Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa
File:                     323830343a313065633a3a2f33322d3332203d3e203532383634.roa (raw, json)
Hash identifier:          ppk68fXYRp1IGiPr8ek/lPgUcYmUl3Y/0MqM3c1Pz48=
Subject key identifier:   55:DC:59:B4:23:8B:8A:B0:95:01:BE:83:C9:3E:45:D2:40:D7:45:3C
Certificate issuer:       /CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
Certificate serial:       2C5FC60EAE79F0456C1F47051528F81775939045
Authority key identifier: 3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa
Signing time:             Mon 28 Oct 2024 14:41:34 +0000
ROA not before:           Mon 28 Oct 2024 14:36:34 +0000
ROA not after:            Mon 27 Oct 2025 14:41:34 +0000
asID:                     52864
IP address blocks:        2804:10ec::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl
                          rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5f:c6:0e:ae:79:f0:45:6c:1f:47:05:15:28:f8:17:75:93:90:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EA6AF18CE286F74A82B44E64ADBA920242ABFC0
        Validity
            Not Before: Oct 28 14:36:34 2024 GMT
            Not After : Oct 27 14:41:34 2025 GMT
        Subject: CN=55DC59B4238B8AB09501BE83C93E45D240D7453C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:62:cd:49:08:a1:bd:66:b1:59:77:f7:55:
                    ad:57:f2:89:c8:76:07:59:64:dc:87:3f:b7:4e:a8:
                    82:bb:ea:f7:46:49:f6:09:82:71:7a:59:51:04:4c:
                    27:a0:c3:3b:e2:64:06:27:30:3d:fe:3c:e7:49:86:
                    89:07:f4:ff:47:6c:43:14:1f:8f:af:7b:6b:0d:b1:
                    b8:f4:ed:42:c8:0b:36:16:72:51:bf:fa:e0:f5:43:
                    d2:2a:d6:2f:9f:b2:41:f3:84:fc:41:a4:18:33:04:
                    bc:f9:2f:86:5d:7f:4a:e5:99:52:e9:1a:42:f0:5e:
                    58:76:c0:34:97:35:2e:c4:d1:d8:97:d6:b3:2d:61:
                    f6:b0:ec:b1:52:bc:4c:e3:51:2a:9c:fd:b3:39:e2:
                    2b:a4:1a:cf:00:0c:aa:9a:38:fd:c4:a8:a2:53:e1:
                    27:81:e3:21:46:87:db:bd:45:c9:35:66:af:83:df:
                    17:64:28:6b:50:62:55:7b:68:f9:70:a3:55:90:98:
                    71:2f:d2:69:a8:33:0b:c9:b1:30:90:a6:35:ad:3c:
                    e4:20:6f:ff:7a:a3:0d:2c:9f:f7:cf:5f:67:21:90:
                    5b:ed:fa:c4:0c:17:93:64:cd:29:22:f9:8f:23:6f:
                    5b:e1:18:26:35:8a:39:e1:c9:57:d2:09:7c:cf:37:
                    5b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:59:B4:23:8B:8A:B0:95:01:BE:83:C9:3E:45:D2:40:D7:45:3C
            X509v3 Authority Key Identifier:
                keyid:3E:A6:AF:18:CE:28:6F:74:A8:2B:44:E6:4A:DB:A9:20:24:2A:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EA6AF18CE286F74A82B44E64ADBA920242ABFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5QLKnomNWndabawnXZbHSdA2CBm5c3uR9ymvCsi8PmX/0/323830343a313065633a3a2f33322d3332203d3e203532383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:d2:be:a5:d4:36:59:19:8f:9a:ae:be:27:08:44:52:23:84:
         58:94:9b:7a:26:77:f9:40:a5:70:af:74:fd:02:d0:60:a2:26:
         8a:40:3a:05:50:1d:ce:8c:f0:79:d0:52:ee:27:b1:1c:02:ff:
         46:96:21:d0:aa:1b:cc:fb:bb:71:8a:b8:4f:eb:b0:65:78:f1:
         31:5b:cb:fa:f0:60:35:8d:6d:e2:e3:55:09:84:aa:5a:ae:09:
         a0:03:ff:eb:0f:95:73:6b:ce:e0:4d:a5:da:f9:cc:a0:0b:d0:
         b4:17:48:c0:46:57:fe:02:a0:b0:e8:0c:e1:24:26:81:61:6a:
         c0:c6:be:a8:80:d8:1b:8f:2a:0a:87:73:36:37:98:cc:b0:cf:
         28:59:42:b2:ad:81:eb:71:6d:ef:b7:e5:15:b1:93:a7:31:e6:
         4c:2a:9a:19:e6:a4:ed:4e:7e:a0:ae:78:54:55:94:2f:09:86:
         2d:42:fb:f2:0b:7a:14:7b:19:5d:e2:f7:ac:7c:87:d9:95:f5:
         61:6a:da:f7:91:17:dd:fa:3c:0d:df:10:73:2a:8a:41:c9:f4:
         60:74:8a:8b:48:c2:49:d1:4f:de:8c:8e:a5:f5:57:1b:07:b3:
         4d:98:d9:fd:9d:20:84:2b:3e:e4:ed:5e:0e:bd:c5:e0:cb:ea:
         49:62:5d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:25 2024 by rpki-client on console-fra.rpki-client.org