Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f34322d3432203d3e20323632343234.roa
File:                     323830343a363136343a383030303a3a2f34322d3432203d3e20323632343234.roa (raw, json)
Hash identifier:          FrHX4vFV0sStrRSebkppTtFIfObbZ5ey13pHZiMYoYw=
Subject key identifier:   EB:AB:2B:B2:EE:B2:EA:17:8A:82:04:32:28:E0:E0:C0:98:5C:D8:88
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       17224685D2847AFA95871C45BD9FD6CA83467FCC
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f34322d3432203d3e20323632343234.roa
Signing time:             Wed 15 May 2024 13:26:59 +0000
ROA not before:           Wed 15 May 2024 13:21:59 +0000
ROA not after:            Wed 14 May 2025 13:26:59 +0000
asID:                     262424
IP address blocks:        2804:6164:8000::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:46:85:d2:84:7a:fa:95:87:1c:45:bd:9f:d6:ca:83:46:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: May 15 13:21:59 2024 GMT
            Not After : May 14 13:26:59 2025 GMT
        Subject: CN=EBAB2BB2EEB2EA178A82043228E0E0C0985CD888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:77:f9:14:e3:8d:98:e7:08:44:50:0f:22:
                    4b:d1:36:98:8d:d9:07:2b:6f:a1:91:0c:26:58:83:
                    32:ee:d6:1e:6a:9b:d4:1d:83:d9:36:52:cb:06:02:
                    6e:b9:ca:3d:12:28:65:c0:1b:7a:64:b6:8e:66:a1:
                    41:f6:9b:15:64:7d:18:a3:09:97:0a:25:94:57:20:
                    20:e3:cd:7b:22:fd:b9:7e:59:f1:a1:a3:ef:a6:ab:
                    e3:6d:a2:9d:58:b5:8a:7c:87:cd:89:39:08:51:ee:
                    67:a0:ea:a8:33:ee:b9:a7:ec:4b:54:e3:6b:77:42:
                    0d:19:f8:c3:69:f5:cc:e6:09:84:19:2a:24:05:7b:
                    72:ad:c9:cc:bf:51:3b:a8:09:2c:9a:15:aa:e1:0c:
                    c4:f3:fe:35:9c:a4:b9:b4:67:2c:f7:22:34:99:7a:
                    69:18:60:7c:f9:c6:87:b7:59:00:e8:75:34:0d:16:
                    86:23:21:25:0e:64:85:e8:1d:86:81:d6:2b:d0:99:
                    6f:dd:33:1d:d4:6b:68:d0:51:e7:bb:72:0a:28:c0:
                    69:cd:dc:e7:d8:47:06:49:ea:e8:29:05:54:90:98:
                    64:86:a5:01:2b:1c:b4:b9:3e:30:79:b2:4d:52:0c:
                    b3:78:59:27:10:a4:e8:c1:6b:a3:52:a8:5d:be:d2:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:2B:B2:EE:B2:EA:17:8A:82:04:32:28:E0:E0:C0:98:5C:D8:88
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a383030303a3a2f34322d3432203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164:8000::/42

    Signature Algorithm: sha256WithRSAEncryption
         9f:5a:66:5d:e2:0c:67:52:64:ee:7b:1e:ab:bc:82:b0:30:57:
         b2:d4:f0:bb:de:61:b0:16:da:f6:4d:b9:19:c7:4e:08:67:6b:
         b0:a4:71:ab:98:85:88:fd:9b:21:85:5b:61:ff:75:da:f1:df:
         1c:fc:0e:d0:e9:a7:9d:2e:71:a5:6f:0d:31:7a:75:87:5f:97:
         16:0c:c3:95:95:98:ee:a0:a7:d3:0c:f4:ff:32:6d:4a:67:8e:
         4a:8e:a3:09:f3:77:6e:bd:79:2f:5a:1b:c1:64:78:33:c2:93:
         f7:66:c0:85:c9:ee:ab:11:86:f8:02:12:fc:d0:9c:4a:dd:a8:
         7b:f1:74:26:83:36:13:b6:aa:e1:52:3f:43:29:ba:b0:7c:6c:
         e9:90:a3:c2:b5:4f:97:4a:7d:1c:32:70:79:ca:ee:1c:4a:56:
         35:cf:20:11:be:8f:7a:40:47:e8:d4:1a:29:43:e7:3f:f4:d0:
         34:0c:1c:8a:6f:62:27:82:80:bf:29:e3:87:0a:d4:08:11:8c:
         e8:5c:62:a9:09:b0:5e:cd:d2:14:06:08:f9:aa:62:01:d8:fe:
         eb:5a:fb:c2:e6:0a:68:67:a9:c7:c9:08:b9:5b:f5:e7:4d:a1:
         00:e6:29:af:d3:95:bd:7b:54:d8:f4:d0:63:c7:b3:b9:cd:ec:
         42:fc:28:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:53 2024 by rpki-client on console-fra.rpki-client.org