Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa
File:                     323830343a343939383a3a2f33322d3438203d3e20323637313932.roa (raw, json)
Hash identifier:          maJByziqaqOqDnx//Paa3td4tSZYTT9l8Y4uimnrJUI=
Subject key identifier:   E4:31:EC:78:BD:B1:EB:C9:05:1E:53:5C:DB:25:49:FC:E3:56:7D:55
Certificate issuer:       /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial:       0A2CB2ED23C3E05A4AD209CC8C05B1817ECED05E
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa
Signing time:             Wed 05 Jun 2024 19:31:53 +0000
ROA not before:           Wed 05 Jun 2024 19:26:53 +0000
ROA not after:            Wed 04 Jun 2025 19:31:53 +0000
asID:                     267192
IP address blocks:        2804:4998::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl
                          rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2c:b2:ed:23:c3:e0:5a:4a:d2:09:cc:8c:05:b1:81:7e:ce:d0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
        Validity
            Not Before: Jun  5 19:26:53 2024 GMT
            Not After : Jun  4 19:31:53 2025 GMT
        Subject: CN=E431EC78BDB1EBC9051E535CDB2549FCE3567D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7c:0b:7c:46:b9:ea:a1:48:25:3a:80:00:85:
                    8d:2e:85:42:91:2f:c1:0d:bc:43:17:b3:44:f3:b4:
                    64:e0:44:2b:11:3c:aa:9d:b8:d5:0d:e6:53:c1:da:
                    5d:96:bf:de:ee:ce:9d:af:e3:27:a4:67:2d:7f:5f:
                    66:44:60:44:2f:4f:c7:52:77:dd:bb:b1:0a:7d:1b:
                    d3:44:3d:be:8d:bd:17:b1:63:1f:0c:3d:65:ed:f4:
                    39:76:4b:44:7b:ab:0d:56:85:05:e8:56:bd:ed:67:
                    bd:92:b8:ef:b0:2b:57:57:42:0c:31:65:3e:72:b4:
                    7c:12:8d:02:64:f7:ec:53:6c:01:34:e7:e2:30:51:
                    20:4a:70:32:72:8b:da:b5:35:6b:fe:74:1c:e1:d0:
                    ee:9c:da:1f:f9:31:9f:ff:40:66:ea:96:d5:97:e6:
                    39:14:36:93:b6:3a:fc:4a:eb:3d:b9:b7:0c:a8:2c:
                    84:29:38:cc:78:75:19:70:e4:7c:6b:db:44:f1:fd:
                    48:6e:04:d2:78:e6:3a:e1:b5:af:eb:7d:53:e7:f7:
                    21:79:40:a9:3c:ed:fa:e1:3e:20:28:e5:b5:4c:15:
                    02:b0:fd:58:8d:f8:88:b6:e9:32:78:69:b0:8b:16:
                    86:a1:0b:ac:f8:2b:04:03:85:8c:e1:54:e1:66:c3:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:31:EC:78:BD:B1:EB:C9:05:1E:53:5C:DB:25:49:FC:E3:56:7D:55
            X509v3 Authority Key Identifier:
                keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4998::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:fd:b4:16:01:44:42:f2:ad:ca:81:7d:40:77:1b:1d:2d:
         0a:02:f9:b6:2d:47:cd:fd:f5:99:0a:a5:03:da:33:bc:1d:35:
         4f:89:7a:42:92:41:b9:51:4d:6e:23:d8:d9:89:25:6d:64:50:
         e3:53:9e:30:82:3f:b9:66:93:37:61:fb:26:08:2d:0a:5f:37:
         a1:65:5d:7d:34:e5:43:e6:83:c5:a4:05:78:3b:3e:86:f3:33:
         db:f5:54:7e:4b:c1:67:30:32:8b:dd:d4:a8:02:83:67:5d:56:
         17:66:ab:fe:da:4f:37:c1:9c:bb:e6:b3:a5:79:d5:66:d8:21:
         63:eb:58:e3:c9:eb:37:18:de:5b:b8:ee:df:b5:9d:66:8c:70:
         b2:fe:aa:f9:e6:aa:56:e7:28:6f:da:b6:0b:aa:90:6b:6d:fe:
         43:c4:a7:e3:a6:08:ff:e1:92:58:f2:1a:2b:00:de:41:44:98:
         22:82:fe:c3:61:af:cf:b4:46:20:d3:6e:bd:56:cd:73:c2:5f:
         3a:a8:2a:ba:90:1f:8d:7d:b9:94:2d:be:5f:7b:4a:84:d4:76:
         fd:79:7b:57:56:d8:ef:34:2f:07:b1:9a:51:29:59:2f:58:1e:
         10:0b:1b:d8:c2:28:0e:71:6e:7f:c5:62:7d:6e:9e:fb:d9:1e:
         57:bf:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:11 2024 by rpki-client on console-fra.rpki-client.org