:64:48:3c:63:3d:e0:ba:cd:f6:8e:6b:ba:26:aa:9f:
         ab:cf:05:76:ec:eb:cc:55:75:8a:1f:83:85:f8:ab:78:89:43:
         22:04:93:23:a3:1f:48:5a:1a:e9:52:b4:04:be:bc:c7:77:c6:
         ce:af:cb:a9:33:fe:da:7e:64:f8:74:8a:76:8f:4f:0d:05:35:
         1f:b3:e2:87:67:fb:ef:35:fd:08:74:a0:00:1a:74:cd:db:c2:
         6f:11:b5:5c:c2:ed:1f:60:dc:7c:c8:c5:f0:db:df:2e:9b:d3:
         6d:ab:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:51 2024 by rpki-client on console-fra.rpki-client.org