Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3336203d3e203631373438.roa
File:                     323830343a316263343a383030303a3a2f33332d3336203d3e203631373438.roa (raw, json)
Hash identifier:          fHDktS56ceDRKJNTcLYQHshho2zr/20DhLThwfyjX9g=
Subject key identifier:   98:AE:29:B0:4C:BF:EB:46:E5:A3:C0:7C:19:84:AF:B6:74:0B:45:D6
Certificate issuer:       /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial:       462C1DB59B42242188D73BE9E1FA840D5EE020DA
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3336203d3e203631373438.roa
Signing time:             Mon 25 Nov 2024 14:43:26 +0000
ROA not before:           Mon 25 Nov 2024 14:38:26 +0000
ROA not after:            Mon 24 Nov 2025 14:43:26 +0000
asID:                     61748
IP address blocks:        2804:1bc4:8000::/33 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
                          rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:1d:b5:9b:42:24:21:88:d7:3b:e9:e1:fa:84:0d:5e:e0:20:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
        Validity
            Not Before: Nov 25 14:38:26 2024 GMT
            Not After : Nov 24 14:43:26 2025 GMT
        Subject: CN=98AE29B04CBFEB46E5A3C07C1984AFB6740B45D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:be:6f:d5:de:19:98:d7:29:8f:96:3c:8d:
                    a8:58:bf:c7:cd:66:72:c7:71:d7:d1:e2:cb:4f:53:
                    94:88:4a:a1:47:0c:b3:f3:83:61:f2:58:94:2a:74:
                    6b:61:86:0c:12:64:85:96:83:9f:56:bd:c0:dc:fb:
                    27:f6:93:80:63:0f:93:84:1d:5c:55:00:81:1d:3f:
                    4f:87:43:b8:84:d2:c5:16:ff:40:77:18:d7:e9:c9:
                    ee:8d:7c:a4:17:36:a0:65:a3:b6:83:3b:db:0a:15:
                    86:87:10:ae:a0:82:21:94:d3:e6:0f:8c:5c:7d:a0:
                    c8:38:53:9e:56:43:7c:57:23:45:ae:82:8e:a6:e6:
                    df:ee:80:52:6f:cd:22:d2:b9:02:91:34:6c:55:fc:
                    ce:82:35:d2:c9:03:fc:78:30:60:ac:58:f3:86:c7:
                    c0:41:51:fc:fa:5c:ba:cf:a8:e0:08:f0:b8:9f:5f:
                    dc:4e:7d:21:b8:da:9a:78:eb:a6:8b:72:c5:88:f0:
                    ed:f0:4f:bd:eb:3c:9f:05:4d:20:87:84:0b:b1:33:
                    2a:81:5e:cb:55:58:8c:dd:77:e0:ae:ce:90:88:74:
                    3c:64:cb:ba:89:1d:94:90:8d:23:ed:8e:d2:19:40:
                    e2:ee:42:41:4b:57:20:58:a5:ef:88:2c:e9:5f:a9:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:29:B0:4C:BF:EB:46:E5:A3:C0:7C:19:84:AF:B6:74:0B:45:D6
            X509v3 Authority Key Identifier:
                keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a383030303a3a2f33332d3336203d3e203631373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bc4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:fc:10:c0:76:e7:d3:51:94:55:50:ed:a7:96:b8:15:a9:
         e6:ca:5c:da:fb:7e:0d:b0:4d:ce:f4:1e:d9:ee:f4:21:4f:3a:
         e5:ee:00:d3:42:09:95:c2:0b:de:27:7c:30:cd:69:a7:16:f0:
         3a:69:f8:2a:4d:ff:fd:7c:02:75:40:3e:11:c6:c6:5c:52:c8:
         8f:99:97:1b:e8:6a:58:12:90:e9:04:91:08:58:28:de:2c:a1:
         78:09:61:23:82:fd:42:5c:97:8f:de:3f:2f:b8:24:ce:5c:b8:
         0a:1c:2e:58:f7:7c:34:b0:79:da:f0:92:12:3d:b1:ca:e9:1e:
         4a:bc:f3:50:c8:ed:3b:39:7c:0b:a9:a8:d8:17:21:6c:f4:a7:
         ac:67:79:92:ef:98:58:ac:fd:5e:24:97:66:65:6e:47:d7:56:
         97:85:5d:47:f6:21:ef:d3:85:d5:80:8b:91:fd:dd:ac:d1:d5:
         77:42:c8:03:e1:d5:b8:45:b5:c2:d5:18:4c:73:ab:ec:96:dd:
         2d:a1:e6:c6:b0:a2:9e:f8:a4:42:6d:49:9e:74:a4:47:89:7c:
         e0:e5:65:9b:cd:1b:cd:cb:2c:b8:40:6d:49:5c:74:a9:e2:ad:
         71:0c:f0:fd:02:27:df:93:86:11:00:21:59:a3:8b:64:3a:b7:
         98:0f:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:12 2024 by rpki-client on console-fra.rpki-client.org