Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a3a2f33322d3332203d3e20323638383138.roa
File:                     323830343a356231383a3a2f33322d3332203d3e20323638383138.roa (raw, json)
Hash identifier:          4gRo6u/oWRQK9vYsFQDnJSa1suLb8/6UN0sHzMzhrrk=
Subject key identifier:   91:95:72:C5:2A:92:41:BD:F5:3F:E7:80:36:BF:18:39:94:11:17:90
Certificate issuer:       /CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
Certificate serial:       6E927A3D9EC6AD34C4E9DD5DC2013ED3E96FE094
Authority key identifier: C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a3a2f33322d3332203d3e20323638383138.roa
Signing time:             Tue 24 Sep 2024 13:22:00 +0000
ROA not before:           Tue 24 Sep 2024 13:17:00 +0000
ROA not after:            Tue 23 Sep 2025 13:22:00 +0000
asID:                     268818
IP address blocks:        2804:5b18::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl
                          rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 17:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:92:7a:3d:9e:c6:ad:34:c4:e9:dd:5d:c2:01:3e:d3:e9:6f:e0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4D5C5400FE83E14C685785FB1C216DAF000FF44
        Validity
            Not Before: Sep 24 13:17:00 2024 GMT
            Not After : Sep 23 13:22:00 2025 GMT
        Subject: CN=919572C52A9241BDF53FE78036BF183994111790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:67:92:72:b3:ac:da:62:8e:a4:25:81:96:
                    2a:99:41:d7:53:78:05:b9:ce:ee:d0:29:4c:a0:c2:
                    3b:7a:1b:47:68:5f:02:23:d9:96:70:a8:82:f5:37:
                    d6:ad:ff:d0:05:fb:6e:ad:b9:bf:77:89:45:ea:33:
                    34:63:0d:fd:c1:1c:51:a7:ae:cd:e1:6b:76:6d:86:
                    0a:5a:41:0e:b6:4b:c7:c3:f7:ad:ef:3e:e0:af:bd:
                    d0:a8:29:c2:d3:5d:fe:1d:8d:dd:4e:c4:d0:68:ae:
                    77:f9:0b:fb:52:1b:3b:6b:5c:b0:55:81:60:d1:28:
                    4a:db:22:2e:5c:41:d2:42:bc:5f:b3:98:74:06:70:
                    7e:ac:b3:09:37:58:d8:00:4f:bb:72:d0:6a:54:f9:
                    4e:e8:98:95:84:43:6f:34:47:b3:c7:44:08:a1:65:
                    1a:0c:51:25:20:46:1e:2b:42:a5:06:fb:54:41:f8:
                    de:ac:1b:58:c5:6d:a5:39:2e:4e:e3:11:31:96:84:
                    d6:89:a5:e9:22:09:39:ec:b4:22:08:32:2a:f5:91:
                    ac:29:f7:0b:34:53:9f:33:74:b2:05:b4:1c:0a:b7:
                    b8:4b:83:09:d5:91:63:64:ed:af:bd:95:76:bb:81:
                    b5:20:97:bb:46:d7:36:c1:ae:4d:20:e9:f4:03:ff:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:95:72:C5:2A:92:41:BD:F5:3F:E7:80:36:BF:18:39:94:11:17:90
            X509v3 Authority Key Identifier:
                keyid:C4:D5:C5:40:0F:E8:3E:14:C6:85:78:5F:B1:C2:16:DA:F0:00:FF:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/C4D5C5400FE83E14C685785FB1C216DAF000FF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4D5C5400FE83E14C685785FB1C216DAF000FF44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/323830343a356231383a3a2f33322d3332203d3e20323638383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:3c:da:24:f1:ff:4a:b6:be:83:91:00:c7:b4:a7:ba:37:
         02:a9:8e:39:b3:ce:fb:5f:04:e9:87:04:8d:30:59:91:e0:2e:
         3b:1a:34:ac:3f:6a:ac:f6:d0:a1:18:55:57:61:a9:88:48:f3:
         06:c7:df:db:66:37:96:f6:c8:3b:1f:7f:ea:20:84:15:db:0c:
         78:de:79:c9:b8:c2:f2:09:2c:53:35:08:90:e5:d8:f4:46:86:
         66:f0:d7:b0:c7:a8:b4:3c:3c:dd:ee:8c:1e:3e:0d:d3:5d:50:
         61:ad:a9:79:31:08:f4:54:4a:84:7a:2b:c8:f1:6f:07:f2:f9:
         67:24:1e:05:ac:92:71:3f:fe:29:75:95:43:6c:dc:ca:b8:99:
         ae:6b:30:34:4d:81:d0:d2:05:f1:44:ef:16:44:36:b1:52:3c:
         23:80:4f:4f:da:ee:55:29:33:a0:0f:3a:7f:02:5d:26:5f:06:
         85:56:cd:8a:bd:c4:58:a0:ce:81:44:7e:64:e9:d4:95:7c:f9:
         8b:38:76:3a:1e:f9:75:1d:bc:ad:b9:5a:28:36:dd:d5:0d:f2:
         76:8d:08:ac:95:91:11:22:04:97:db:2c:03:e0:7e:d2:ea:65:
         ca:f7:12:2b:a0:11:a6:cc:db:15:04:bb:44:19:a3:af:35:15:
         d9:b6:fe:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:54 2024 by rpki-client on console-fra.rpki-client.org