Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a343030303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          5QcRW4wgrMoEyQ1dduTmtcDPBuRoH6J35ZJWmeabjkk=
Subject key identifier:   77:69:0C:7A:94:0B:BC:90:32:93:5B:4E:64:4E:15:CF:78:D3:68:56
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       79054370DA158FC03171F3011490877263EA9BCE
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:43 +0000
ROA not before:           Wed 15 May 2024 13:21:43 +0000
ROA not after:            Wed 14 May 2025 13:26:43 +0000
asID:                     262424
IP address blocks:        2804:6164:4000::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:43:70:da:15:8f:c0:31:71:f3:01:14:90:87:72:63:ea:9b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:43 2024 GMT
            Not After : May 14 13:26:43 2025 GMT
        Subject: CN=77690C7A940BBC9032935B4E644E15CF78D36856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:55:df:e5:84:8a:8f:b4:1b:c4:3c:22:5b:43:
                    23:e8:e0:df:47:ce:25:be:b5:9c:58:98:95:90:5e:
                    ee:65:57:f7:fb:60:60:a7:d9:31:21:fe:c8:fc:2e:
                    62:06:a6:2b:9b:13:a1:b7:ad:90:d9:1b:f1:ca:76:
                    eb:46:26:02:11:47:ff:ad:d3:a8:46:15:3d:e6:6f:
                    72:8a:5b:f5:68:a3:5c:f9:b5:fe:66:78:b1:2b:65:
                    ab:8b:55:1a:16:f1:a9:1c:83:58:01:14:25:8e:b4:
                    30:04:c0:fe:88:de:ef:fe:e6:c8:fd:4f:d5:c4:90:
                    96:b5:39:3f:36:de:87:c4:b2:99:cf:c5:4a:2d:03:
                    cd:e2:55:06:e4:0d:f9:fb:88:5e:e1:dd:0e:90:e0:
                    76:98:b5:74:a1:ec:1d:8c:30:85:c3:a4:ed:8e:b2:
                    68:55:a4:9b:1d:ef:9e:3e:29:ec:07:12:7f:e5:13:
                    84:39:34:4e:66:ce:78:22:55:ac:72:a1:1e:e3:5a:
                    cb:42:a7:31:1d:3d:0c:c1:52:ac:22:33:74:02:ef:
                    18:1b:94:a8:8a:ff:1c:67:f1:59:17:3d:79:d5:70:
                    17:b9:da:83:81:d7:27:4c:a9:39:96:d6:82:9d:d8:
                    61:85:67:1d:96:ca:66:83:0f:20:ef:cd:11:57:cd:
                    91:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:69:0C:7A:94:0B:BC:90:32:93:5B:4E:64:4E:15:CF:78:D3:68:56
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a343030303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:4000::/42

    Signature Algorithm: sha256WithRSAEncryption
         91:32:6c:0f:ae:1c:aa:75:27:c7:87:b6:ba:54:78:9f:43:23:
         7b:6e:94:19:83:3c:ae:ff:61:1d:23:f0:58:12:ed:4f:0a:e4:
         af:34:1a:35:df:5b:2c:b6:cd:b0:db:a7:b4:f1:46:db:6d:41:
         4d:b1:81:6d:44:48:7d:bf:f5:f7:da:55:1b:06:23:11:74:1c:
         27:dc:7f:04:67:fa:20:c6:08:00:18:00:37:48:4c:00:c8:bc:
         68:a0:8b:b3:ba:ab:e0:66:e5:6c:65:c6:05:34:72:e9:9e:a8:
         49:8c:00:f9:2a:9f:5b:d5:6b:58:c4:04:ca:2a:b4:b5:6e:77:
         a6:08:17:9b:ba:91:f1:b0:9f:cb:41:e6:ef:83:f2:54:8a:82:
         0b:6a:74:41:9d:23:9f:34:be:c5:e8:66:60:93:d0:8b:35:53:
         b5:b5:52:d5:e4:3b:3a:23:a1:43:70:5f:09:65:de:87:88:d0:
         42:57:57:f0:47:b2:74:96:bd:70:be:12:b3:c1:98:97:39:00:
         c3:e9:a2:af:b2:95:47:68:a4:4f:da:67:1e:2e:98:27:6c:b0:
         d8:0a:c5:a2:72:20:d8:0d:06:4d:e5:61:f4:89:64:a0:03:53:
         36:41:d1:b7:a4:e9:92:00:19:bf:86:78:d1:03:67:1d:69:b2:
         5d:02:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org