Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/323830343a366266303a3a2f33322d3438203d3e20323730343335.roa
File:                     323830343a366266303a3a2f33322d3438203d3e20323730343335.roa (raw, json)
Hash identifier:          wLUYKS8UL9XCU9ThmyIn6aGc3wP5TDcxuz784Qrdavc=
Subject key identifier:   FC:23:AC:68:0B:F2:A7:55:EA:0A:27:96:23:BB:5C:BC:EB:8F:CA:3D
Certificate issuer:       /CN=5DE550D452A79633C6AEF9931F09B9424440FD65
Certificate serial:       2778D6CF3A55FABCC5F58645F4CFB4B18240B91E
Authority key identifier: 5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/323830343a366266303a3a2f33322d3438203d3e20323730343335.roa
Signing time:             Mon 29 Apr 2024 12:42:23 +0000
ROA not before:           Mon 29 Apr 2024 12:37:23 +0000
ROA not after:            Mon 28 Apr 2025 12:42:23 +0000
asID:                     270435
IP address blocks:        2804:6bf0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.crl
                          rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:78:d6:cf:3a:55:fa:bc:c5:f5:86:45:f4:cf:b4:b1:82:40:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DE550D452A79633C6AEF9931F09B9424440FD65
        Validity
            Not Before: Apr 29 12:37:23 2024 GMT
            Not After : Apr 28 12:42:23 2025 GMT
        Subject: CN=FC23AC680BF2A755EA0A279623BB5CBCEB8FCA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:c6:90:59:ff:a7:99:49:d8:a0:2a:c8:4e:
                    c9:b0:9e:76:6b:35:3d:ee:f0:06:8c:01:7a:ef:e8:
                    84:43:ae:37:47:2f:b7:4b:d5:77:4a:b8:ff:86:60:
                    7f:9d:20:a9:9e:42:41:8f:fb:86:4f:1a:21:3e:d6:
                    fd:ee:28:b0:28:b7:d3:7c:e2:a2:49:b6:12:ac:66:
                    92:2a:eb:71:bf:33:e6:6b:75:66:8d:76:22:d9:51:
                    13:7a:c7:0d:48:f6:d6:ae:6f:fc:ed:25:c6:08:1a:
                    36:14:f5:ca:01:20:15:b6:c4:39:3e:8a:76:60:68:
                    2b:fb:31:3a:6c:2a:7c:4f:5b:f8:35:77:82:b0:f1:
                    9e:79:bc:22:29:e0:38:a5:4f:97:cf:d2:e4:64:78:
                    26:e7:db:1c:92:a8:59:9c:0d:5e:fd:2b:59:f0:3c:
                    2a:9f:de:ad:5e:1e:ea:fa:9d:e1:bc:9c:14:38:74:
                    80:af:fd:f5:a8:34:e6:b5:8f:d1:db:53:c5:e3:ef:
                    67:a1:a5:af:98:ee:8d:6a:31:2d:b1:4c:5f:c9:c9:
                    7a:84:b0:f9:00:65:ed:a3:e8:03:f9:35:3c:ac:b4:
                    77:c8:bc:ea:26:43:1d:35:1e:24:dd:82:25:fb:fb:
                    d0:12:27:f2:f7:4b:0c:35:2d:1f:27:1e:9f:da:66:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:AC:68:0B:F2:A7:55:EA:0A:27:96:23:BB:5C:BC:EB:8F:CA:3D
            X509v3 Authority Key Identifier:
                keyid:5D:E5:50:D4:52:A7:96:33:C6:AE:F9:93:1F:09:B9:42:44:40:FD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/5DE550D452A79633C6AEF9931F09B9424440FD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DE550D452A79633C6AEF9931F09B9424440FD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xiU6jtWXc2744UUSgeYQ9WiuKZ4tyn3adD1sJoFSgVq/0/323830343a366266303a3a2f33322d3438203d3e20323730343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bf0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:2a:34:04:40:21:63:95:e1:c8:57:20:34:60:2e:b8:70:40:
         89:80:83:98:0e:d3:e1:f6:d1:14:ff:04:67:46:df:cc:52:69:
         e3:ae:b2:72:6e:3b:85:0f:ad:e3:0a:12:9d:0b:d8:3c:d7:76:
         a3:48:4a:83:8e:bf:f8:0b:a0:37:af:e5:f1:6d:09:c8:99:5c:
         9a:55:bd:b4:71:5c:23:c3:9e:71:01:59:74:d7:ab:bc:83:2d:
         67:c8:17:0d:e3:53:2f:3d:6e:2b:fb:d6:63:05:70:c0:c3:4b:
         89:1d:b8:0e:93:c6:c5:70:6b:fe:ae:cf:a5:68:3c:81:77:95:
         a6:b6:dd:97:ff:68:1f:01:08:ad:ee:f5:f6:84:eb:56:06:6d:
         31:fb:43:b7:2f:51:67:ad:7d:59:69:51:d2:e4:2c:38:0c:59:
         38:aa:04:8b:45:4b:43:5c:d8:48:ed:5c:c4:08:5f:b8:7f:86:
         8f:17:2b:4b:a6:49:6a:c9:97:e3:33:aa:d8:10:e2:3e:29:66:
         b1:03:5d:2c:54:ae:e1:06:b1:81:11:20:da:04:19:96:b6:72:
         f4:80:9e:f3:4d:74:a5:80:38:7d:ff:aa:6e:b8:f6:3a:c5:95:
         ea:3c:a2:52:fc:88:08:bb:ee:4b:24:b5:83:5f:69:3b:0d:f4:
         50:98:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:05 2024 by rpki-client on console-ams.rpki-client.org