Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          yOFdNt0aFIbDUOVrM52lJx0pzbS/9lV2qubWhKLJLkk=
Subject key identifier:   EF:31:BE:81:46:80:A1:D0:B1:C6:97:90:5C:04:34:32:B4:FA:79:78
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       0543E1EB0AB5F4FE0EAF0D3C2A26660DE279A1B0
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 03 Apr 2024 18:30:30 +0000
ROA not before:           Wed 03 Apr 2024 18:25:30 +0000
ROA not after:            Wed 02 Apr 2025 18:30:30 +0000
asID:                     2716
IP address blocks:        2804:0:5c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:43:e1:eb:0a:b5:f4:fe:0e:af:0d:3c:2a:26:66:0d:e2:79:a1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Apr  3 18:25:30 2024 GMT
            Not After : Apr  2 18:30:30 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:2f:f4:61:95:08:b1:1d:3e:d7:c9:9d:aa:
                    25:ad:c0:eb:3c:2a:67:03:0d:8c:78:c1:45:65:c9:
                    7f:e4:4b:d4:1e:ae:b1:ad:f3:da:6a:01:2d:f9:e6:
                    e7:1c:92:31:99:cf:43:3c:74:a8:d8:75:24:f0:f8:
                    cb:19:27:91:ab:60:78:0d:82:46:98:f5:75:c6:2f:
                    0a:e5:66:8f:bf:36:41:8c:59:93:95:b6:06:28:65:
                    23:1a:d4:99:cf:53:a8:0f:59:ab:56:ed:0f:dc:28:
                    ad:96:aa:31:dc:ef:fa:61:4d:13:ed:9c:21:62:6a:
                    a2:3d:d4:04:f8:ee:b7:44:f7:06:db:ac:e0:de:f1:
                    0b:a4:be:7c:f4:4e:f2:38:98:7c:28:f0:a9:35:e2:
                    be:f1:b4:bb:b4:67:f7:0e:6c:67:55:77:34:58:42:
                    f6:46:66:9f:19:6a:f4:62:9b:27:e0:36:26:7f:6e:
                    83:2f:77:4c:27:f1:a0:90:3d:2a:67:29:c8:91:ca:
                    5e:8f:72:4a:52:da:44:cf:75:37:3e:ad:ea:b4:51:
                    d1:97:97:a7:a6:bf:8a:e3:8c:16:7f:a4:45:86:d1:
                    d3:48:be:5c:7a:ab:6e:af:da:06:a6:3b:9c:ee:f2:
                    e6:2a:32:aa:27:ce:fa:05:9a:8e:2a:28:66:9c:37:
                    b1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:31:BE:81:46:80:A1:D0:B1:C6:97:90:5C:04:34:32:B4:FA:79:78
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a356330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:5c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:0e:2e:6f:3d:db:bc:3f:59:85:2d:14:87:b9:a7:db:9f:
         e9:eb:08:f5:ab:03:35:a7:c8:4f:35:a0:7d:a8:25:37:1a:77:
         bc:ca:77:60:b6:4c:be:ff:33:e2:91:5a:1b:ab:88:b4:dd:b0:
         db:24:a0:d5:85:be:b1:4a:ff:26:b1:73:eb:ae:78:93:d4:81:
         f7:f1:e5:dc:f7:7c:b5:e3:51:44:c5:67:af:f2:b3:04:c7:7e:
         43:40:73:41:ee:3a:fa:b1:93:9e:ab:67:e5:e0:9a:2d:2c:6e:
         73:9c:f3:f3:1d:e4:59:de:3b:ef:95:8d:58:03:8f:15:bc:8a:
         a0:62:33:2f:d9:de:94:0e:59:3c:03:f2:15:9d:0c:f3:84:01:
         95:ee:19:f6:9b:b3:0c:ba:6f:02:ba:83:98:7e:36:cc:27:0f:
         9b:0f:a9:f7:db:d1:8f:a2:4e:28:ec:c5:8b:d2:da:c3:51:0b:
         15:78:14:74:b2:ef:46:cb:98:ab:d7:c5:03:a7:c9:b1:34:0e:
         44:8d:eb:2c:49:c6:e9:ac:59:07:0d:c1:e5:18:9a:47:01:6c:
         80:a0:34:3c:a8:67:a8:b3:ec:64:6d:7d:e6:34:93:70:d1:5c:
         da:c3:45:f4:67:8b:d5:20:90:37:f2:43:ef:13:12:87:e4:ad:
         2f:e7:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org