Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3239383a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3239383a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          /UQO8pYOj+HwZQxKH7GJBHvu7CgxQaveDJFGjSbIruE=
Subject key identifier:   39:1A:EA:E5:4C:01:BC:37:09:F8:D1:CE:E5:82:9B:4B:0A:C8:12:E9
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7E854D429F516A12CA57A606DEAD8BF94188323A
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3239383a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:35 +0000
ROA not before:           Fri 30 Aug 2024 14:21:35 +0000
ROA not after:            Fri 29 Aug 2025 14:26:35 +0000
asID:                     272710
IP address blocks:        2804:8774:298::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:85:4d:42:9f:51:6a:12:ca:57:a6:06:de:ad:8b:f9:41:88:32:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:35 2024 GMT
            Not After : Aug 29 14:26:35 2025 GMT
        Subject: CN=391AEAE54C01BC3709F8D1CEE5829B4B0AC812E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:a6:8e:8a:41:d5:8b:64:14:aa:a5:6e:bb:
                    f1:f0:93:d2:e4:9b:66:b7:b4:6a:d8:bb:88:a8:5b:
                    e7:1f:1c:be:6f:28:15:cc:ec:aa:58:cb:4e:e2:7a:
                    63:48:89:d8:32:55:c3:c1:ec:d2:28:af:0e:2a:ec:
                    dd:4e:30:5a:af:00:a6:fe:31:5e:a2:f2:34:fa:3f:
                    1c:19:63:5b:00:cc:b3:ad:78:fc:63:32:7a:d5:89:
                    99:4d:fa:0d:6f:14:bc:fe:21:d4:7a:49:48:6c:c1:
                    44:ba:d3:3c:74:ae:13:9f:4c:80:70:ca:fd:f6:5f:
                    f7:9d:b3:18:5d:77:8d:64:9b:74:ae:bf:0f:da:05:
                    ad:b0:0a:a4:3d:52:d1:a0:c8:ac:96:8d:84:e1:6b:
                    aa:c9:06:ee:9f:ad:8b:19:2c:92:e8:65:79:0e:62:
                    70:f4:4d:95:a1:9a:e1:44:9e:af:f8:5b:25:f9:28:
                    5d:95:c5:e8:18:35:c8:3e:b9:db:85:c6:56:cf:a4:
                    a2:c5:b0:a2:f1:8f:71:d0:d5:e3:fd:3d:79:4a:49:
                    3f:d8:bc:20:e7:1a:05:0f:7a:6d:c2:a0:81:3d:79:
                    f9:53:18:62:d5:19:e5:35:16:43:74:ca:37:a3:68:
                    ea:66:a2:d2:2c:e4:23:60:4c:09:53:52:8f:ec:b2:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1A:EA:E5:4C:01:BC:37:09:F8:D1:CE:E5:82:9B:4B:0A:C8:12:E9
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3239383a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:298::/45

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:43:82:2f:37:37:6f:3f:cb:ac:70:3b:10:1d:0b:80:24:
         1b:2b:70:00:94:0b:be:33:0b:b8:df:29:65:79:6b:16:b9:48:
         4e:a3:7e:f1:9c:5e:69:17:8c:8a:5f:27:57:37:ae:25:09:33:
         b2:c7:23:4f:0c:89:4a:bb:2c:1e:d1:0c:44:a0:63:40:dc:73:
         d6:f7:32:92:2b:7d:3b:77:7e:6e:fc:f2:5d:03:17:b0:0e:3a:
         b4:84:52:08:c9:97:c2:70:fd:27:e1:4c:1a:8b:8b:69:67:26:
         99:43:fa:67:4e:74:95:5d:fb:f5:ad:ee:33:cf:af:4c:17:16:
         1f:fe:87:2b:2b:e8:0e:40:0f:d4:2a:81:50:86:1b:7c:ee:54:
         d9:24:00:f2:2c:8d:df:49:59:f4:df:10:71:ba:03:27:72:0a:
         34:28:be:5b:79:c6:f0:89:f6:1a:75:7b:a9:0f:fd:8e:b2:0d:
         c7:cb:66:c8:3d:7e:80:ac:dd:1f:34:18:c8:06:ab:e9:79:88:
         a3:56:38:1b:6c:f1:89:f7:5f:b4:df:2d:13:34:c3:f9:48:67:
         ea:5f:d2:fa:e5:f5:dd:6d:15:2d:ab:af:28:ec:dd:35:94:36:
         e8:c5:be:dc:1f:12:a6:3d:17:23:8b:c8:70:11:c1:81:99:9f:
         30:1b:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:06 2024 by rpki-client on console-ams.rpki-client.org