Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3131383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3131383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          JOaNlUqGZZtqHRkiDhwZFqKKakI3GeEhoz8gsuZxO8A=
Subject key identifier:   2C:04:BD:A2:F2:8B:C3:A6:54:D5:E8:67:5B:C6:CB:81:F3:D1:73:DB
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       58FD2B040607FBEF27D51616F489964201DDBFCE
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3131383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:118::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fd:2b:04:06:07:fb:ef:27:d5:16:16:f4:89:96:42:01:dd:bf:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=2C04BDA2F28BC3A654D5E8675BC6CB81F3D173DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:c3:ad:7e:b4:6b:72:24:2c:c3:64:40:bf:
                    6b:53:b1:ff:d4:aa:2c:d0:4d:4c:83:b5:03:f1:83:
                    51:fa:ef:b2:ea:55:9d:47:f6:7c:3e:d0:7e:ce:2f:
                    76:e9:a1:9e:3e:af:ca:f7:c6:2e:b3:61:b0:de:ea:
                    0f:37:90:de:d4:de:57:bf:27:31:73:dd:d4:8f:9c:
                    8d:ea:92:d3:b8:e4:46:38:a7:fa:05:52:80:b6:04:
                    47:b1:f0:4e:67:16:ff:e3:af:2f:93:41:4a:da:13:
                    8c:51:da:af:4b:67:a5:79:56:c5:e3:22:71:de:7d:
                    7d:b2:ec:6e:a9:e3:a0:80:95:1e:0a:b3:6b:2b:16:
                    0b:be:f7:47:b8:ee:a2:8d:e8:5f:f6:90:23:13:0d:
                    7b:1a:06:81:a2:bb:5a:64:8f:77:9c:5f:72:89:58:
                    c2:22:34:66:83:bb:c0:2d:8c:a9:1f:e1:8b:cd:56:
                    da:2d:58:b1:4f:a7:1d:80:19:b8:8c:4e:4b:89:cd:
                    b5:f0:b3:58:ce:be:5f:bc:27:a3:14:c6:0d:f8:2e:
                    2a:92:98:60:14:07:f6:96:5d:49:56:aa:95:f1:1d:
                    20:38:ef:b8:96:12:8f:c0:16:da:46:8b:f0:18:20:
                    12:16:d3:94:25:39:63:b0:b1:2d:72:d7:c2:3a:14:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:BD:A2:F2:8B:C3:A6:54:D5:E8:67:5B:C6:CB:81:F3:D1:73:DB
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3131383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:118::/45

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:da:72:dc:00:e6:1d:75:97:21:90:98:6e:75:f6:3f:d8:
         1d:f1:0b:aa:25:17:0e:0c:f1:0f:ec:76:96:ff:ea:6a:69:85:
         c6:6c:d6:5d:a9:f4:a5:5e:79:75:45:d3:7f:4f:25:a3:62:d0:
         43:08:1a:9a:ef:a7:d5:85:b4:39:5f:9d:1c:c6:8a:dc:6b:a1:
         a6:28:92:f5:91:ee:d9:ab:c5:c8:9c:0a:0e:21:0a:e2:93:22:
         de:43:ee:b8:ee:49:7b:8a:66:01:98:d3:2e:54:9b:d8:d2:dd:
         0f:31:d5:2a:d9:a5:a2:5d:45:58:a9:f1:f3:46:ff:19:9f:10:
         ad:9a:9b:fd:84:7a:b9:d6:cd:10:11:a6:f4:64:2a:a2:82:79:
         25:0a:29:ec:7a:46:d4:e7:38:7f:9f:79:ea:a3:51:0e:98:a2:
         78:85:45:da:f3:3c:9e:74:07:c4:32:0f:59:d6:41:b3:e3:69:
         86:6d:e6:19:87:34:4b:83:ab:33:d8:bf:97:ed:ea:17:a6:91:
         34:e2:73:24:76:e5:c4:b9:13:70:d7:28:7d:14:7e:9b:be:b5:
         ee:d9:b7:e6:7c:75:fc:39:eb:27:3c:ee:8d:51:86:cc:45:b2:
         cd:f3:47:1a:eb:ec:26:e7:7f:e4:1e:71:b7:70:99:1e:6d:9c:
         84:69:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org