Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3430303a3a2f34302d3430203d3e20323732373130.roa
File:                     323830343a383737343a3430303a3a2f34302d3430203d3e20323732373130.roa (raw, json)
Hash identifier:          H222bFoRrgZYTGk5dtx77ZnYHL6pBan9DMlvbenI3Rw=
Subject key identifier:   33:15:F7:92:45:3C:0C:97:D3:D2:59:1C:2C:94:6A:F1:88:3E:14:DD
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       7FD5C659BC141F7791A9424D5041BE0055627DC0
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3430303a3a2f34302d3430203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:34 +0000
ROA not before:           Fri 30 Aug 2024 14:21:34 +0000
ROA not after:            Fri 29 Aug 2025 14:26:34 +0000
asID:                     272710
IP address blocks:        2804:8774:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d5:c6:59:bc:14:1f:77:91:a9:42:4d:50:41:be:00:55:62:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:34 2024 GMT
            Not After : Aug 29 14:26:34 2025 GMT
        Subject: CN=3315F792453C0C97D3D2591C2C946AF1883E14DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:9a:67:ab:10:0e:5e:3c:18:e6:34:57:f6:
                    6f:4c:72:1e:df:59:e9:d3:ac:82:31:c3:51:c5:e2:
                    77:e3:cf:af:ce:cc:e0:8a:f9:09:53:48:89:8c:3e:
                    62:11:f8:1e:bd:54:bc:b4:6c:14:68:3d:97:74:ef:
                    75:51:75:41:17:6d:fd:60:54:17:df:34:53:30:66:
                    e2:e8:f6:44:e1:2c:2d:6f:40:2b:de:93:fb:20:8f:
                    64:89:31:4c:e8:4c:50:df:6e:1f:56:b8:6b:6a:2b:
                    7f:cc:09:22:62:bd:1f:b1:1a:7a:0e:de:e5:71:df:
                    a6:fb:ab:1a:68:51:e5:9b:fc:45:fa:8a:ea:86:68:
                    ef:4f:5b:7a:e4:8b:5d:f6:52:3a:89:f5:20:95:bd:
                    db:cb:4b:8b:27:40:39:25:64:2d:ca:d3:ac:0c:b9:
                    8e:a9:61:a9:c0:83:f2:b4:05:2d:d9:dd:72:f6:3e:
                    96:37:36:8e:35:1c:8c:c5:4e:62:ca:df:f4:6b:fd:
                    b9:b8:3a:5f:50:ea:83:b3:5b:a0:6d:26:61:92:96:
                    3e:a5:39:4a:47:0c:0d:7c:a8:cc:3f:5a:f6:cc:0d:
                    e1:3b:94:d7:d7:ff:27:99:6d:aa:74:53:41:c4:b5:
                    1e:f5:a0:52:cd:e5:c0:c8:60:b9:60:cf:87:a0:af:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:15:F7:92:45:3C:0C:97:D3:D2:59:1C:2C:94:6A:F1:88:3E:14:DD
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3430303a3a2f34302d3430203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:ef:96:10:f5:a5:64:4b:97:ee:4e:73:e6:bc:c4:52:dd:
         2c:49:73:ae:ff:79:13:85:b5:c5:e1:1e:06:8d:50:79:15:6e:
         2d:39:52:db:11:f6:3b:8d:23:56:c4:9f:e6:ce:6e:4f:0b:b1:
         de:c5:1a:51:07:4b:39:ba:04:b1:21:67:f6:6b:54:e1:63:2d:
         97:ac:05:fb:b8:dd:44:27:76:19:66:b1:89:58:97:68:89:55:
         0d:4c:1a:7c:73:f9:93:12:24:7e:1a:98:e8:e2:4e:ca:4b:e8:
         cd:83:4c:ae:0e:af:36:9b:5a:7f:51:ac:5d:3c:c2:cf:0a:fc:
         7d:43:56:2d:7e:9a:7a:50:31:e0:6f:eb:b3:b1:63:f5:e2:d9:
         89:41:69:fd:b6:b4:cd:85:48:a2:12:0c:fd:6f:75:93:31:c1:
         9a:8d:69:a1:6d:63:99:b5:d3:75:20:9a:26:99:20:80:dd:5d:
         b3:d4:b5:95:28:54:8a:2f:55:56:be:ff:f3:0a:ac:53:73:70:
         ce:57:bd:28:d0:39:e2:c0:c4:bd:05:e6:7f:c7:fa:37:48:b9:
         51:32:cd:29:8f:92:23:08:46:89:af:8f:08:69:c0:99:83:f5:
         7c:15:e0:59:bb:e9:ac:75:5f:a2:21:84:d4:89:5c:14:86:c7:
         db:0b:b7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:44 2024 by rpki-client on console-fra.rpki-client.org