Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
File:                     323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (raw, json)
Hash identifier:          gPe2649M8kPKNGPd06qx+9h9omwnvSubzce/jPb18Bo=
Subject key identifier:   27:69:F7:6E:A8:9B:89:4D:06:6B:D4:CC:9B:70:4A:80:B1:AC:B1:F6
Certificate issuer:       /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial:       4EE55671BD00A91587A2EFF058AF5BDFE9E73855
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
Signing time:             Thu 04 Apr 2024 03:01:13 +0000
ROA not before:           Thu 04 Apr 2024 02:56:13 +0000
ROA not after:            Thu 03 Apr 2025 03:01:13 +0000
asID:                     269060
IP address blocks:        2804:5ed8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
                          rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e5:56:71:bd:00:a9:15:87:a2:ef:f0:58:af:5b:df:e9:e7:38:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
        Validity
            Not Before: Apr  4 02:56:13 2024 GMT
            Not After : Apr  3 03:01:13 2025 GMT
        Subject: CN=2769F76EA89B894D066BD4CC9B704A80B1ACB1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:ba:bd:52:75:2c:40:fd:2c:59:65:27:38:
                    21:49:e1:d4:72:fc:b4:04:66:96:4e:2d:6c:1b:7e:
                    34:eb:33:48:99:6b:94:11:ae:c1:a8:32:86:1f:dd:
                    57:16:68:e6:98:7b:7a:cf:d6:2c:dd:3e:e5:f0:d6:
                    8d:39:ed:a4:7e:8f:5b:27:8c:95:15:6f:ad:3d:d7:
                    f8:83:31:56:94:46:5b:18:80:e4:d6:1f:c3:13:f3:
                    43:97:b6:2b:ad:82:64:a9:28:ea:e5:38:7a:82:80:
                    6f:b2:97:8b:92:17:9e:f5:28:a6:9f:18:34:c6:56:
                    84:7e:bb:3d:b5:d2:58:ad:5d:66:66:68:6c:49:71:
                    86:80:78:0d:be:3a:84:9d:54:4e:be:2d:f2:6a:16:
                    f3:14:89:9f:13:86:16:fc:0b:fe:36:3c:5f:37:59:
                    a8:60:36:84:f5:77:5a:49:9d:03:16:0b:49:bc:02:
                    8f:c5:85:b3:e4:52:9f:86:66:fe:5a:2d:ab:4f:fe:
                    d4:11:b2:b9:cc:7f:bd:5a:55:c1:7d:cf:b8:cd:99:
                    3c:1f:fd:4a:5b:f9:1d:8a:ac:8d:17:da:da:de:6d:
                    94:a8:5d:25:6b:3d:df:e2:83:76:5a:0a:b8:21:ae:
                    fb:8b:66:03:57:79:31:a0:3e:1a:1e:f6:f9:5e:9a:
                    78:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:69:F7:6E:A8:9B:89:4D:06:6B:D4:CC:9B:70:4A:80:B1:AC:B1:F6
            X509v3 Authority Key Identifier:
                keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:9e:54:1d:6a:c8:dd:b0:f0:b2:db:d2:79:3c:ba:67:d4:
         bf:91:0b:7a:9b:8d:bb:48:46:da:ea:9a:5b:c6:2c:3d:88:1f:
         fc:72:6e:5c:4b:b2:36:43:45:c1:f1:1c:c1:63:be:3a:49:23:
         fd:1d:07:c0:ca:21:f2:fd:e6:e2:27:e3:eb:a2:7e:8a:2a:14:
         96:ef:33:3e:4a:3c:fc:8f:23:73:e8:7a:bb:e6:2f:87:8f:99:
         1b:c9:19:35:d8:ef:d8:55:ea:40:50:a0:58:b3:8e:60:6f:5c:
         0b:be:c1:44:ca:83:31:95:3c:2d:ba:a7:46:1f:06:01:5f:2b:
         09:79:b2:66:46:28:26:c0:68:f0:76:78:e2:a9:c1:64:cc:9d:
         ae:bd:85:22:37:ab:95:70:f8:34:74:18:c5:e7:c2:3e:6a:9e:
         52:25:39:19:9f:3d:ec:56:b9:1e:76:ee:e4:bc:de:eb:38:eb:
         16:e2:96:a2:87:5c:03:fa:ef:d5:41:00:90:4c:76:68:49:ea:
         6c:87:df:3e:d9:a3:94:d2:13:9f:78:55:52:3a:99:68:34:03:
         0d:c8:b0:3f:9e:a5:43:0b:70:c1:c4:4b:4c:13:86:91:29:de:
         a4:bd:7e:ca:48:66:45:11:cb:13:1b:9f:11:5f:2f:8d:09:18:
         38:5e:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:03 2024 by rpki-client on console-fra.rpki-client.org