Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          cDtB5bb/brxj2aSc46NSADbd22Nvzcv2mrAohGlg8XQ=
Subject key identifier:   06:F4:CE:5D:84:16:05:38:5C:20:BE:8E:6B:DA:2E:49:67:95:11:7F
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       516786733CB388E560A33EE1773D3CDD2B195B19
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     264311
IP address blocks:        2804:25f0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:67:86:73:3c:b3:88:e5:60:a3:3e:e1:77:3d:3c:dd:2b:19:5b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:30:45:b5:8f:bc:4a:83:55:87:26:dc:1b:
                    af:e1:48:8c:e6:77:80:ba:da:ef:ff:25:4b:f2:ff:
                    4d:a0:87:f7:21:88:55:90:86:55:ea:df:39:63:e0:
                    90:dd:ab:1c:da:af:4c:00:e4:21:84:36:a1:41:d1:
                    a0:f3:0c:0d:22:c7:e0:c6:b0:7f:35:c0:f1:ae:8d:
                    44:82:cd:75:b3:54:70:5a:39:43:4f:2d:0b:95:2d:
                    24:4e:ce:1f:c2:09:7e:e3:be:45:c3:86:cf:41:da:
                    46:6c:32:d0:84:0d:d2:e1:90:db:a2:48:a9:e2:77:
                    2c:c4:ef:0a:79:70:60:ab:d7:89:25:f8:af:3d:24:
                    1e:67:9a:57:23:ea:58:e6:2d:82:c4:6d:31:9e:f5:
                    f8:1e:1d:0e:47:dd:69:59:00:24:fc:62:c4:d2:d3:
                    18:95:e7:70:53:86:9a:d5:50:67:56:7a:c0:e1:30:
                    9c:1f:49:c1:2d:db:16:8b:5e:20:4e:67:a7:1a:b1:
                    38:65:10:b1:4f:bb:c0:aa:6a:51:17:51:bc:c1:58:
                    56:c3:da:eb:7a:cb:9c:be:07:29:bc:09:ee:e0:ac:
                    f9:d3:ee:b0:52:e0:86:2b:36:c3:ca:95:9e:91:1f:
                    fd:5a:a4:00:db:19:f8:27:50:f3:00:17:e4:fd:b0:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F4:CE:5D:84:16:05:38:5C:20:BE:8E:6B:DA:2E:49:67:95:11:7F
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a383030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:0b:c8:bb:60:51:ae:8d:df:77:32:b2:c6:5b:06:e3:94:
         e5:2c:da:76:a9:e3:24:0c:ae:99:3f:0c:db:91:c1:f3:5a:f1:
         8e:cf:c8:81:c5:0b:e3:40:58:33:60:67:cf:b3:cf:09:0a:ed:
         7c:bf:e1:10:c1:08:7d:c5:7b:0d:39:11:6e:26:5a:11:2c:43:
         af:16:93:d3:2f:a8:f9:4e:75:aa:9f:68:9e:7b:bf:be:5a:16:
         e8:91:08:e9:0b:4d:e8:dc:60:74:5a:71:e8:ba:62:4b:fb:b4:
         78:9e:81:97:2f:c0:59:09:e1:d0:ad:94:35:2a:37:1a:38:eb:
         fe:eb:7b:8f:61:6a:f4:a9:e8:e7:38:f6:8a:da:f4:05:a5:89:
         4b:3f:27:19:4c:7f:3c:6e:e1:98:64:1b:0c:1e:54:cc:d9:c3:
         19:4f:8c:11:f7:9c:b1:05:fc:a8:59:0a:2d:40:93:4b:6f:72:
         77:de:19:86:5e:c8:22:62:b6:b3:9e:9a:64:1a:3a:4a:57:2c:
         f5:98:1f:77:83:1f:ac:3e:95:d8:7f:05:d0:42:20:c5:e4:ff:
         ab:8c:04:4b:f0:66:1a:7c:6b:c5:4f:5e:0d:9a:a1:5e:ac:b2:
         a6:31:b9:ad:3d:4d:cc:90:1e:ea:45:d4:85:ff:bd:1d:fe:9b:
         0b:b4:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org