Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3230383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          CLHZF6uDv1AoByA8Su+My9XhXIBc3E8aaPhvRzG7w/w=
Subject key identifier:   34:1D:5A:F5:E7:E4:9E:33:02:78:E0:10:71:13:78:ED:17:E1:33:C6
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       711D03B7E9134B03763157A15089D48871FDD176
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:37 +0000
ROA not before:           Fri 30 Aug 2024 14:21:37 +0000
ROA not after:            Fri 29 Aug 2025 14:26:37 +0000
asID:                     272710
IP address blocks:        2804:8774:208::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1d:03:b7:e9:13:4b:03:76:31:57:a1:50:89:d4:88:71:fd:d1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:37 2024 GMT
            Not After : Aug 29 14:26:37 2025 GMT
        Subject: CN=341D5AF5E7E49E330278E010711378ED17E133C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6b:b2:41:ca:5d:09:b0:fa:d0:00:5c:62:74:
                    66:73:c6:fa:de:06:df:98:6d:04:25:17:c0:12:95:
                    d3:58:c9:64:59:2d:7d:98:7f:5b:0b:6d:6c:dc:00:
                    41:c4:6e:fb:0c:8e:78:50:49:12:fa:ac:7f:96:0f:
                    5d:84:87:4e:1f:3c:f2:ec:ca:3b:03:a5:d3:ed:fc:
                    e5:5a:96:21:77:bf:6d:27:7e:19:25:8c:6b:b1:01:
                    51:f5:41:bf:6d:bd:d4:73:a9:28:ac:65:3d:70:9a:
                    69:19:da:79:6d:a0:86:2b:a6:ad:68:ec:1c:05:d9:
                    e4:08:7d:70:0d:92:b6:be:7d:9c:c1:f4:6b:d0:be:
                    ff:34:e2:7a:c3:da:c9:fe:ee:4e:d6:8d:bf:7b:60:
                    94:c4:ac:a9:99:f3:cb:99:f0:1f:12:88:e1:3a:be:
                    3a:49:d1:6e:4b:1f:9d:10:0b:16:6a:e3:84:59:94:
                    fe:94:0e:cd:6d:2f:56:ff:6b:67:30:26:3c:cb:a0:
                    b7:e2:04:c9:d4:5f:82:b6:ed:3d:8b:90:3a:ca:c6:
                    06:dd:c0:66:69:82:0b:fb:06:a4:cd:07:d5:a7:d5:
                    91:e2:02:6e:89:24:dc:05:a7:24:93:8e:34:84:35:
                    83:18:b3:23:64:9b:d4:aa:26:6e:62:ed:60:58:c1:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:5A:F5:E7:E4:9E:33:02:78:E0:10:71:13:78:ED:17:E1:33:C6
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3230383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:208::/45

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:af:f6:33:20:6c:ee:40:82:c5:aa:dc:e9:fe:72:48:a6:
         18:43:c8:bb:d3:67:cf:b4:f3:de:d6:b7:e4:6b:73:ca:c9:f8:
         61:41:f7:d5:93:40:46:c8:b7:ee:96:17:b0:b9:e2:7d:7f:75:
         d5:33:04:d7:43:43:82:f2:61:d0:d8:ec:b6:dc:4c:f6:a6:55:
         91:cf:09:2b:c6:ed:7d:50:db:d7:0f:70:44:a7:2f:53:f8:f6:
         1b:e7:85:36:e6:aa:9b:26:61:15:e6:9d:05:a6:6a:33:82:da:
         a4:b9:54:7b:39:5c:c3:f8:fc:3d:20:ff:5a:a6:77:79:23:cf:
         24:d1:4f:6d:25:24:71:4e:07:88:67:10:59:a7:11:4f:87:a6:
         b3:2d:e8:43:2d:ed:3f:9b:a8:c0:7b:26:02:43:63:e4:a7:48:
         22:d3:a1:21:75:07:7d:27:5f:e1:33:03:11:c8:78:79:4c:da:
         a4:2e:cd:ea:b7:c1:b8:8f:6c:93:99:d9:be:e5:77:39:bf:e5:
         e2:7d:42:07:21:0e:a5:1a:11:8b:2f:53:eb:00:1f:c6:fc:70:
         29:cb:91:73:5d:04:f7:eb:e2:ed:d9:a1:b7:87:ec:98:6d:80:
         41:76:80:aa:9d:14:e6:46:30:8e:1c:7c:96:29:22:eb:f9:0b:
         b7:c6:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:34 2025 by rpki-client