Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/323830343a313836383a3a2f33322d313238203d3e203631393330.roa
File:                     323830343a313836383a3a2f33322d313238203d3e203631393330.roa (raw, json)
Hash identifier:          RsRtf2ay6CL5DDLfZOor9gt6DUeTw8jItXLOYBp1hgo=
Subject key identifier:   B4:F3:46:D8:73:D3:33:0F:EA:EC:69:55:28:D6:E6:37:D1:03:1C:C9
Certificate issuer:       /CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
Certificate serial:       136B4D9CFCCDCF2F386E93DF2D1E671E4F710B64
Authority key identifier: 49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/323830343a313836383a3a2f33322d313238203d3e203631393330.roa
Signing time:             Fri 16 Aug 2024 18:09:32 +0000
ROA not before:           Fri 16 Aug 2024 18:04:32 +0000
ROA not after:            Fri 15 Aug 2025 18:09:32 +0000
asID:                     61930
IP address blocks:        2804:1868::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl
                          rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:4d:9c:fc:cd:cf:2f:38:6e:93:df:2d:1e:67:1e:4f:71:0b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4959F557EDB40C3E3B7D450A5F4FE57884600618
        Validity
            Not Before: Aug 16 18:04:32 2024 GMT
            Not After : Aug 15 18:09:32 2025 GMT
        Subject: CN=B4F346D873D3330FEAEC695528D6E637D1031CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:01:de:6f:4e:ad:1c:0c:5e:ed:3e:4c:c1:
                    3d:0a:32:db:dd:46:a9:90:a7:b7:30:21:78:20:0a:
                    15:6a:fa:e8:53:f9:9a:11:97:db:5d:5c:f1:2a:bd:
                    c7:28:43:2c:3e:49:6d:78:a0:4e:2d:5f:79:36:1d:
                    91:27:7c:15:ca:70:ab:60:4d:f6:cb:3c:a1:ee:e6:
                    b8:7b:95:02:f3:a8:ca:ca:a9:c4:19:10:a2:5c:55:
                    4a:09:1e:24:83:9c:3d:59:ee:f8:28:7b:db:eb:c6:
                    99:d2:4b:1c:ac:46:c3:2c:d1:ff:4e:37:1c:66:0b:
                    58:00:03:bb:31:95:df:ed:6c:38:36:8a:d2:d4:dc:
                    b8:92:42:8f:57:7c:b4:61:0b:5b:72:b1:e2:ef:fd:
                    dc:3e:a8:64:bf:24:47:7a:05:de:85:f3:44:24:a8:
                    3e:02:e2:0a:8b:ef:9d:2b:4a:b4:09:ea:50:8b:44:
                    c2:32:2b:82:65:5e:02:14:63:ea:4a:ba:1e:3a:f8:
                    0b:7f:51:ed:39:fc:a4:02:f0:da:2d:76:c2:c6:7a:
                    1d:31:63:f5:39:9b:18:65:03:c8:75:3a:da:14:ce:
                    b8:96:b5:c1:62:6c:73:76:5b:5c:ee:29:35:0a:23:
                    30:f1:75:c1:e7:b1:3a:a1:24:71:d1:b6:51:07:fe:
                    66:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F3:46:D8:73:D3:33:0F:EA:EC:69:55:28:D6:E6:37:D1:03:1C:C9
            X509v3 Authority Key Identifier:
                keyid:49:59:F5:57:ED:B4:0C:3E:3B:7D:45:0A:5F:4F:E5:78:84:60:06:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/4959F557EDB40C3E3B7D450A5F4FE57884600618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4959F557EDB40C3E3B7D450A5F4FE57884600618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vrYj1X3PgHbcX9GeJx7rAnA66e8KK7gMRd9xEiV7bJu/0/323830343a313836383a3a2f33322d313238203d3e203631393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1868::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:a2:fc:84:cb:d4:74:f9:84:bf:8e:58:85:72:be:41:29:
         1b:49:2f:ad:c6:06:42:11:a0:e5:79:41:a1:ce:dd:f5:71:26:
         f7:11:7a:6a:91:e0:d5:c4:e4:ad:ca:86:08:9e:b6:51:f7:fc:
         34:d1:3e:de:0a:c3:a2:45:be:2c:dc:b5:94:aa:0b:60:04:f4:
         cd:e4:17:08:fb:d4:51:f6:6e:dc:29:00:81:47:54:0b:22:f3:
         2d:d2:51:2a:ef:39:8d:4d:f3:85:28:cc:39:65:a6:ac:08:db:
         e0:6f:ce:e8:cc:38:f4:18:3b:8d:06:f7:26:9b:60:51:97:28:
         2e:10:bb:d2:03:65:05:80:f8:79:c8:6b:4d:df:d2:76:28:ad:
         1b:c7:89:57:c6:74:49:51:16:ac:df:b4:89:1c:e9:00:32:af:
         70:bc:f9:d2:b9:0f:2f:e5:e0:bd:c7:41:24:b4:19:7c:f6:61:
         aa:cc:b9:fe:df:13:b3:f8:fa:b4:10:45:da:f1:b1:ce:03:5a:
         4d:31:9b:33:57:c2:51:4e:52:69:af:66:32:ff:2b:5f:23:bb:
         3c:c5:6e:b4:0c:85:2c:1c:67:25:37:62:e0:a2:fe:34:9f:ed:
         ec:a1:ee:db:95:56:0e:78:f7:a5:1a:cf:a8:07:da:82:46:e2:
         c6:0b:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:04 2024 by rpki-client on console-fra.rpki-client.org