Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
File:                     323830343a323031303a3a2f33322d3438203d3e20323634343632.roa (raw, json)
Hash identifier:          wvhPyoTpkqQjjxH4LZ1Rm1uSv6WH3FjtoDrOe/OowV8=
Subject key identifier:   AE:C9:35:F6:CC:FE:5D:A3:65:74:C1:96:BF:2D:A4:1A:28:09:E4:68
Certificate issuer:       /CN=B5568D235613C8FBA63E48026996810FAB5904D3
Certificate serial:       705D2E8F2E1E3B13CF1D0D9CF2936AF9F0ADBA5B
Authority key identifier: B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa
Signing time:             Wed 10 Apr 2024 19:42:20 +0000
ROA not before:           Wed 10 Apr 2024 19:37:20 +0000
ROA not after:            Wed 09 Apr 2025 19:42:20 +0000
asID:                     264462
IP address blocks:        2804:2010::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl
                          rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:5d:2e:8f:2e:1e:3b:13:cf:1d:0d:9c:f2:93:6a:f9:f0:ad:ba:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5568D235613C8FBA63E48026996810FAB5904D3
        Validity
            Not Before: Apr 10 19:37:20 2024 GMT
            Not After : Apr  9 19:42:20 2025 GMT
        Subject: CN=AEC935F6CCFE5DA36574C196BF2DA41A2809E468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:39:66:0b:2b:f9:8f:b3:9f:52:ad:2c:0e:
                    66:fb:4b:74:3a:90:63:fb:8d:fd:d0:09:89:40:bf:
                    d0:fd:ec:c4:f7:03:19:3c:fa:a9:43:b4:95:9c:8a:
                    c2:16:82:92:f2:40:40:41:54:33:42:61:cf:01:a8:
                    e1:e8:b2:fc:80:fd:22:b3:83:85:e9:37:cb:14:ac:
                    61:aa:2e:3e:7e:d4:86:92:1b:22:8a:0d:da:6f:a4:
                    37:55:6a:b0:26:e9:ee:fd:02:89:16:f3:59:2b:2c:
                    fa:57:4c:92:87:f8:90:5f:db:9e:3e:73:8d:0c:b6:
                    88:73:1b:c2:ca:b8:42:91:9e:a4:77:28:dc:aa:90:
                    73:ba:81:30:13:01:ee:57:7e:73:19:b8:5f:c9:2a:
                    d8:85:40:e1:18:23:36:c3:66:f0:7e:e2:49:97:97:
                    d0:50:0c:21:0c:f2:4f:04:36:27:dc:0b:d5:db:91:
                    80:2c:ca:8a:ad:43:cd:61:8a:6e:40:98:17:ca:84:
                    cf:83:37:4e:ab:2c:93:40:e2:e9:11:f4:dd:5b:56:
                    ac:5b:5f:8c:b4:f0:30:62:5d:76:d0:8a:ee:8e:cc:
                    d0:28:9a:4d:ce:0c:62:71:fa:93:85:0a:15:89:18:
                    43:9a:65:e9:f2:79:6b:dd:5d:25:4f:38:bf:d8:39:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:35:F6:CC:FE:5D:A3:65:74:C1:96:BF:2D:A4:1A:28:09:E4:68
            X509v3 Authority Key Identifier:
                keyid:B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/323830343a323031303a3a2f33322d3438203d3e20323634343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2010::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:8f:cc:27:ef:96:3a:01:49:a6:6c:cd:a2:1f:f8:55:17:
         e5:44:23:9b:ba:6f:93:65:f5:27:14:cc:3b:87:3d:c5:4a:83:
         b2:12:43:ec:e2:a7:00:46:b9:08:ea:bf:0e:1b:f4:b9:54:d4:
         f8:61:c9:18:8f:15:24:9e:9c:ef:b7:62:c6:b5:20:eb:18:1e:
         99:4a:b5:2d:9e:82:9a:b6:3d:bb:3d:ac:8f:ce:43:1f:2a:03:
         b6:3c:76:8a:2c:cb:c8:5d:dc:0a:1d:0c:4c:ce:91:9c:db:5f:
         7f:4c:d6:20:75:50:f5:f9:18:88:26:58:b9:b5:8d:58:26:ee:
         17:5f:a4:a6:87:19:ff:ef:4e:bb:55:74:e9:44:80:8b:f6:42:
         35:a1:06:ac:d7:63:81:ba:85:0b:2d:0a:1f:cf:a1:92:11:5e:
         bb:4c:0c:5f:9d:cd:4b:d7:c7:f0:8f:f4:53:f4:9c:bc:57:f9:
         89:d0:c1:46:31:31:da:96:d9:6c:e7:d2:38:05:88:dc:95:86:
         58:43:b6:f5:9e:5b:70:67:95:35:76:a8:d1:74:06:ae:ca:d7:
         37:26:71:17:bb:12:29:a2:d3:02:6a:46:dd:69:05:5f:6b:6f:
         94:eb:76:41:be:20:d5:72:95:1e:10:99:93:b1:a7:ce:11:7a:
         c5:49:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:37 2024 by rpki-client on console-fra.rpki-client.org