Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          3qXgS9WuLRtFMTulBLaPg1kBP4nR+OFzm+4LwgKjf58=
Subject key identifier:   B3:8C:FA:78:BC:3A:54:76:55:6E:53:DF:FF:F4:51:05:D7:E7:47:9F
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       1CD4A7941AC4A95E930D7A301ACD1542F2556870
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        2804:385c:a200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d4:a7:94:1a:c4:a9:5e:93:0d:7a:30:1a:cd:15:42:f2:55:68:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:ed:1f:be:59:03:8b:86:18:08:a0:f0:04:
                    a6:0e:ff:1d:49:b7:2a:63:cb:08:a9:ab:35:de:76:
                    2f:fb:5a:27:ae:40:6a:7b:d6:d1:66:c0:55:1a:b3:
                    e7:1b:56:5c:8a:6c:fe:4c:99:cd:46:21:a3:86:37:
                    61:75:af:9d:be:8d:16:77:14:46:6a:15:69:9f:25:
                    d1:35:48:36:c0:bc:80:f0:4d:54:b2:b1:16:f3:5f:
                    81:e5:a6:28:77:e6:1e:98:01:e9:80:84:2c:ff:f2:
                    7a:b3:11:ad:25:c9:48:6e:63:36:a4:46:74:d9:15:
                    f3:69:97:40:ab:c2:5a:4e:31:40:e6:26:7e:e1:17:
                    54:a0:43:53:26:71:90:1e:f9:a4:a7:4d:34:f0:2b:
                    2e:6c:61:5c:4e:0a:1e:00:0e:5f:3b:d1:b2:7b:4c:
                    63:e2:86:57:5a:b6:f9:79:1c:59:71:26:8b:56:ea:
                    28:89:67:a6:e6:16:d4:00:e8:f0:b3:44:12:4d:ed:
                    ca:14:6b:ed:c1:b1:db:63:62:e8:86:f0:ab:bd:90:
                    a7:43:d3:0c:d7:fd:0f:41:d6:a3:5e:12:46:32:89:
                    d7:ed:60:69:06:0d:2d:ef:70:3b:12:68:c5:1c:c0:
                    8b:77:df:dd:21:e2:9d:f9:fb:02:51:8d:0f:53:7e:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:FA:78:BC:3A:54:76:55:6E:53:DF:FF:F4:51:05:D7:E7:47:9F
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         27:82:0d:ec:e6:48:3b:ff:9c:e9:4c:9b:ef:cb:51:db:35:a0:
         43:02:42:aa:87:42:62:a9:2c:76:98:47:19:b2:77:9d:6e:65:
         7d:8b:d4:88:2a:f3:86:1b:43:fc:73:17:70:19:77:5c:a3:14:
         8f:84:b5:7f:b4:a5:ee:ac:7e:44:d7:6f:47:48:5c:97:a1:fe:
         81:65:fa:94:a8:84:94:d9:d2:aa:0c:6e:e8:1a:bc:be:17:0d:
         c0:88:85:da:cb:cf:4c:7e:c7:0e:09:75:7c:f4:e6:c3:4a:d3:
         63:1f:4c:84:60:89:92:99:41:e1:da:10:e3:45:a8:8d:65:cc:
         3b:13:d2:0b:88:6a:ab:04:20:ef:8e:f0:f1:23:e8:04:11:d4:
         31:72:8f:f4:57:cf:42:65:03:0d:07:aa:a6:74:71:c8:05:fd:
         1e:cf:63:95:c1:c0:84:1f:35:ee:c6:c3:1c:34:52:44:bc:eb:
         f7:8b:80:a3:ef:2c:2b:23:65:f1:4c:df:85:eb:be:e1:6c:6f:
         16:21:2a:38:9f:a0:60:36:af:f3:1f:8a:d0:68:88:75:d1:84:
         f1:94:44:e6:17:55:43:cd:1c:4a:10:b8:a0:7c:61:8d:03:74:
         59:ae:3d:1b:f8:d7:6d:d5:c9:5c:6d:3b:1b:c7:2c:e6:a3:4c:
         c0:97:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org