Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33332d3333203d3e20323731303031.roa (raw, json)
Hash identifier:          pONh1qNdDmk7uKvoHYw5wTpTmWoKVsX62LlZ4FBGznw=
Subject key identifier:   3B:5B:0A:68:93:31:FF:03:A1:8A:98:1C:35:FA:5A:8E:D7:48:52:12
Certificate issuer:       /CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
Certificate serial:       51E50DA3E87A734349FAA55658DD6832CB911B23
Authority key identifier: B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa
Signing time:             Thu 04 Apr 2024 01:51:15 +0000
ROA not before:           Thu 04 Apr 2024 01:46:15 +0000
ROA not after:            Thu 03 Apr 2025 01:51:15 +0000
asID:                     271001
IP address blocks:        2804:74c0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl
                          rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:0d:a3:e8:7a:73:43:49:fa:a5:56:58:dd:68:32:cb:91:1b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81
        Validity
            Not Before: Apr  4 01:46:15 2024 GMT
            Not After : Apr  3 01:51:15 2025 GMT
        Subject: CN=3B5B0A689331FF03A18A981C35FA5A8ED7485212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:45:6b:37:07:00:d9:8f:24:61:8e:92:82:
                    fa:67:26:8a:d0:84:01:12:04:bf:3b:2a:48:5b:19:
                    c4:ba:0a:5c:df:3d:a4:3c:88:89:df:0e:8b:52:0b:
                    a4:62:df:32:80:7c:7d:3d:9f:c7:d0:9a:4f:e3:1d:
                    79:55:a2:f6:35:5a:ce:64:63:73:9c:55:a2:6a:23:
                    c6:35:35:24:f5:c8:be:cc:d1:1b:8f:87:d1:db:e9:
                    d3:fe:e9:1c:64:51:26:5c:95:75:60:59:0d:09:9f:
                    37:25:7b:cc:d9:b7:71:54:16:bb:79:8e:ba:bc:e9:
                    6a:5c:3c:b2:83:ad:de:10:77:b7:3a:6b:75:fd:ff:
                    ad:ed:23:80:73:87:fb:d9:a8:58:75:b2:6b:7f:24:
                    fe:ca:9a:39:4e:29:93:7b:ca:61:9d:d7:87:d1:6b:
                    9b:2e:45:7d:fb:b4:55:59:46:95:e9:dd:20:59:74:
                    e7:00:91:b8:9a:45:72:1a:d9:8f:2a:13:5a:09:8f:
                    b0:79:0b:80:0f:80:18:a7:d8:77:42:be:ad:ac:a7:
                    3d:0e:75:c1:ba:a2:b0:9a:7e:24:ab:47:9d:e8:2c:
                    48:7e:24:8b:a5:fd:0f:21:79:ce:40:8d:3a:ad:38:
                    b1:2a:07:11:43:ee:f7:af:50:2a:56:be:c8:fc:3e:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5B:0A:68:93:31:FF:03:A1:8A:98:1C:35:FA:5A:8E:D7:48:52:12
            X509v3 Authority Key Identifier:
                keyid:B6:C5:FB:85:7E:69:A9:04:49:73:FA:30:62:AA:1D:6F:BF:5C:4A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6C5FB857E69A9044973FA3062AA1D6FBF5C4A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/1/323830343a373463303a3a2f33332d3333203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:d7:fa:db:51:cd:cc:77:0f:b7:4b:2a:92:23:81:fd:da:a2:
         63:e2:70:f3:5a:5d:94:d4:28:0a:62:6e:1b:fc:89:22:01:3d:
         88:41:e4:ac:b7:20:fd:cf:98:01:69:05:47:ad:f4:6c:c8:d8:
         30:e2:74:d5:0b:46:ce:bd:96:fe:fe:eb:b2:53:8f:b2:70:52:
         bc:e7:ba:88:f4:93:3a:eb:ad:27:45:e8:1e:30:15:b5:6d:00:
         2e:5d:22:92:43:e7:3f:09:3d:d8:be:05:02:56:5f:fa:af:ea:
         be:c4:9e:1b:ea:be:16:2f:0d:60:02:78:90:d1:85:ff:1b:b5:
         77:80:99:73:9d:7b:27:69:9d:cc:40:a5:c6:c1:70:a8:4a:6a:
         23:8b:1b:cc:4b:da:d0:15:9b:48:61:de:4e:3e:54:74:e0:b1:
         89:3b:44:5c:82:99:05:06:b5:25:0e:60:77:4a:8e:08:2d:ba:
         f6:6f:db:92:98:79:df:b6:08:02:99:09:61:97:06:b3:ff:e5:
         7c:a3:fe:84:2b:86:6b:3d:49:b2:d3:54:f5:a6:fb:65:cf:e4:
         bd:f3:0a:60:a2:e1:65:3f:ba:c9:52:de:61:db:4f:23:9e:7e:
         71:bc:6a:5a:0a:3c:09:c1:59:7a:36:f7:a9:0a:e9:02:14:19:
         84:b1:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:50 2024 by rpki-client on console-fra.rpki-client.org