Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33322d3332203d3e20323732353831.roa (raw, json)
Hash identifier:          Wq5jaV9km2d/PogeOG/PNKOjbytmJU52AFWG1r5dGLA=
Subject key identifier:   D5:83:4C:BF:74:66:03:8E:7F:1B:68:78:C1:99:1D:29:4B:68:64:9F
Certificate issuer:       /CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
Certificate serial:       0B1F6FAA5C1CFD2BB9216CB88A59386A1BD65FDE
Authority key identifier: 19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa
Signing time:             Tue 26 Nov 2024 01:36:56 +0000
ROA not before:           Tue 26 Nov 2024 01:31:56 +0000
ROA not after:            Tue 25 Nov 2025 01:36:56 +0000
asID:                     272581
IP address blocks:        2804:8578::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1f:6f:aa:5c:1c:fd:2b:b9:21:6c:b8:8a:59:38:6a:1b:d6:5f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
        Validity
            Not Before: Nov 26 01:31:56 2024 GMT
            Not After : Nov 25 01:36:56 2025 GMT
        Subject: CN=D5834CBF7466038E7F1B6878C1991D294B68649F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:88:82:18:bf:d0:df:df:86:9c:4d:6a:82:
                    60:e3:1c:59:44:6e:14:ff:6b:ce:26:c6:a0:6c:28:
                    29:ef:f5:7f:0b:6b:c0:7f:12:cf:52:72:1a:8a:76:
                    e5:75:7a:21:f9:3b:31:5d:94:ca:cd:fb:50:97:b8:
                    0b:c6:82:c1:e7:18:22:9d:ff:ae:96:e0:54:47:2e:
                    35:75:f6:06:d4:95:6b:c2:5c:41:df:43:84:04:8f:
                    b4:05:49:b6:83:ec:a0:fd:ff:1f:47:be:b4:8d:3d:
                    c6:82:21:80:02:05:3a:53:bb:62:33:df:13:53:9f:
                    7e:35:d5:54:99:59:74:c4:d0:6d:55:b4:38:3f:88:
                    d5:df:0f:bb:05:4d:30:f4:a7:1c:30:5d:cd:f9:6e:
                    fe:f0:96:c1:cf:e7:eb:f1:d9:e9:1a:92:49:4b:e5:
                    f6:84:56:e9:6c:16:0e:84:73:d4:c6:94:ae:61:07:
                    43:d8:c1:0c:a6:75:3d:ba:5f:a5:da:87:a1:25:4a:
                    c8:07:9b:9f:d3:fe:94:46:90:2a:0f:62:ee:44:d7:
                    66:5b:d4:e3:13:f5:29:0f:f0:86:65:48:1a:26:ab:
                    8a:e8:3e:cc:3e:e0:b2:ad:6f:c2:69:24:0e:7a:31:
                    37:88:97:de:7e:91:56:9a:e2:b1:54:c0:15:80:e3:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:4C:BF:74:66:03:8E:7F:1B:68:78:C1:99:1D:29:4B:68:64:9F
            X509v3 Authority Key Identifier:
                keyid:19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33322d3332203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:89:b1:7e:6a:02:c2:ba:35:3d:58:b8:a2:cb:55:25:33:d0:
         98:f3:07:03:f6:8f:76:bb:cf:35:04:a7:61:73:91:fc:3e:23:
         e9:2f:6e:87:fc:63:b2:71:7a:43:7a:39:4f:3b:c3:20:93:45:
         f0:cd:41:26:f6:52:8a:a1:40:41:2b:9f:3c:b5:ae:d5:02:d5:
         2c:50:db:20:9e:f5:35:96:41:0f:7a:a5:76:10:b4:6c:4e:ee:
         d2:f6:8d:44:cf:c9:fe:67:d2:7c:f5:24:6b:80:ad:85:e1:bf:
         73:d1:49:cd:34:9c:61:2c:be:6f:75:13:0e:6d:e4:af:78:98:
         d2:e5:ec:45:58:9f:08:ad:76:8d:8c:e1:9f:b5:be:aa:ee:f0:
         72:ca:ca:4e:f9:e1:53:6d:72:91:81:b6:4b:4d:8b:e7:66:d6:
         5c:81:a2:c4:9f:f8:da:be:b4:51:94:48:94:2e:a1:9a:81:d0:
         a7:93:57:25:35:a0:f5:57:af:70:fc:9b:73:93:a2:ab:27:0b:
         21:f0:23:ae:b0:f8:cd:22:a1:22:0a:81:2b:c4:a5:23:3b:bf:
         94:da:4e:53:21:38:b7:88:09:92:e9:3a:42:d2:04:20:26:0e:
         85:40:1b:68:20:fa:93:9e:72:bf:72:6e:c2:de:12:db:bb:89:
         1b:de:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:34 2024 by rpki-client on console-ams.rpki-client.org