Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
File:                     323830343a356130633a3a2f33322d313238203d3e20323638373432.roa (raw, json)
Hash identifier:          EHeQ/qWfE7aweK15K+irPSt+421eseRYpEmkvr0rs9Q=
Subject key identifier:   2B:26:54:75:E5:88:86:96:CF:72:DE:B2:A2:02:05:70:87:4B:93:09
Certificate issuer:       /CN=F753F4559D7D422450AFB88DE56CC42BC873A465
Certificate serial:       14C0875EB70157080B90AD15389C01214AE6780B
Authority key identifier: F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
Signing time:             Thu 04 Apr 2024 10:06:42 +0000
ROA not before:           Thu 04 Apr 2024 10:01:42 +0000
ROA not after:            Thu 03 Apr 2025 10:06:42 +0000
asID:                     268742
IP address blocks:        2804:5a0c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl
                          rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c0:87:5e:b7:01:57:08:0b:90:ad:15:38:9c:01:21:4a:e6:78:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F753F4559D7D422450AFB88DE56CC42BC873A465
        Validity
            Not Before: Apr  4 10:01:42 2024 GMT
            Not After : Apr  3 10:06:42 2025 GMT
        Subject: CN=2B265475E5888696CF72DEB2A2020570874B9309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e8:8a:87:85:23:97:cf:90:db:aa:13:06:3c:
                    a9:c4:e9:36:fc:99:e2:ce:04:2a:9b:8b:b9:39:e7:
                    cc:ef:fb:2d:a8:a3:74:8f:b6:a2:ff:96:5a:a7:da:
                    2b:30:56:6e:5e:d6:74:1a:a6:6a:2e:52:1b:6a:52:
                    95:00:09:8c:59:c0:50:28:f1:5f:bf:d3:55:32:ad:
                    17:00:73:c1:5d:fb:55:ce:52:f4:f2:3a:1b:4a:d0:
                    42:e5:ce:a0:01:b7:a1:3a:9a:e7:a5:2d:91:8d:69:
                    e3:ee:1f:ab:69:3f:7c:b4:a8:27:c4:8a:19:92:af:
                    65:e6:36:93:1c:b6:da:32:8d:f4:55:2e:4f:d7:a1:
                    07:c1:5f:18:9c:d3:f0:4d:a9:d8:1d:4c:94:2a:09:
                    20:63:8c:b7:83:10:45:20:f4:44:46:b1:72:04:fd:
                    da:02:e7:c4:4c:f3:bd:65:2a:22:aa:90:db:a5:2d:
                    4c:f9:01:e6:53:1c:c7:ec:44:71:d3:b8:06:2e:35:
                    99:99:08:1a:5f:0b:51:ef:81:42:e0:0a:3f:cf:d3:
                    23:b7:9d:3f:ab:22:d6:3b:0d:0d:8a:86:dc:df:9c:
                    58:a1:d4:71:98:e8:99:0e:31:bc:4a:10:bc:30:db:
                    7c:e4:01:ca:2e:b3:e4:01:fd:97:17:87:53:af:1b:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:26:54:75:E5:88:86:96:CF:72:DE:B2:A2:02:05:70:87:4B:93:09
            X509v3 Authority Key Identifier:
                keyid:F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:08:fe:af:e4:d8:65:b6:c4:aa:43:38:6f:49:8d:74:bc:
         66:bb:48:11:77:34:fa:13:a0:f3:42:d8:a4:df:80:c2:db:9c:
         c2:e4:cc:97:8d:d7:80:ed:75:ac:b5:5c:ca:8e:e1:26:46:70:
         a0:1e:cb:b8:6d:de:f3:01:c3:33:8d:c4:27:ec:8f:cf:e7:27:
         71:cf:09:33:ee:df:d8:78:b7:60:be:a7:ea:dd:6b:1b:03:f2:
         9e:0a:7f:47:57:a3:da:ef:8c:cc:95:16:af:b4:b1:c5:d9:12:
         dd:5b:2b:73:b7:be:88:fb:90:df:02:65:da:7a:03:b0:d8:00:
         01:e8:2d:f2:30:e9:83:ee:0f:50:77:96:27:cf:e1:c7:b7:85:
         cb:ec:79:15:4a:79:95:05:7f:c3:04:d1:91:4f:50:da:10:f9:
         a3:d6:9e:96:b7:a2:c7:77:51:c8:2f:d3:24:a5:77:54:43:33:
         a7:c5:ce:95:eb:23:30:e6:28:b8:69:a9:da:58:89:3f:4c:7d:
         17:b5:e9:b4:34:69:05:37:50:38:75:56:ae:df:1b:cf:96:24:
         66:59:1a:47:06:ed:ac:5b:d9:76:d5:27:f2:0d:34:25:6e:f7:
         0c:14:76:08:d4:70:3a:64:1f:eb:fa:53:da:bd:de:64:b7:d0:
         e9:60:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:40 2024 by rpki-client on console-ams.rpki-client.org