Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376138623a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a376138623a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          aQAqUF9kooDdHEy/rLMJCguWHKie6fF+BCNnkoDSpcM=
Subject key identifier:   50:5C:37:F9:44:82:12:B2:9C:15:67:B8:6A:E9:AF:F2:3B:9F:17:0D
Certificate issuer:       /CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
Certificate serial:       0FE3E7F6292CD1BF6B8003BC63DBF486E7C42AAE
Authority key identifier: 69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376138623a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 24 Sep 2024 19:47:53 +0000
ROA not before:           Tue 24 Sep 2024 19:42:53 +0000
ROA not after:            Tue 23 Sep 2025 19:47:53 +0000
asID:                     264485
IP address blocks:        2804:2050:7a8b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 09:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e3:e7:f6:29:2c:d1:bf:6b:80:03:bc:63:db:f4:86:e7:c4:2a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693
        Validity
            Not Before: Sep 24 19:42:53 2024 GMT
            Not After : Sep 23 19:47:53 2025 GMT
        Subject: CN=505C37F9448212B29C1567B86AE9AFF23B9F170D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:ee:19:79:23:11:5b:3c:5d:b3:50:6f:a3:
                    d4:1f:18:03:30:a3:be:d9:f1:b3:71:fd:ee:fd:21:
                    8a:78:93:6d:68:f7:30:74:a5:0a:dd:00:55:3b:aa:
                    ab:d9:17:76:ef:74:58:7e:a7:12:fb:7c:b0:82:79:
                    2f:f2:86:24:da:f4:7a:c6:28:98:a6:6d:ab:35:22:
                    7d:fd:cf:47:8a:ee:65:2f:a2:83:58:24:3b:05:3b:
                    f4:c9:6d:ed:82:0d:5f:9a:dd:5e:ea:6b:95:32:1d:
                    3e:b1:3d:bd:3e:0f:aa:cb:0a:3f:f1:cd:3e:38:68:
                    45:33:c7:0e:dc:48:a2:d1:b0:33:9c:fd:52:d1:ce:
                    b8:53:95:2c:97:4c:4b:cb:8a:4e:6e:1c:f4:c0:53:
                    b0:96:75:5a:f1:cc:e9:7d:94:76:97:95:fc:ad:ec:
                    11:71:53:3d:bc:33:f2:0b:53:1f:4d:5d:eb:62:79:
                    27:c3:e5:7f:bb:04:61:74:8c:76:74:e9:ee:fc:ac:
                    42:c9:1a:d4:f9:55:d0:84:a9:63:c7:38:63:c3:61:
                    25:60:e2:a3:b6:3c:e6:0f:f5:e3:7c:4b:59:7d:64:
                    fe:99:07:d2:01:75:19:a0:52:b1:35:4c:7d:4d:fb:
                    5d:62:fb:8d:d4:69:87:92:73:33:58:30:97:55:46:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5C:37:F9:44:82:12:B2:9C:15:67:B8:6A:E9:AF:F2:3B:9F:17:0D
            X509v3 Authority Key Identifier:
                keyid:69:FE:A1:F8:EF:47:CB:C9:7F:6D:B7:89:0A:8E:94:DF:2E:79:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69FEA1F8EF47CBC97F6DB7890A8E94DF2E797693.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a376138623a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:7a8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:e5:3e:be:16:e8:e8:74:87:e2:19:1f:f1:21:b0:e5:9e:
         ca:3b:ae:7f:ad:c8:f1:85:c0:a8:21:25:0b:29:99:76:53:37:
         09:10:17:a2:61:5c:54:8a:b7:6a:09:45:64:fd:37:a6:f1:90:
         10:90:a6:ab:4b:66:72:e2:33:38:23:be:c1:29:e9:cc:ec:22:
         02:ef:17:37:64:db:e5:15:c4:ea:5f:4c:f4:4b:32:53:3c:a4:
         d5:38:4f:45:4f:e7:8f:98:0e:ca:5d:0b:29:d7:c2:84:fd:45:
         4c:dc:d6:93:89:db:52:21:de:16:2f:21:c1:de:db:e6:7e:1e:
         ad:d1:90:46:98:63:3a:0a:18:59:36:78:20:4e:6f:fc:e2:f6:
         60:08:ac:0f:b4:be:6b:ad:0b:e8:81:5f:f2:c0:f0:db:56:95:
         25:db:a6:11:56:9e:30:e0:7d:1f:f3:bb:53:1f:f3:95:e3:58:
         5d:36:2d:02:9f:4c:7f:1a:65:76:5a:90:46:28:60:55:9a:5b:
         91:06:dc:6e:54:b5:33:e5:23:92:78:93:a9:63:bf:6e:35:a9:
         2d:3a:b2:1f:85:35:72:07:a8:38:d2:32:a5:b9:af:95:a0:b8:
         6c:63:f6:01:4b:fe:e4:b6:86:3f:28:af:98:7c:9e:a8:8d:1e:
         8c:47:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:02:21 2024 by rpki-client on console-ams.rpki-client.org