Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/323830343a356230343a3a2f33322d313238203d3e20323638383133.roa
File:                     323830343a356230343a3a2f33322d313238203d3e20323638383133.roa (raw, json)
Hash identifier:          dUwidzqOZ3cgRZBWP2yGTqRU4JHKLo9okj7kE6Ns8qo=
Subject key identifier:   BB:D0:27:7F:64:89:8B:93:34:87:BB:E6:E8:DF:30:4A:3D:79:7E:8C
Certificate issuer:       /CN=5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D
Certificate serial:       05BF231C5F8AC130BD3C710850CF584B36A46E45
Authority key identifier: 5F:04:F6:39:21:75:EA:3A:8A:E8:7C:BD:EE:F4:76:B0:C7:2C:C5:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/323830343a356230343a3a2f33322d313238203d3e20323638383133.roa
Signing time:             Thu 15 Aug 2024 16:42:49 +0000
ROA not before:           Thu 15 Aug 2024 16:37:49 +0000
ROA not after:            Thu 14 Aug 2025 16:42:49 +0000
asID:                     268813
IP address blocks:        2804:5b04::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.crl
                          rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bf:23:1c:5f:8a:c1:30:bd:3c:71:08:50:cf:58:4b:36:a4:6e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D
        Validity
            Not Before: Aug 15 16:37:49 2024 GMT
            Not After : Aug 14 16:42:49 2025 GMT
        Subject: CN=BBD0277F64898B933487BBE6E8DF304A3D797E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9b:43:e2:ac:4d:f0:5b:7f:0d:0d:7f:0a:79:
                    33:07:ec:7d:ff:7b:f5:3a:c0:e7:d1:fa:d3:34:d8:
                    cf:eb:e9:3c:04:5d:20:5f:99:a7:8f:6d:50:db:f8:
                    2a:90:fc:27:98:b4:16:b4:14:cf:99:9b:7e:9a:58:
                    cc:c0:56:0a:0c:b8:3b:1e:6a:3c:48:47:42:1a:11:
                    f4:fa:61:1c:bf:9b:ec:83:a9:9a:a4:3d:58:54:4e:
                    c7:4b:ef:36:c1:f6:bd:d6:e4:ad:91:47:e8:fe:cc:
                    14:91:66:84:85:2c:ba:61:c7:66:46:06:65:de:4f:
                    a6:1e:ee:92:1f:5d:93:a4:3b:a2:fa:6e:aa:d9:2f:
                    ed:d3:b7:ea:59:35:15:0e:91:94:47:2f:79:b8:f4:
                    69:33:bd:94:42:09:4a:7c:97:da:4d:69:f0:a7:42:
                    93:36:81:37:90:1f:90:9e:d1:e1:f2:49:f6:91:13:
                    71:10:c2:e4:0c:e2:0d:22:cc:54:fa:eb:d0:54:68:
                    9c:bf:52:d2:a1:b5:a2:7f:44:1f:4b:5e:ae:7b:58:
                    26:6e:d7:3f:41:ff:0e:ee:b4:7a:e2:f4:5b:f6:98:
                    13:5f:56:38:ff:ce:39:a0:97:87:25:2c:af:ac:d1:
                    03:47:94:3e:6a:99:b2:5f:c6:39:ba:c4:86:f4:0d:
                    1d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:27:7F:64:89:8B:93:34:87:BB:E6:E8:DF:30:4A:3D:79:7E:8C
            X509v3 Authority Key Identifier:
                keyid:5F:04:F6:39:21:75:EA:3A:8A:E8:7C:BD:EE:F4:76:B0:C7:2C:C5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F04F6392175EA3A8AE87CBDEEF476B0C72CC50D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WhVjMJ9E8rLxA5QnyjAuXBAnr7G1WBFdb1L6QNVNYFw/0/323830343a356230343a3a2f33322d313238203d3e20323638383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:31:26:78:cb:9a:96:c3:66:0b:68:c9:b6:cf:f3:6f:15:
         f3:4a:76:20:44:86:02:78:96:51:ac:3f:bd:28:12:9b:5c:43:
         5f:ad:2a:59:17:68:4e:31:f7:65:82:81:86:ac:d3:ae:1f:34:
         30:8c:54:d0:8d:cc:00:2a:fc:61:58:8a:76:98:19:03:00:99:
         01:81:81:5f:cd:8f:f4:7b:28:7b:2e:7a:7d:a9:66:f9:56:d8:
         27:03:bd:07:62:4a:8d:a3:5d:3a:e8:16:c7:cc:4c:5b:73:90:
         0f:44:08:10:da:75:40:12:91:b1:7a:4f:51:13:34:bb:6b:20:
         36:50:c1:08:53:d1:57:ae:af:c7:28:72:d0:0a:74:75:c4:c5:
         3c:5d:36:e4:21:01:7c:22:df:c9:c5:71:a2:1a:1b:92:b6:30:
         85:fa:5e:77:e6:74:8e:c6:99:ba:c0:f9:ce:1b:0d:47:a8:74:
         eb:de:6a:eb:39:b4:69:c4:ca:73:7d:13:db:86:ab:eb:7e:6d:
         50:e4:3a:f3:e2:4d:c3:d9:30:72:f3:3e:38:98:03:9b:9e:6f:
         9d:a3:9b:d9:25:c3:43:dc:c5:c7:1a:a5:d4:d9:f0:f1:42:81:
         5c:11:e7:25:8e:2d:51:3d:b0:66:b9:d2:b2:2e:c5:9b:82:64:
         7c:6b:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:12 2024 by rpki-client on console-ams.rpki-client.org