Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa
File:                     323830343a383335633a3a2f33322d3438203d3e20323732313933.roa (raw, json)
Hash identifier:          dvjRgp60oEauVJzh22AFUFF24ROq8UTkTthHQOe/sqA=
Subject key identifier:   AD:95:B5:47:E2:4D:7F:16:59:E9:16:A8:33:A6:A9:86:4C:66:48:33
Certificate issuer:       /CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
Certificate serial:       233D97153AFD9216DE717D791216B4DFB61F8353
Authority key identifier: 55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa
Signing time:             Thu 04 Apr 2024 20:12:50 +0000
ROA not before:           Thu 04 Apr 2024 20:07:50 +0000
ROA not after:            Thu 03 Apr 2025 20:12:50 +0000
asID:                     272193
IP address blocks:        2804:835c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl
                          rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3d:97:15:3a:fd:92:16:de:71:7d:79:12:16:b4:df:b6:1f:83:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3
        Validity
            Not Before: Apr  4 20:07:50 2024 GMT
            Not After : Apr  3 20:12:50 2025 GMT
        Subject: CN=AD95B547E24D7F1659E916A833A6A9864C664833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:6b:c4:f5:de:15:6b:41:3d:0e:b2:05:1f:
                    d1:cb:89:01:19:da:a5:79:f1:bf:24:37:e5:b4:10:
                    1f:44:0e:49:79:ac:09:9e:0f:21:1e:60:80:67:3d:
                    c4:4a:5c:7d:54:a0:93:59:cf:ce:38:79:f6:5b:b0:
                    0e:b6:46:22:1e:5a:c8:ec:42:28:83:8b:16:8b:af:
                    a5:40:b3:fd:05:1b:fb:a6:aa:a4:51:db:04:15:cb:
                    af:a9:ae:c8:b8:51:92:16:a1:67:19:cf:91:5f:0e:
                    3f:b6:e0:2e:17:35:c0:05:a8:5a:0a:07:2c:72:96:
                    67:a4:6b:c3:da:ee:8e:dc:5f:c8:9f:d0:94:07:50:
                    b1:c6:b3:71:9c:0f:9e:17:9f:38:16:2c:80:88:68:
                    a3:46:60:b5:43:b3:a5:85:3b:e5:dc:60:de:78:ea:
                    5a:d4:c0:12:6b:aa:ca:a7:2c:b8:2a:8b:3d:be:46:
                    8c:22:46:5f:fd:eb:88:f4:19:ad:4e:7e:a2:11:1d:
                    95:2a:bb:e3:80:7d:d4:cb:94:fe:ec:2f:36:fd:48:
                    1f:0a:04:64:9b:19:ca:8e:02:f3:e9:7f:27:47:c8:
                    09:00:45:17:dc:91:7e:94:f0:cc:15:4f:14:13:fb:
                    d3:31:9f:62:8e:e4:3b:22:bc:fb:9b:ee:d5:dc:f0:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:B5:47:E2:4D:7F:16:59:E9:16:A8:33:A6:A9:86:4C:66:48:33
            X509v3 Authority Key Identifier:
                keyid:55:8F:AD:BC:85:8C:E2:0B:A4:32:A6:DD:4C:B4:84:AB:DB:DC:D4:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558FADBC858CE20BA432A6DD4CB484ABDBDCD4D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVo6xCfSWbhSAKdLJZ5GyCgcScCAGquu1eYVewGFsMj7/1/323830343a383335633a3a2f33322d3438203d3e20323732313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:835c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:11:c8:4d:99:8d:54:9d:6e:54:42:d8:ac:be:43:13:5d:2f:
         7c:ba:d8:d4:97:8f:0b:d8:47:6a:42:b6:6a:7f:67:ae:13:4a:
         1b:c8:62:65:45:74:c3:fe:fa:6d:36:69:53:e5:fe:cf:7a:41:
         dd:bb:6c:41:4e:06:13:db:62:17:7a:be:60:67:36:f3:27:0f:
         e1:4a:0e:8d:6e:61:30:bf:60:23:6a:c0:86:7c:63:6a:04:f5:
         5a:f5:50:e9:3e:9e:a3:06:9b:cf:57:04:7f:bd:fe:23:a0:ae:
         e8:0e:bf:e6:3f:6d:1d:fb:27:1c:79:5a:ae:12:1d:e5:7c:23:
         cb:16:7f:40:d2:87:d0:50:cc:55:d4:7a:02:ae:58:d5:bd:53:
         7a:93:d5:d6:1f:e3:53:eb:22:50:8b:74:ec:7d:f9:46:0b:21:
         64:93:e7:5b:c4:12:3c:7a:78:05:65:0c:04:03:78:a9:b0:37:
         75:31:7d:8b:54:e4:c9:f9:3b:5c:59:8a:9e:7d:95:46:f1:3e:
         86:5f:54:de:80:71:16:91:31:f6:d4:8a:8d:3a:83:1b:f4:b7:
         09:94:47:62:e9:00:98:4e:00:f5:72:37:2e:88:90:c1:f4:49:
         21:67:66:db:2e:55:22:e6:60:e0:ee:2a:73:52:2a:5c:42:60:
         76:76:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org