Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/323830343a386165303a3a2f33322d3332203d3e203631363130.roa
File:                     323830343a386165303a3a2f33322d3332203d3e203631363130.roa (raw, json)
Hash identifier:          herW+ECqeSNCRj0Yt6UgukJdz6dZ8aaSZXJuUq5ht/Y=
Subject key identifier:   41:95:F7:1C:AC:2B:46:6D:03:6B:6E:A7:EF:6B:AD:73:B1:DF:37:A2
Certificate issuer:       /CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2
Certificate serial:       533B7EE46705934F5385B6AD5C91E1A34FFBD755
Authority key identifier: 5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/323830343a386165303a3a2f33322d3332203d3e203631363130.roa
Signing time:             Thu 04 Apr 2024 00:15:24 +0000
ROA not before:           Thu 04 Apr 2024 00:10:24 +0000
ROA not after:            Thu 03 Apr 2025 00:15:24 +0000
asID:                     61610
IP address blocks:        2804:8ae0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:3b:7e:e4:67:05:93:4f:53:85:b6:ad:5c:91:e1:a3:4f:fb:d7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2
        Validity
            Not Before: Apr  4 00:10:24 2024 GMT
            Not After : Apr  3 00:15:24 2025 GMT
        Subject: CN=4195F71CAC2B466D036B6EA7EF6BAD73B1DF37A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:fe:9b:c9:0d:66:f8:58:2d:f6:5c:d6:5e:
                    68:ce:02:e1:d5:88:78:2c:3a:b1:1b:f0:fc:80:75:
                    45:4e:4b:ce:6d:c5:f5:88:da:bf:a4:c3:e2:b4:38:
                    4f:4d:d6:8c:d6:fb:e6:17:31:a2:d8:3f:0d:7b:bd:
                    05:ce:49:2f:d2:48:b8:96:0d:83:4c:74:fb:d2:f5:
                    02:6b:3a:8d:9a:4c:64:7b:e6:6d:66:7b:14:1e:0a:
                    4c:27:2a:1d:70:0b:71:c7:67:85:1c:ef:5a:a0:6c:
                    d0:4c:a5:8e:27:67:73:52:2e:ff:17:1f:8d:b7:9e:
                    cc:3a:6d:47:71:45:44:04:bd:ac:d4:cf:33:36:78:
                    6d:45:61:cc:66:92:f4:20:fc:80:d4:5f:be:1a:3b:
                    8f:ec:db:df:55:2e:32:43:9d:4a:aa:e7:b6:31:59:
                    ab:6f:54:5b:24:ad:db:4e:21:bb:db:10:16:24:18:
                    d7:77:6c:15:bd:b6:c6:58:ba:9c:6d:23:8c:df:16:
                    07:06:22:13:7f:93:fd:f7:1d:3d:61:9f:ef:9d:fe:
                    20:53:00:60:5d:ff:34:11:b8:d6:b1:ea:35:6c:6c:
                    bd:1a:0e:48:fe:a0:24:d9:8f:c2:a8:b6:4a:b4:85:
                    c9:e8:bf:18:57:13:ac:42:87:52:38:38:e0:2c:99:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:F7:1C:AC:2B:46:6D:03:6B:6E:A7:EF:6B:AD:73:B1:DF:37:A2
            X509v3 Authority Key Identifier:
                keyid:5A:68:B8:8E:02:7E:5A:12:DC:69:EA:EA:AC:20:11:ED:1D:28:25:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A68B88E027E5A12DC69EAEAAC2011ED1D2825A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/1/323830343a386165303a3a2f33322d3332203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:a9:0a:a5:d7:77:e4:02:24:90:6d:b4:a2:25:ce:09:e4:9b:
         b3:c3:25:35:e9:66:7a:ea:78:33:5a:17:7b:05:96:78:92:02:
         49:a7:d3:89:7d:e7:f0:16:50:38:2e:dd:6a:74:d4:d5:23:48:
         6b:2c:03:83:01:8b:4f:86:8d:f2:6d:2f:81:0c:ae:2a:ca:96:
         93:4c:31:d2:20:85:2f:f0:dd:e5:79:69:ee:79:a2:ae:44:75:
         1b:94:76:10:fa:e9:bf:4b:82:7a:9a:6a:57:aa:62:34:44:0e:
         ba:f6:f8:3b:26:d0:c8:aa:13:a0:f6:a4:26:f1:45:13:7a:ce:
         8e:52:2b:21:80:61:63:01:42:9d:1a:d7:be:dc:16:a1:30:ac:
         4d:36:7a:1b:fa:6d:8b:10:b0:7e:66:2c:2b:95:02:d2:b3:4f:
         22:bf:d6:bc:8c:e1:e3:c4:5b:d7:66:17:46:77:72:dd:8d:66:
         80:78:7d:a9:52:55:25:01:e7:fb:74:cb:5f:c4:d9:5b:c6:c5:
         e8:6e:e9:91:f9:ac:8a:9b:a6:db:94:79:7d:3f:21:cd:8e:6f:
         f0:ac:03:e7:f6:87:7b:9d:65:95:18:b9:70:d8:99:0e:14:43:
         f1:7d:c6:ac:0f:2a:8f:2c:4a:1f:6c:07:1d:8e:9f:ae:55:e9:
         ea:c3:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:53 2024 by rpki-client on console-fra.rpki-client.org