Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          NXFakUG9Bw+Rn51mCwLJ8c+YyMsfCsS74E3cQfv5NDk=
Subject key identifier:   5B:48:D2:7A:B5:4F:9E:12:53:3A:BE:33:2E:99:0D:D5:63:40:8A:98
Certificate issuer:       /CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
Certificate serial:       6EDD6ABEADB2AD75598A9BEC84FB92033E5C64C1
Authority key identifier: 19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Tue 26 Nov 2024 01:36:55 +0000
ROA not before:           Tue 26 Nov 2024 01:31:55 +0000
ROA not after:            Tue 25 Nov 2025 01:36:55 +0000
asID:                     272581
IP address blocks:        2804:8578::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:11:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:dd:6a:be:ad:b2:ad:75:59:8a:9b:ec:84:fb:92:03:3e:5c:64:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19AD45DFBA69DF12C77C5A5DC9AE9962D686D775
        Validity
            Not Before: Nov 26 01:31:55 2024 GMT
            Not After : Nov 25 01:36:55 2025 GMT
        Subject: CN=5B48D27AB54F9E12533ABE332E990DD563408A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:11:cb:32:ef:7e:10:f9:65:02:5d:51:fd:
                    71:65:1b:f2:cc:5c:21:13:1a:86:80:da:82:58:f1:
                    ee:7c:cf:6c:02:0b:de:ee:66:f8:5f:ef:bb:42:77:
                    71:4e:e2:a9:1e:e8:db:05:b7:55:ff:78:80:c5:3d:
                    60:09:b0:6a:8b:7a:aa:af:8b:f8:61:e3:b5:da:b2:
                    14:47:17:b7:87:5c:4e:13:0c:8c:4d:44:3a:2d:03:
                    63:2e:43:38:3f:af:5f:98:c6:8d:75:d1:d9:e0:0f:
                    45:d9:8f:1d:8b:58:ba:bd:c2:55:30:89:51:05:f5:
                    22:26:65:8f:ce:2f:41:e8:de:ae:ac:31:0f:10:82:
                    47:10:8f:71:2a:62:b4:6d:be:5a:ad:08:15:4b:ad:
                    fc:96:dd:8c:87:54:70:1b:a0:6b:e8:74:fd:ec:da:
                    f8:dc:93:56:02:71:04:48:96:9b:d0:c0:c2:b5:da:
                    c0:c8:9a:55:95:cb:70:35:46:09:92:25:4d:f4:0d:
                    37:f3:6a:3b:1e:44:2a:8b:bc:fe:65:57:3c:59:c9:
                    9d:8e:8f:f8:ec:f2:9a:f6:4d:62:52:f3:36:96:a0:
                    c4:21:fa:88:96:78:f9:81:86:d8:2b:78:73:b8:1c:
                    85:77:8e:1c:8d:6e:90:bd:5c:84:f4:87:d0:7f:65:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:48:D2:7A:B5:4F:9E:12:53:3A:BE:33:2E:99:0D:D5:63:40:8A:98
            X509v3 Authority Key Identifier:
                keyid:19:AD:45:DF:BA:69:DF:12:C7:7C:5A:5D:C9:AE:99:62:D6:86:D7:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19AD45DFBA69DF12C77C5A5DC9AE9962D686D775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/1/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:5a:87:e7:ae:d4:f1:d4:73:f9:95:38:a5:0a:35:e3:a3:
         a4:26:9b:39:ca:4f:72:6f:25:a2:dd:95:78:06:11:72:2e:76:
         b6:9e:75:ba:f6:f2:c7:49:84:61:91:4a:da:b4:b8:12:82:03:
         06:28:a8:a8:a0:0e:b8:a4:04:7f:79:fb:05:a2:5d:00:45:28:
         2d:e9:95:ce:8f:78:44:5a:7b:71:60:f2:a1:96:b8:47:31:3e:
         e6:6e:99:88:0d:0b:bc:eb:1b:87:b3:2c:24:d6:59:8d:9a:d7:
         b6:ca:62:9f:1a:3d:79:d5:0d:e8:94:61:d3:be:7e:c5:f5:b1:
         15:fe:c4:5a:ff:fd:9e:8c:d3:7b:83:0d:0e:75:c7:69:7a:43:
         9f:4d:0f:92:71:dd:69:20:6b:59:68:46:0d:d9:b9:06:9c:5b:
         00:63:24:e3:d8:8f:17:43:60:01:33:f3:27:16:81:ba:ee:bd:
         f7:19:b3:5a:c7:af:b2:27:70:c7:60:ee:8b:a4:99:37:64:29:
         ed:66:18:e4:c3:1f:5e:95:75:15:6d:3d:11:c3:7d:95:ee:22:
         da:3e:fb:d0:52:00:5b:46:99:22:e1:74:eb:12:a0:72:55:81:
         29:26:c3:0c:15:25:79:b7:d2:2c:60:ee:87:dd:8b:f9:dd:41:
         07:d1:7a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:48 2024 by rpki-client on console-fra.rpki-client.org