Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
File:                     323830343a353766343a3a2f33322d3335203d3e20323638303937.roa (raw, json)
Hash identifier:          tJ1bM8j6NDxtVA6khqd8pRJWqpdSCzTB02z2TLXwPzc=
Subject key identifier:   FB:DC:CF:91:5A:84:D9:47:B6:5C:EC:B7:6E:C1:F4:13:2B:EE:38:36
Certificate issuer:       /CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
Certificate serial:       35E0EEE0916E03AE1ED1EF83D39A85675FA8AA61
Authority key identifier: A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa
Signing time:             Thu 04 Apr 2024 09:40:14 +0000
ROA not before:           Thu 04 Apr 2024 09:35:14 +0000
ROA not after:            Thu 03 Apr 2025 09:40:14 +0000
asID:                     268097
IP address blocks:        2804:57f4::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl
                          rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e0:ee:e0:91:6e:03:ae:1e:d1:ef:83:d3:9a:85:67:5f:a8:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C2C9C26175F7213ADA72D8BFF2959A6D661C60
        Validity
            Not Before: Apr  4 09:35:14 2024 GMT
            Not After : Apr  3 09:40:14 2025 GMT
        Subject: CN=FBDCCF915A84D947B65CECB76EC1F4132BEE3836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:38:e6:08:96:d9:24:ed:27:f9:05:f0:85:
                    76:0f:ce:4a:c0:1a:0d:e0:a9:98:29:11:89:82:a9:
                    b8:db:54:a5:82:00:85:52:80:9f:a2:8b:67:60:49:
                    d6:62:41:28:53:32:84:21:59:bf:43:b9:13:62:a0:
                    b0:e0:33:ef:c0:4f:64:76:43:fe:0a:05:c0:82:6a:
                    61:ec:7b:30:0b:aa:f4:6f:a8:d9:b1:3d:d2:97:94:
                    23:b8:56:c9:ac:9e:02:a6:00:ce:da:48:05:4e:99:
                    a2:06:c4:86:d8:8b:01:6b:28:c7:88:7c:7f:59:db:
                    af:78:58:70:05:a3:5b:6f:b0:68:6a:94:f6:0a:bd:
                    fb:90:82:18:96:77:cc:b2:54:e8:d0:60:68:a0:17:
                    cc:18:2b:06:75:ab:e1:aa:62:85:39:3c:24:3f:db:
                    bf:55:e2:e5:c7:a0:6a:d1:dd:ca:ab:3c:4e:11:84:
                    08:ca:63:99:94:4c:d6:b5:35:dd:c4:9d:a0:4e:64:
                    0d:cf:25:a0:1a:88:63:02:82:e6:c6:d2:2f:c9:eb:
                    4e:57:16:28:0e:3a:62:dd:5a:42:c8:92:14:6d:48:
                    f1:c8:9a:df:53:8b:50:31:97:61:95:af:d2:8e:6e:
                    f7:ea:a9:82:ed:08:9c:32:ff:79:d0:6d:26:3e:02:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:CF:91:5A:84:D9:47:B6:5C:EC:B7:6E:C1:F4:13:2B:EE:38:36
            X509v3 Authority Key Identifier:
                keyid:A0:C2:C9:C2:61:75:F7:21:3A:DA:72:D8:BF:F2:95:9A:6D:66:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C2C9C26175F7213ADA72D8BFF2959A6D661C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/1/323830343a353766343a3a2f33322d3335203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:57:4d:be:68:46:95:96:fa:0c:bb:0b:6a:41:33:b7:1a:
         99:0f:be:a8:c6:32:81:6b:79:be:c4:d0:a5:23:f5:ba:a0:a3:
         73:5f:f7:02:53:e5:69:dd:08:f9:ad:3a:92:71:18:42:3c:74:
         cd:4d:22:e0:ab:fc:f8:89:e3:70:d3:b0:d5:df:32:76:ad:35:
         77:c8:77:3e:c3:dd:64:2d:4b:33:d0:2c:a0:85:73:f6:54:ab:
         34:9a:13:e5:f9:bb:48:a7:7f:7e:b6:6f:4c:e2:65:fb:e2:0d:
         0e:17:6a:64:3a:f9:2c:cd:f2:a3:58:cb:11:d8:f8:4e:cd:af:
         7f:f2:e4:c7:0e:7a:bf:20:50:8c:a6:60:7b:ae:c3:44:eb:24:
         71:ec:65:79:d8:d6:09:22:7c:4d:23:72:c3:3b:d6:56:b7:f6:
         8e:fc:7d:e4:46:67:e2:11:44:15:d4:13:d9:99:4d:79:6b:04:
         53:35:46:f2:c5:3a:37:a7:1a:b6:4d:9d:7c:60:79:3b:aa:64:
         95:e1:a1:e9:36:3c:05:0d:32:dc:8f:98:87:71:51:1a:60:30:
         64:b3:ba:d1:ef:54:7e:4f:1f:b6:f6:67:92:be:f8:f0:8a:73:
         42:29:1b:7d:59:d9:49:72:16:e8:c8:f3:0c:76:78:e4:c2:50:
         ce:57:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:42 2024 by rpki-client on console-fra.rpki-client.org