Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161383a3a2f34362d3436203d3e20323637323138.roa
File:                     323830343a346131383a616161383a3a2f34362d3436203d3e20323637323138.roa (raw, json)
Hash identifier:          ixfB8zWMtlby3xQJaNAbOLHg5Y4hOWdPehdf5UwHfZY=
Subject key identifier:   62:AC:38:55:8F:75:AB:AB:8D:77:C4:D0:09:8C:96:99:87:CB:2F:37
Certificate issuer:       /CN=FCE673648244EB441465D6651FC7A10BCB1109BE
Certificate serial:       4CBB4B41AEC4E8FDDBD4E3698CF247D9E3C89151
Authority key identifier: FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161383a3a2f34362d3436203d3e20323637323138.roa
Signing time:             Thu 29 Aug 2024 11:46:32 +0000
ROA not before:           Thu 29 Aug 2024 11:41:32 +0000
ROA not after:            Thu 28 Aug 2025 11:46:32 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaa8::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl
                          rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bb:4b:41:ae:c4:e8:fd:db:d4:e3:69:8c:f2:47:d9:e3:c8:91:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCE673648244EB441465D6651FC7A10BCB1109BE
        Validity
            Not Before: Aug 29 11:41:32 2024 GMT
            Not After : Aug 28 11:46:32 2025 GMT
        Subject: CN=62AC38558F75ABAB8D77C4D0098C969987CB2F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3f:87:dc:a8:2b:93:fb:57:1f:ce:59:3d:e3:
                    f3:c0:2a:9b:b2:72:7c:ca:23:af:cf:62:41:ca:31:
                    d8:3a:72:77:e6:f7:dc:24:46:56:d8:31:1f:89:a9:
                    6e:07:38:ce:36:16:03:8e:38:c4:8b:a7:ca:23:a9:
                    84:22:03:0f:54:37:d3:98:db:0f:08:7d:0c:b4:2a:
                    41:e4:68:11:1d:e2:b1:6b:c6:be:82:e9:a8:cb:26:
                    e1:3a:72:c3:f7:21:0f:f6:a0:13:e8:07:12:97:32:
                    71:be:d6:e8:7c:8d:0f:4b:15:76:3c:5b:20:66:c6:
                    4d:8f:f3:2b:71:52:a8:b9:60:26:64:cf:16:69:75:
                    59:06:86:b2:89:49:df:67:ae:88:e9:f5:62:29:1b:
                    ff:53:9f:b7:6d:c0:a0:37:4f:03:d5:db:19:19:af:
                    44:eb:bd:25:22:b3:bc:5b:51:dc:19:68:a8:9d:b5:
                    52:a1:99:f9:99:64:8f:4c:e3:32:53:8c:56:76:e5:
                    26:7e:e0:23:98:d0:b9:f9:e0:a5:04:d5:b5:44:22:
                    26:2c:f9:2b:1c:d4:92:19:81:d7:ef:f2:55:34:fd:
                    03:e8:0d:1f:12:7d:43:ac:14:8c:00:fd:99:73:d0:
                    4b:9b:23:62:70:ac:a9:e6:72:a3:ba:af:a8:cf:57:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:38:55:8F:75:AB:AB:8D:77:C4:D0:09:8C:96:99:87:CB:2F:37
            X509v3 Authority Key Identifier:
                keyid:FC:E6:73:64:82:44:EB:44:14:65:D6:65:1F:C7:A1:0B:CB:11:09:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/FCE673648244EB441465D6651FC7A10BCB1109BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE673648244EB441465D6651FC7A10BCB1109BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/1/323830343a346131383a616161383a3a2f34362d3436203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaa8::/46

    Signature Algorithm: sha256WithRSAEncryption
         4f:19:51:8a:da:39:6d:64:bb:8f:cc:79:52:b6:2c:f1:0c:45:
         87:91:cd:c9:c1:fe:3c:60:04:90:41:05:04:40:12:8f:e1:be:
         5b:9f:c9:9e:4e:8c:d6:ac:ee:83:e1:61:e5:3a:5c:ae:b2:d7:
         d9:c5:f1:fd:61:68:11:9c:ba:28:c1:ca:a3:d1:48:0f:04:26:
         33:f9:bb:a2:83:3a:ec:43:83:41:f3:a9:ca:74:a7:2b:ba:e4:
         64:21:38:fa:ee:4c:b6:fb:25:cb:8c:ec:cb:31:ef:8e:d3:97:
         49:a6:d1:ce:0a:e0:03:b3:7e:04:ea:f1:a8:53:b1:57:43:e1:
         ae:2d:cb:a4:7b:dd:04:0e:18:56:15:da:67:26:c4:91:02:09:
         c2:7a:28:39:f2:dd:85:dd:fe:61:59:53:f9:bd:f0:66:e8:5a:
         8a:6f:26:27:d5:30:8f:60:4f:f2:5f:1a:93:8f:ba:56:cd:12:
         50:4c:06:01:e6:5f:52:99:6d:9d:a6:aa:fa:a7:a3:c6:76:97:
         44:ea:54:39:5d:eb:f9:3b:14:98:27:41:4f:a6:89:27:ad:12:
         b5:bb:20:9c:9d:68:9c:7b:ec:af:14:c2:32:e5:43:db:2d:e1:
         b1:95:3a:1e:f5:23:c6:d0:5f:c6:0f:f7:fc:29:06:72:f2:27:
         61:a2:ae:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org