Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a363030303a3a2f33362d3336203d3e20323634313639.roa
File:                     323830343a323338633a363030303a3a2f33362d3336203d3e20323634313639.roa (raw, json)
Hash identifier:          lUSF3n6Jb519fnNfL2UQdHN+OrUnB1rPVtStHxEtZJw=
Subject key identifier:   4C:A3:61:53:31:6D:61:A1:FC:2D:C0:6A:83:3E:4A:06:1A:14:90:EF
Certificate issuer:       /CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
Certificate serial:       3BC84DE4C619B5EDE0BFE6640E6877B9CB75D790
Authority key identifier: 5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a363030303a3a2f33362d3336203d3e20323634313639.roa
Signing time:             Tue 06 Aug 2024 13:30:27 +0000
ROA not before:           Tue 06 Aug 2024 13:25:27 +0000
ROA not after:            Tue 05 Aug 2025 13:30:27 +0000
asID:                     264169
IP address blocks:        2804:238c:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl
                          rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c8:4d:e4:c6:19:b5:ed:e0:bf:e6:64:0e:68:77:b9:cb:75:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0
        Validity
            Not Before: Aug  6 13:25:27 2024 GMT
            Not After : Aug  5 13:30:27 2025 GMT
        Subject: CN=4CA36153316D61A1FC2DC06A833E4A061A1490EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:45:9e:61:ce:67:59:04:4c:55:8b:4e:9a:
                    5c:02:23:18:f5:f5:41:22:87:ae:2b:f4:cd:57:57:
                    17:6e:4c:d6:1d:83:f3:f7:0f:d9:29:74:82:bc:cc:
                    41:2c:ac:15:39:11:a1:73:7c:88:1b:f1:fc:c7:e3:
                    54:56:11:e7:21:f1:23:1f:3a:56:12:e4:b7:1d:a4:
                    76:57:3b:0a:62:d7:47:74:c7:f2:50:b0:32:b5:96:
                    30:6f:8c:dd:6b:c8:b7:52:84:74:af:f7:6a:ed:71:
                    74:29:9a:8c:95:76:01:3b:47:8a:0c:fb:59:7d:2e:
                    ab:f2:be:45:ee:e5:bc:a8:5e:4c:14:10:1a:89:1a:
                    af:c8:41:d4:24:4e:b9:23:fc:4d:3b:45:e5:3e:1d:
                    58:4e:d9:9a:49:1b:b5:d9:f3:72:1e:cc:33:2e:ba:
                    b7:40:15:02:c6:86:fb:cf:1c:77:7f:1d:a1:01:12:
                    33:4c:a8:af:61:50:83:f0:fa:8b:58:cb:b7:ca:f8:
                    85:d6:d4:22:13:26:67:3b:09:18:2f:06:98:3f:32:
                    d6:12:28:9b:a9:91:55:9f:de:72:43:6c:4c:b9:b0:
                    d2:26:d1:9a:68:68:30:36:8c:c0:91:49:c1:18:82:
                    14:80:4e:a9:10:8e:66:c5:8c:92:3e:a4:67:79:aa:
                    cb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A3:61:53:31:6D:61:A1:FC:2D:C0:6A:83:3E:4A:06:1A:14:90:EF
            X509v3 Authority Key Identifier:
                keyid:5A:F4:46:A4:5A:8A:EE:66:A2:1D:74:E9:82:C7:2C:D4:B7:B2:2C:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AF446A45A8AEE66A21D74E982C72CD4B7B22CE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JsnPmVqgdzc82XoVcXv4fTKf9RQizdDzSPercHMXnYh/0/323830343a323338633a363030303a3a2f33362d3336203d3e20323634313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238c:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:95:b9:a1:c4:97:88:43:26:e3:18:31:ee:58:2e:08:aa:
         2e:f1:69:48:86:0a:68:ce:c6:f4:2a:f9:14:eb:c4:7a:55:f3:
         3b:10:14:44:68:78:02:cd:9e:93:50:3e:24:28:18:f9:21:ed:
         a3:59:a9:96:d8:b3:67:6b:b6:86:aa:20:f3:17:b9:8c:24:08:
         c0:ea:96:43:da:9a:ce:16:62:1a:97:a8:6e:73:57:b7:1a:ef:
         fd:74:dd:d3:f3:c0:54:fe:d1:59:80:a8:41:e1:b8:75:6a:6c:
         29:e9:80:d1:04:18:f8:d6:2d:e3:38:da:56:45:13:2c:ff:7e:
         4c:a0:b9:a7:90:20:fa:7e:e1:d1:23:1f:34:25:a2:02:a9:8c:
         8f:8b:b8:f4:ee:7f:d5:f6:70:5f:c5:14:1a:ad:53:31:06:db:
         d0:56:80:97:ff:8d:b9:d0:2e:0e:14:52:c9:e4:6f:ad:15:f9:
         d6:c1:38:26:72:90:c3:2c:38:56:8e:a7:f9:46:f9:4f:b8:a0:
         88:5a:bb:a0:74:81:2c:c7:34:66:74:8a:32:c2:8f:b8:d8:dc:
         33:3a:5a:ac:c5:80:86:48:f7:f1:ad:a1:b3:42:eb:7b:e1:42:
         ff:cf:8f:9b:76:63:84:98:ea:d8:7a:12:97:f8:e6:12:d2:ae:
         25:70:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:32 2024 by rpki-client on console-ams.rpki-client.org