Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
File:                     323830343a333434343a3a2f33322d313238203d3e20323635343436.roa (raw, json)
Hash identifier:          H7tsh43XC1HxIfdUHdR3aSSnPo+mc/GfiNIDH498M3w=
Subject key identifier:   5A:22:86:0C:4A:17:DD:53:55:60:B4:58:A1:B6:4B:45:DF:9A:C0:32
Certificate issuer:       /CN=F914D499F6B65F613E17CDF819658F198DB1F240
Certificate serial:       15BFC44C5618F82C23E5A9346FD7A2C6AEB08D27
Authority key identifier: F9:14:D4:99:F6:B6:5F:61:3E:17:CD:F8:19:65:8F:19:8D:B1:F2:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F914D499F6B65F613E17CDF819658F198DB1F240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa
Signing time:             Thu 17 Oct 2024 17:03:40 +0000
ROA not before:           Thu 17 Oct 2024 16:58:40 +0000
ROA not after:            Thu 16 Oct 2025 17:03:40 +0000
asID:                     265446
IP address blocks:        2804:3444::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/F914D499F6B65F613E17CDF819658F198DB1F240.crl
                          rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/F914D499F6B65F613E17CDF819658F198DB1F240.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F914D499F6B65F613E17CDF819658F198DB1F240.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bf:c4:4c:56:18:f8:2c:23:e5:a9:34:6f:d7:a2:c6:ae:b0:8d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F914D499F6B65F613E17CDF819658F198DB1F240
        Validity
            Not Before: Oct 17 16:58:40 2024 GMT
            Not After : Oct 16 17:03:40 2025 GMT
        Subject: CN=5A22860C4A17DD535560B458A1B64B45DF9AC032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:62:e5:4a:84:0d:db:34:89:47:ca:d9:d8:c9:
                    48:e9:9c:e5:26:a8:2a:50:9b:70:10:5d:f0:8c:ea:
                    94:f3:b1:96:48:bc:27:9f:e9:71:da:9f:8c:fa:ef:
                    31:66:e4:50:8d:0b:ea:09:f2:52:db:f2:f2:65:98:
                    ba:39:8e:7f:d5:c0:50:86:e3:7d:2d:19:c7:c4:72:
                    75:1a:39:b7:3d:ec:a5:e2:74:75:37:db:41:fe:bc:
                    ab:10:a7:5c:16:a1:bf:45:20:82:45:1e:a3:e9:bb:
                    07:b9:08:b7:f9:e8:e2:1f:69:8e:e6:66:bc:4b:3b:
                    d5:6e:0b:d9:c2:bb:76:d2:19:51:ac:17:41:af:5e:
                    66:e3:f9:e2:bc:d7:89:01:f6:1a:c9:f1:3b:c0:79:
                    c4:01:e8:ed:4d:36:de:67:7a:d1:d5:81:40:23:19:
                    7f:f9:37:3b:8d:02:e8:f4:5f:65:9e:37:71:9e:50:
                    35:85:a9:2b:a3:e7:ac:86:48:50:1c:a7:39:27:d6:
                    eb:2d:25:14:a4:31:8f:85:87:d9:cb:72:58:a6:51:
                    a8:ec:79:4f:70:6a:8b:10:fc:48:7f:42:62:00:f2:
                    2a:dd:cd:4e:45:7e:3a:33:c5:71:d9:19:5b:58:d5:
                    a4:58:d0:0a:17:98:b8:dd:cb:42:66:8e:8f:27:5b:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:22:86:0C:4A:17:DD:53:55:60:B4:58:A1:B6:4B:45:DF:9A:C0:32
            X509v3 Authority Key Identifier:
                keyid:F9:14:D4:99:F6:B6:5F:61:3E:17:CD:F8:19:65:8F:19:8D:B1:F2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/F914D499F6B65F613E17CDF819658F198DB1F240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F914D499F6B65F613E17CDF819658F198DB1F240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaDp7pr94GWDXDHpWGZFPT8GcXLAbbvabZpiWibyZ6Pu/0/323830343a333434343a3a2f33322d313238203d3e20323635343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3444::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:46:d0:36:fb:1d:f0:b4:af:65:99:df:0d:88:17:bd:a1:e8:
         d2:4f:e3:3b:a9:9a:03:e4:06:ac:fe:d7:ef:9d:85:5c:77:5d:
         10:4f:f8:46:95:9d:bc:cf:af:5d:5c:84:88:6d:ec:e1:2a:cb:
         df:e8:23:78:fd:69:0a:1d:af:90:27:e0:2c:1e:89:b8:83:90:
         99:66:33:1f:29:ee:8c:1c:7c:c0:f5:a7:0a:e2:50:dd:2d:80:
         84:6e:ab:0c:bf:22:45:59:9e:7d:38:97:b6:df:8e:d4:59:94:
         f6:d3:2b:b8:db:e7:35:64:24:f8:6b:e5:e5:6f:b9:d6:49:fd:
         a9:9b:f0:7e:27:29:9c:92:87:77:09:e0:63:ff:ed:0a:77:08:
         c0:77:14:7b:ab:a5:c4:53:e0:c2:80:cc:dd:35:e9:7d:1d:09:
         16:ee:33:11:60:e4:44:ac:58:71:5a:08:c8:e9:09:ca:b2:1f:
         4c:93:32:a4:8b:86:15:3b:cb:65:7e:46:3a:36:7a:2b:2d:d3:
         d8:5f:e0:f2:89:32:2a:fc:97:3e:a2:aa:46:f3:a9:68:d9:b3:
         42:2c:e6:4d:21:71:66:da:45:f3:5f:6c:c2:ae:0e:7a:3c:e2:
         6d:33:7e:76:e9:78:28:6e:f2:4b:bd:e4:c4:2f:e6:3e:d8:e8:
         8e:bb:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org