Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          uP78gBf1aqdVi/SVbTppBGlkxx2IFJ57n7DYWizbxI8=
Subject key identifier:   83:D6:15:E3:F0:B8:50:AD:0C:3F:3F:BE:39:F0:E3:E4:EA:1B:E6:74
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       0AB538A23963B5BF5F278F9900C20CF1FB4DD675
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:198::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b5:38:a2:39:63:b5:bf:5f:27:8f:99:00:c2:0c:f1:fb:4d:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=83D615E3F0B850AD0C3F3FBE39F0E3E4EA1BE674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:e6:53:9f:57:87:8d:c2:cc:9d:c1:c0:ff:
                    57:72:63:2e:ab:bf:80:15:11:83:cc:44:d2:7d:7d:
                    2c:e2:0f:a9:f8:8e:84:94:34:86:b9:0b:f4:82:cf:
                    74:f8:30:16:1c:df:f6:92:20:34:55:5e:cf:e0:2b:
                    91:82:09:2f:b3:40:59:5f:cb:2e:41:0f:a4:44:9a:
                    0a:13:03:a6:06:67:43:c4:3a:c8:1f:a0:0b:b2:a5:
                    1c:a3:12:53:8a:be:a1:ac:94:b9:02:58:fc:05:23:
                    b1:98:ab:58:bb:14:1a:b0:28:63:e6:a7:cb:45:fa:
                    41:fc:c5:ce:2a:f8:c7:07:1b:bc:7d:f2:c8:ff:9f:
                    92:06:d5:51:9e:6c:b1:82:b4:70:a0:70:8c:4b:56:
                    e9:9f:5c:00:3d:1a:55:57:fe:2b:03:87:3a:d4:ce:
                    85:83:e2:d6:cb:a8:01:dc:77:17:6d:65:fc:3d:66:
                    4e:d7:27:6c:d4:22:2e:ff:7b:2b:3b:dc:47:ec:c8:
                    46:19:d1:b7:03:87:cd:97:70:f5:72:e9:6c:c4:ca:
                    b4:b2:a9:53:c2:91:a1:f1:92:af:e8:3c:a8:4c:7f:
                    9e:dc:0e:72:62:44:41:da:eb:ba:72:dc:f7:17:43:
                    92:73:80:76:27:d6:9e:dc:4f:bd:c2:f4:e1:54:b9:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D6:15:E3:F0:B8:50:AD:0C:3F:3F:BE:39:F0:E3:E4:EA:1B:E6:74
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3139383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:198::/45

    Signature Algorithm: sha256WithRSAEncryption
         af:58:0b:a3:57:77:1a:a7:7b:20:75:31:2a:0e:ab:29:3e:bd:
         17:1b:9f:2e:21:94:1a:da:4f:fe:c5:d2:71:63:1a:c4:10:fd:
         33:95:36:ce:5a:ec:ea:63:7e:90:b0:58:3a:d8:ae:82:0a:29:
         e9:24:b3:a5:d9:34:04:cb:87:89:bc:ea:f0:b7:62:c5:29:9b:
         c7:39:69:ae:b2:b0:fb:72:ab:10:ef:6a:9e:16:ff:0b:2c:dd:
         60:17:9e:1f:cb:8e:19:f3:56:58:fd:7e:eb:ec:b9:16:4d:75:
         25:78:21:62:97:7a:0a:11:a3:2f:3a:f0:53:f5:ba:68:a8:f6:
         cc:60:0a:51:92:9b:27:d2:69:f4:84:6c:9c:55:35:b3:b9:88:
         94:9b:04:7e:d8:1e:b2:b7:7c:1f:07:1d:90:e0:80:00:5e:8a:
         d2:b6:fe:fe:6d:18:8a:f6:80:ed:f2:23:0a:0e:6e:7a:d7:64:
         78:a8:a3:cc:2c:2e:5a:fb:09:df:9f:e7:0b:34:0d:dc:a5:f5:
         8d:7f:50:bd:f7:2c:fd:45:d3:09:03:e5:a2:ae:4a:95:b9:72:
         5b:f7:f8:9b:59:56:42:89:bb:1d:90:b4:1a:10:8e:4c:7e:b3:
         82:db:e4:c3:e4:cb:35:ca:99:b6:a3:19:58:37:04:9f:a7:10:
         0a:de:5d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:09:35 2024 by rpki-client on console-fra.rpki-client.org