Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33322d313238203d3e20323636303135.roa
File:                     323830343a333932383a3a2f33322d313238203d3e20323636303135.roa (raw, json)
Hash identifier:          cVdd8iheHo2+VF1/h/+bsnvVWWZ+pq004ZLroK7EFvA=
Subject key identifier:   F8:64:6A:3C:9D:30:26:71:61:E4:CB:E6:36:B0:07:42:ED:2E:16:F7
Certificate issuer:       /CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
Certificate serial:       217D6BDF550D335187A8FD9109135583B1EEF088
Authority key identifier: 54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33322d313238203d3e20323636303135.roa
Signing time:             Sat 04 May 2024 00:18:27 +0000
ROA not before:           Sat 04 May 2024 00:13:27 +0000
ROA not after:            Sat 03 May 2025 00:18:27 +0000
asID:                     266015
IP address blocks:        2804:3928::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl
                          rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7d:6b:df:55:0d:33:51:87:a8:fd:91:09:13:55:83:b1:ee:f0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A
        Validity
            Not Before: May  4 00:13:27 2024 GMT
            Not After : May  3 00:18:27 2025 GMT
        Subject: CN=F8646A3C9D30267161E4CBE636B00742ED2E16F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:48:d9:52:f0:1e:35:0b:4b:ba:f0:c2:2c:
                    9a:e6:4b:cd:f4:4c:1b:93:44:28:09:04:7c:82:00:
                    f5:b9:30:8e:fc:e8:0f:ca:f5:2f:c1:5f:5d:2c:b6:
                    09:4c:47:d1:50:23:b9:bc:09:f5:b1:dd:c1:c9:0b:
                    16:41:ba:47:2a:ba:6f:37:db:c2:75:4e:e1:a6:c2:
                    1e:32:ae:99:a4:ef:86:c9:30:84:e4:5b:00:8e:5e:
                    9f:59:24:b9:fd:07:df:4a:b6:fb:4b:ef:74:9c:c8:
                    92:4f:15:d6:a4:11:85:f6:b0:73:97:3b:59:89:aa:
                    b4:dc:c9:d7:fa:d8:0e:45:17:a9:59:76:59:fa:6e:
                    8c:0e:9c:59:d7:cd:06:db:7b:ef:b9:94:08:55:79:
                    bb:88:63:c9:34:44:9e:2d:3e:3f:71:67:b1:f3:ea:
                    f4:98:96:e3:a8:3d:e4:72:db:bf:a8:e2:a6:62:2c:
                    2c:5a:ed:38:b7:8f:2f:29:61:76:ca:26:f0:89:1b:
                    4e:38:44:1a:21:e5:c1:1b:e7:11:c4:95:4b:c8:d5:
                    09:4d:3f:59:c5:3b:e2:74:9a:05:df:66:b1:23:c2:
                    b2:1d:7e:30:7f:8b:1a:97:82:9a:4f:18:71:de:73:
                    0d:7a:e2:f2:c6:3e:1c:82:35:8c:a8:cb:57:79:a7:
                    b9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:6A:3C:9D:30:26:71:61:E4:CB:E6:36:B0:07:42:ED:2E:16:F7
            X509v3 Authority Key Identifier:
                keyid:54:65:48:55:AF:7A:47:FA:3E:E5:E7:AF:D4:22:FF:D3:DB:BF:EC:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54654855AF7A47FA3EE5E7AFD422FFD3DBBFEC4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9cPhEsLV31oW43EVaQ4h8zL83dKarAppxgfLKdY92reN/0/323830343a333932383a3a2f33322d313238203d3e20323636303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3928::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:b2:cd:47:8c:96:6f:28:84:c5:64:62:59:5f:ca:c1:57:
         69:50:5a:b9:15:2b:58:02:d2:d0:dc:e2:ee:fb:03:07:43:9b:
         58:72:a4:22:57:56:24:a3:51:30:4d:e9:1c:df:9a:05:c1:73:
         ae:00:d9:bc:c0:44:d1:fc:cb:70:ec:e8:33:a4:3d:55:60:10:
         96:68:f5:92:5d:d0:23:0a:b7:36:10:b8:52:3d:3d:12:85:bb:
         39:0d:97:39:49:34:2c:cc:9c:a1:48:c9:04:b0:c3:34:aa:25:
         ca:3a:ec:05:01:bd:18:a7:65:21:2e:f8:32:58:8f:0b:c9:86:
         d8:91:f4:94:7a:f5:ac:f5:77:8f:38:9c:34:4f:82:5b:b4:a5:
         09:53:3a:d9:ae:63:dc:40:c9:80:a5:ed:2a:1f:b6:f3:bb:a2:
         bf:ce:ba:a9:4d:07:fd:fc:85:e2:d7:44:4d:cb:b1:c1:6d:f6:
         a2:39:03:1e:e1:39:51:63:a7:c6:08:e5:eb:0e:1c:ae:d0:33:
         c2:d0:f1:ea:95:98:48:f9:ff:f5:53:63:fa:0f:a5:34:b9:e6:
         ec:9a:5d:5e:8c:07:f4:48:8c:0b:9c:f0:31:1f:1f:37:34:34:
         c1:a2:5c:99:7c:da:d5:51:77:da:fd:bc:9c:20:a4:cd:0f:ef:
         2d:92:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:05 2024 by rpki-client on console-fra.rpki-client.org