Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
File:                     323830343a333730383a3a2f33332d3333203d3e20323636333835.roa (raw, json)
Hash identifier:          R8VV5VoPnStiiianWTX0iJbCI96jCgAGqnG9lVJM9Uk=
Subject key identifier:   6E:51:15:80:24:6F:1D:28:03:29:A1:87:93:31:E4:9C:38:E5:B5:E6
Certificate issuer:       /CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
Certificate serial:       552A02E3D9F4525764F551DFE6AB8F69507F12DE
Authority key identifier: F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa
Signing time:             Thu 04 Apr 2024 14:29:41 +0000
ROA not before:           Thu 04 Apr 2024 14:24:41 +0000
ROA not after:            Thu 03 Apr 2025 14:29:41 +0000
asID:                     266385
IP address blocks:        2804:3708::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2a:02:e3:d9:f4:52:57:64:f5:51:df:e6:ab:8f:69:50:7f:12:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F46A2096A87B370AAA2EF6D4E17D40495F76D350
        Validity
            Not Before: Apr  4 14:24:41 2024 GMT
            Not After : Apr  3 14:29:41 2025 GMT
        Subject: CN=6E511580246F1D280329A1879331E49C38E5B5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:34:ee:79:e2:9d:f6:95:02:30:39:bd:21:39:
                    72:2c:21:d4:e0:85:54:0b:b4:6f:ce:64:2f:95:a3:
                    c0:f6:bb:f4:e2:37:19:96:d7:10:74:1a:53:a1:e4:
                    97:4b:7a:a4:30:55:d9:88:17:db:ce:38:23:c8:ae:
                    22:a7:3b:dc:74:5d:58:46:6c:a5:1a:32:04:67:0b:
                    3e:d2:03:40:65:f8:b5:f8:52:a2:2b:61:1e:05:17:
                    95:e9:21:da:14:63:82:31:14:e3:8a:6b:cb:59:2c:
                    f7:ef:5c:3e:aa:7b:b1:d6:f1:a1:65:5c:01:f3:fa:
                    b0:87:24:3f:96:80:32:40:2e:a4:ae:42:02:b7:f1:
                    dd:86:6c:1f:a3:01:c2:78:1e:5f:cc:d6:6d:e8:2e:
                    35:eb:d2:6b:d0:0a:26:d1:46:c7:67:37:90:1f:84:
                    34:aa:28:b2:b8:84:e2:90:e2:f9:c3:79:2a:e5:42:
                    ec:19:c4:82:7c:ea:5f:46:70:f4:2c:32:9a:26:b5:
                    6e:8f:d7:2e:5d:ef:8a:95:81:f9:28:c1:20:63:a8:
                    f9:93:7f:6d:43:2c:9d:0a:7b:57:13:9a:be:08:1f:
                    83:52:68:1d:36:62:ed:90:87:fc:98:98:58:33:c4:
                    c6:0a:96:a1:f6:e6:5f:b7:0a:d6:2e:0c:e4:e7:6a:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:51:15:80:24:6F:1D:28:03:29:A1:87:93:31:E4:9C:38:E5:B5:E6
            X509v3 Authority Key Identifier:
                keyid:F4:6A:20:96:A8:7B:37:0A:AA:2E:F6:D4:E1:7D:40:49:5F:76:D3:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F46A2096A87B370AAA2EF6D4E17D40495F76D350.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/1/323830343a333730383a3a2f33332d3333203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3708::/33

    Signature Algorithm: sha256WithRSAEncryption
         0e:cf:23:78:40:63:cd:73:17:48:f8:16:4d:97:13:c6:f1:16:
         f4:1a:65:f6:bd:04:10:5f:08:b0:0c:8d:93:24:49:c3:9b:5c:
         2d:02:c3:87:20:d0:c1:6b:ad:00:4b:f4:4a:c0:69:bc:7a:1f:
         9f:8c:8d:33:36:ad:11:fa:bf:8d:67:6c:56:37:06:8f:98:d7:
         57:6e:e8:ff:1c:dd:91:11:91:97:42:df:47:af:e2:6d:a3:f9:
         46:00:a7:ee:9d:63:8a:75:c9:07:26:42:36:9d:df:41:cb:03:
         24:67:6a:b1:15:89:0b:19:a2:c0:ad:51:b8:5c:65:10:18:52:
         f0:82:a4:97:68:c4:f0:0f:0a:92:76:6f:85:a6:5f:4c:46:1e:
         7e:93:e4:a6:26:c0:c7:00:46:26:e0:6d:89:7e:58:10:e4:62:
         3f:3c:4e:d6:b4:37:2b:8f:d3:f4:70:8b:4e:00:5e:f8:83:63:
         02:91:35:17:1d:4d:cf:c3:f2:7e:9d:22:cd:65:1a:83:5d:16:
         06:5f:dd:0c:71:97:87:61:13:5b:b1:43:44:ba:8b:6c:b1:1a:
         c9:99:77:ae:43:7e:98:16:d9:4c:81:1e:4f:f7:b3:3d:0e:56:
         97:1e:06:69:75:91:bc:5b:10:28:ec:68:fd:d0:59:8c:5c:ae:
         7c:9b:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:22 2024 by rpki-client on console-fra.rpki-client.org