Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa
File:                     323830343a323435633a3a2f33322d313238203d3e20323634323137.roa (raw, json)
Hash identifier:          UwvBGKw4BklzD4UBMHK4RTmnOfOWLGPBUgqH803LSKM=
Subject key identifier:   5D:59:22:9E:BB:A1:99:0E:3C:D7:B0:1D:88:AD:86:29:75:1D:33:76
Certificate issuer:       /CN=F15E472EEC88DBBC156901BE4A6E261386DFB9E3
Certificate serial:       1C743FD6E6A98DC163B16970CE9071DA0ABC5CE2
Authority key identifier: F1:5E:47:2E:EC:88:DB:BC:15:69:01:BE:4A:6E:26:13:86:DF:B9:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa
Signing time:             Tue 28 May 2024 16:35:12 +0000
ROA not before:           Tue 28 May 2024 16:30:12 +0000
ROA not after:            Tue 27 May 2025 16:35:12 +0000
asID:                     264217
IP address blocks:        2804:245c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.crl
                          rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:74:3f:d6:e6:a9:8d:c1:63:b1:69:70:ce:90:71:da:0a:bc:5c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15E472EEC88DBBC156901BE4A6E261386DFB9E3
        Validity
            Not Before: May 28 16:30:12 2024 GMT
            Not After : May 27 16:35:12 2025 GMT
        Subject: CN=5D59229EBBA1990E3CD7B01D88AD8629751D3376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:72:a2:57:06:35:b5:62:ea:1e:12:38:cd:
                    f8:02:b0:d4:8b:bb:b2:61:e4:b9:6e:6d:ee:78:a3:
                    f6:12:35:94:10:01:87:cb:4f:2f:29:cf:85:6d:64:
                    1f:ff:28:ab:77:dc:ff:4e:f2:47:fa:aa:f7:ac:53:
                    7e:a4:20:55:4e:05:4f:43:be:26:ee:97:49:dc:d1:
                    1a:36:93:ba:73:4e:ee:e0:e6:12:23:0f:35:0f:5b:
                    b9:13:ab:f2:8d:d6:09:f7:a8:52:81:f2:14:de:3e:
                    0d:ab:39:b9:49:cb:be:68:5d:3e:ca:58:5c:b7:f0:
                    9d:63:2e:4d:ef:79:d1:57:cc:c5:82:f0:37:8a:2c:
                    ef:0f:99:a9:4a:bc:f5:c0:09:aa:24:90:17:26:92:
                    36:dd:aa:2d:d1:8a:d0:3e:26:58:a4:e2:b4:94:e9:
                    7d:69:39:4a:37:f2:76:2d:28:db:b0:85:17:96:fc:
                    97:ca:b9:ed:23:c8:9a:7b:a3:a2:68:72:ae:08:ff:
                    71:95:f6:35:27:73:95:d6:65:28:b7:e1:2b:a3:6c:
                    13:9a:0a:ae:22:7e:12:9e:55:d9:64:6e:ee:74:c4:
                    85:8c:b1:1c:9f:8c:34:30:99:3d:cf:62:e0:8f:b1:
                    94:79:a3:b6:78:23:c9:82:46:bf:3a:cd:f2:39:c3:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:22:9E:BB:A1:99:0E:3C:D7:B0:1D:88:AD:86:29:75:1D:33:76
            X509v3 Authority Key Identifier:
                keyid:F1:5E:47:2E:EC:88:DB:BC:15:69:01:BE:4A:6E:26:13:86:DF:B9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F15E472EEC88DBBC156901BE4A6E261386DFB9E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FJj14DHw1LFwNbGKYyTUgnYNkjDTYm97nKNmM886uZ66/0/323830343a323435633a3a2f33322d313238203d3e20323634323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:245c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:00:cc:7d:1c:37:cf:16:6c:42:cb:93:a6:66:bb:27:c2:74:
         fd:be:ef:96:64:f6:e7:9f:a3:e3:4f:9b:f0:f8:c6:6e:4f:2d:
         a6:13:30:bb:b0:ea:6e:c7:75:27:d4:a4:bb:67:8a:95:95:8f:
         76:35:68:4d:51:a5:e5:07:a5:a3:0b:ae:5a:55:c7:0f:78:fa:
         76:c8:9d:64:f5:72:48:fa:c7:9e:de:b7:a5:55:20:6a:d4:a7:
         f3:f0:7e:25:c1:bd:e8:39:52:7f:29:7d:48:38:bf:23:c0:b8:
         67:cf:aa:e0:8d:85:ed:83:7c:86:fe:82:3c:fe:46:2d:f9:68:
         49:a6:25:51:38:06:1a:f7:d2:1e:d2:25:35:e6:e3:b9:cd:57:
         8f:c6:ef:01:b5:e8:c7:9c:b1:96:01:ff:8b:56:52:94:93:13:
         83:01:45:45:e3:0d:e8:df:21:a9:fe:61:b6:c3:18:38:57:95:
         21:5a:a4:20:5a:54:cc:fc:b8:3c:6a:0f:48:72:cb:62:c9:4b:
         eb:80:6d:a1:d9:dc:ff:3a:08:28:63:95:e5:0a:f7:3b:ff:43:
         dd:ff:dc:d4:f0:c9:d4:70:f7:7a:50:ff:78:4f:a8:a4:30:eb:
         1a:90:b2:88:ba:f3:00:d7:33:39:94:cf:4b:52:32:72:91:40:
         bf:2b:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:40 2024 by rpki-client on console-ams.rpki-client.org