Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a633030303a3a2f33342d3334203d3e20323635313138.roa
File:                     323830343a326163383a633030303a3a2f33342d3334203d3e20323635313138.roa (raw, json)
Hash identifier:          ixinYI/NVB3cpAF1J52cbY4keVc3ZwrBeXBOwCxmdmU=
Subject key identifier:   7F:C2:5A:02:78:2B:5B:54:0E:A9:55:D3:37:B3:6B:62:BD:1D:FA:AE
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       6C725F6570B9E56EC8656DA553BD4D4770318C64
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a633030303a3a2f33342d3334203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        2804:2ac8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:72:5f:65:70:b9:e5:6e:c8:65:6d:a5:53:bd:4d:47:70:31:8c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=7FC25A02782B5B540EA955D337B36B62BD1DFAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:61:d3:45:e7:34:17:c0:23:06:cd:fc:2c:
                    f8:b3:c3:d1:1a:7c:a6:be:98:4e:ec:45:dc:90:f7:
                    c1:3d:18:be:7f:81:00:3a:f5:0b:3b:1e:e2:8a:a7:
                    8d:73:6c:ad:38:f9:1b:e0:a1:4e:06:12:e3:c7:2e:
                    a6:25:b6:9a:3a:71:95:61:e6:c8:2f:8b:49:e1:7f:
                    ae:2b:6c:e8:3c:8e:2f:1a:ed:38:f7:f9:a2:ce:c8:
                    4a:28:ad:53:64:7c:11:8a:59:51:2c:93:6b:43:5c:
                    32:2e:f3:c5:0a:bc:98:32:b3:56:d8:89:08:49:ae:
                    da:e7:4f:1b:45:ee:ed:26:b7:a9:db:87:92:f1:92:
                    fc:ec:00:74:6a:b1:31:05:e2:99:56:9e:65:89:fd:
                    e0:2e:44:03:1e:45:cb:76:dd:e9:4d:8a:65:f3:eb:
                    27:5d:4a:08:89:8a:fb:cf:8b:d5:91:aa:1f:7f:5c:
                    f5:70:67:a0:1f:2b:7a:d9:78:d2:e3:86:e1:49:44:
                    3c:a1:db:4c:c7:87:06:0a:81:3f:87:f3:07:ff:aa:
                    c3:59:c3:a9:34:d6:d5:44:c7:04:f1:42:2b:6b:e6:
                    47:00:7c:f1:35:d0:fa:b3:00:c0:8c:9f:a0:18:ac:
                    11:53:ce:32:dc:e6:c9:65:f3:e0:2b:4c:01:69:37:
                    53:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:5A:02:78:2B:5B:54:0E:A9:55:D3:37:B3:6B:62:BD:1D:FA:AE
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a633030303a3a2f33342d3334203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:b5:c7:99:3c:5a:ff:2c:6b:78:9e:47:6e:04:0f:44:af:
         94:24:73:1e:3c:a7:65:c5:f2:73:6e:79:1d:d2:e3:3a:69:3b:
         de:93:fb:36:9d:9d:22:30:39:07:30:bb:fb:4a:88:c3:17:39:
         89:90:02:8d:bf:b0:ea:df:17:3f:b8:11:11:59:68:50:92:2d:
         d8:99:63:15:7a:a7:75:cf:31:29:62:a9:8c:62:cc:68:34:39:
         b5:a5:c3:3c:85:f2:2d:36:d8:56:92:a8:79:6b:9a:a9:49:b9:
         b3:06:ac:9d:13:e9:1a:ac:d3:50:e9:a7:fd:62:70:1f:5c:15:
         ec:f0:b9:30:7f:7a:2d:ee:f7:7a:69:26:c1:c6:68:9f:08:90:
         c7:7f:b1:bc:1e:71:18:ab:b3:a3:b2:d2:44:2d:a1:81:2e:d6:
         7c:7d:0c:02:cc:ae:01:3d:66:df:b9:6a:a4:46:a1:d1:18:e2:
         77:9c:9b:ef:2a:b9:ed:24:61:80:7a:3b:08:06:21:30:ea:c0:
         7f:2b:85:1e:43:a6:ea:51:b9:09:fa:34:22:ee:02:9e:e3:c5:
         45:b2:f1:06:cf:77:13:0e:d0:2e:d7:b1:f9:19:50:c0:cd:91:
         67:12:cf:5e:24:65:c2:bb:5e:a9:51:4d:68:07:14:a8:c9:fa:
         a5:2c:f5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org