Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/323830343a343565383a3a2f33322d3438203d3e203532383134.roa
File:                     323830343a343565383a3a2f33322d3438203d3e203532383134.roa (raw, json)
Hash identifier:          LIjAxG7HQafxiTr1iwetMhe80woRtitM8lHljRvtXeY=
Subject key identifier:   A5:CF:AF:B9:BF:59:B9:40:31:B0:63:DF:1C:32:47:29:65:F1:F4:2B
Certificate issuer:       /CN=F481CF540ED033C90B42C63E2449B3C587687EE9
Certificate serial:       4E08A76CE9A25518E2996389BA45A5B9F0777BF4
Authority key identifier: F4:81:CF:54:0E:D0:33:C9:0B:42:C6:3E:24:49:B3:C5:87:68:7E:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F481CF540ED033C90B42C63E2449B3C587687EE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/323830343a343565383a3a2f33322d3438203d3e203532383134.roa
Signing time:             Wed 03 Apr 2024 23:24:41 +0000
ROA not before:           Wed 03 Apr 2024 23:19:41 +0000
ROA not after:            Wed 02 Apr 2025 23:24:41 +0000
asID:                     52814
IP address blocks:        2804:45e8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/F481CF540ED033C90B42C63E2449B3C587687EE9.crl
                          rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/F481CF540ED033C90B42C63E2449B3C587687EE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F481CF540ED033C90B42C63E2449B3C587687EE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:08:a7:6c:e9:a2:55:18:e2:99:63:89:ba:45:a5:b9:f0:77:7b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F481CF540ED033C90B42C63E2449B3C587687EE9
        Validity
            Not Before: Apr  3 23:19:41 2024 GMT
            Not After : Apr  2 23:24:41 2025 GMT
        Subject: CN=A5CFAFB9BF59B94031B063DF1C32472965F1F42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:26:d2:a2:12:0e:4b:6f:99:e7:9e:3e:d3:
                    e0:ea:0b:48:62:2b:23:1f:74:02:48:38:08:e3:88:
                    c5:a1:99:ff:da:e0:d1:03:d5:8b:1b:8c:e5:76:b4:
                    45:1a:c7:35:e2:04:35:fe:81:bc:79:95:da:47:45:
                    7c:a6:98:74:85:c6:51:7f:26:f1:24:85:e9:2a:12:
                    89:d0:ce:51:34:9d:f1:12:ae:0f:c0:a3:9a:75:0b:
                    46:e5:5d:2e:17:3a:b8:d4:fe:4a:d5:8d:5d:04:a4:
                    7f:2c:af:21:0f:84:cb:e6:da:cb:a0:c1:9d:b5:7b:
                    a7:6c:11:ac:c6:67:d7:87:e2:d2:68:bb:4a:84:7f:
                    04:5a:dd:89:8a:2d:bb:60:47:0d:f4:73:1e:35:b1:
                    f2:f6:94:6d:d1:86:e1:95:62:79:37:a1:9e:e4:80:
                    fc:a6:f2:49:39:c7:5a:dc:fa:c4:0b:da:f2:af:3d:
                    71:37:67:49:44:ce:39:a4:6f:df:37:6c:8e:4a:51:
                    c6:32:a1:04:5c:7c:26:d2:7f:be:3c:cc:dd:48:76:
                    e8:26:1e:76:48:f6:bf:02:2b:a7:b4:4e:07:15:db:
                    9d:29:6b:35:7e:20:19:8b:f5:a8:2d:cf:71:7b:65:
                    32:68:b0:06:b1:64:81:24:81:d3:81:ca:4e:38:66:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CF:AF:B9:BF:59:B9:40:31:B0:63:DF:1C:32:47:29:65:F1:F4:2B
            X509v3 Authority Key Identifier:
                keyid:F4:81:CF:54:0E:D0:33:C9:0B:42:C6:3E:24:49:B3:C5:87:68:7E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/F481CF540ED033C90B42C63E2449B3C587687EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F481CF540ED033C90B42C63E2449B3C587687EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdfuedrL4BTWFJLXeeJNhQUfpaSbC8PPhtQZAyNKSzba/1/323830343a343565383a3a2f33322d3438203d3e203532383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:cb:2a:7b:d6:07:39:16:18:4c:7b:94:1a:55:aa:76:b5:
         11:b3:91:78:94:9e:6b:e7:f2:42:b2:39:83:9d:92:03:47:9e:
         d5:16:26:0c:cc:b9:df:30:04:0d:aa:ef:25:13:2f:69:d6:3e:
         91:23:fd:fb:42:e5:14:0c:e6:97:42:08:12:e1:53:db:be:90:
         a0:1a:fb:5d:2b:dc:92:1d:97:68:05:34:74:5f:7e:e1:30:ea:
         45:2c:1a:1d:43:29:40:d1:2d:4d:b3:96:36:cd:f0:00:f5:0a:
         5b:8d:03:b3:33:e3:6e:7f:f1:e2:39:4b:a4:cf:0d:f1:ab:58:
         3f:db:ee:1e:b2:00:98:3c:da:8a:11:1d:4c:b1:51:f2:ba:18:
         38:bb:c7:b5:d8:fe:91:8f:1c:3d:8a:f5:c2:65:6c:d9:96:f0:
         39:c6:43:8d:8a:58:7d:9c:88:d6:40:fc:44:85:c3:3e:84:e4:
         7a:fc:21:20:0b:65:66:ce:b1:95:17:e3:a2:cc:44:07:ea:40:
         d0:fa:6e:fa:d8:b7:ad:a1:b4:ab:34:07:98:2d:42:8c:2e:f5:
         6c:ff:26:63:37:82:8a:5c:f8:dc:8f:1f:79:c4:a2:04:38:a5:
         a0:00:d2:d0:3f:30:f4:b4:5e:8d:79:7a:9a:87:ea:48:fc:93:
         2c:bd:71:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 04:04:35 2024 by rpki-client on console-ams.rpki-client.org