Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          dNKq+Q0fJzLHRG7GrJE+IBYo1Lfh4j18Tz5xs0fYrkk=
Subject key identifier:   AE:44:17:57:D9:EC:03:69:AD:C2:23:C5:F3:4B:F7:08:5D:DA:C4:5B
Certificate issuer:       /CN=513CE4A81796F944497410B832C764D2FEF2E43A
Certificate serial:       77801042F7840EECB9F98EE698CA2AE2658ABC47
Authority key identifier: 51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 02 Oct 2024 14:58:25 +0000
ROA not before:           Wed 02 Oct 2024 14:53:25 +0000
ROA not after:            Wed 01 Oct 2025 14:58:25 +0000
asID:                     264344
IP address blocks:        2804:2674:5202::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:46:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:80:10:42:f7:84:0e:ec:b9:f9:8e:e6:98:ca:2a:e2:65:8a:bc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Validity
            Not Before: Oct  2 14:53:25 2024 GMT
            Not After : Oct  1 14:58:25 2025 GMT
        Subject: CN=AE441757D9EC0369ADC223C5F34BF7085DDAC45B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:9d:08:93:48:e9:a6:c3:1f:d4:0a:a1:9a:
                    90:bc:7a:a0:cb:74:92:36:7b:ef:ab:6d:31:a1:eb:
                    7d:c3:8e:e4:47:73:5d:51:64:47:63:af:14:c6:34:
                    43:b1:a2:79:3c:31:51:68:ca:89:16:64:6d:cb:a2:
                    6a:bd:b3:a7:53:20:83:e9:75:61:a6:33:52:cf:2a:
                    b4:16:7c:43:bd:7d:b0:5c:ea:a4:36:c5:a5:4d:2d:
                    e0:aa:dd:30:bb:0f:0b:e4:69:86:62:56:a9:4a:35:
                    7b:f2:c7:f2:a7:82:bb:33:d3:74:4a:d7:ae:64:72:
                    57:c2:41:9d:0b:89:40:50:b9:c9:4c:df:fe:87:cd:
                    4a:7a:ed:af:8d:72:04:aa:6c:4b:48:5f:70:97:f1:
                    e8:1b:dd:aa:ef:d2:bf:bc:de:53:14:79:2b:a9:4d:
                    9c:73:98:d7:fa:3e:22:6a:fd:05:a7:aa:17:7e:85:
                    28:71:da:ca:8f:14:91:20:e0:ed:5a:16:de:25:29:
                    ab:68:8d:81:c9:aa:9b:6c:c9:0d:aa:69:70:b5:4f:
                    eb:cf:ae:77:7c:f3:68:bf:3c:80:c7:b9:fd:92:14:
                    1e:39:a0:86:a3:59:ab:5e:3f:0c:60:c4:33:60:f8:
                    ac:93:a6:c4:0b:e8:2b:df:e0:04:58:5e:26:46:39:
                    5e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:44:17:57:D9:EC:03:69:AD:C2:23:C5:F3:4B:F7:08:5D:DA:C4:5B
            X509v3 Authority Key Identifier:
                keyid:51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353230323a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5202::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:82:ea:1b:f4:f1:ee:76:9d:6c:27:96:57:7a:7a:02:4e:06:
         40:4d:65:78:7a:48:8c:0a:85:3b:90:dc:92:5d:f6:60:ad:a0:
         0c:b2:78:30:aa:fc:3c:7e:b4:7c:e9:1d:a0:72:e8:a1:c6:79:
         ef:80:6b:e0:e9:87:29:8a:da:e0:9a:a9:a0:18:4e:a5:75:63:
         d6:b9:24:a3:23:bc:76:a2:49:ee:1f:d4:d0:0b:8f:6f:7b:41:
         1f:06:03:d0:e7:52:16:50:06:71:34:0f:e4:e2:56:4c:0a:2a:
         5b:5e:3d:04:0d:73:9e:f1:76:77:32:66:48:56:74:e8:b1:cc:
         71:5a:db:22:70:d6:68:26:5b:17:f9:47:9d:de:79:87:f3:68:
         ec:d0:ec:0a:08:bb:0b:c0:70:2a:3f:eb:65:ff:d1:85:87:44:
         0b:47:c5:b4:27:57:17:ce:34:b9:d9:35:95:d1:a2:7f:90:c5:
         68:df:c6:90:ba:5c:5e:b4:17:6d:90:20:58:a1:d8:34:15:a4:
         f0:ce:a7:57:00:54:a7:48:08:11:a7:d5:0d:7a:3e:0d:e0:63:
         30:bb:f7:52:65:ba:64:39:cf:ac:d3:e7:eb:10:bb:cb:b7:8a:
         8b:73:23:81:be:a9:67:7f:71:87:4c:91:62:c7:13:44:6c:9b:
         7c:89:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org