Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363730303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a363730303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          +2rAkViTIVCwVlyk7kkfOk3YoSPxGLixd6KoLkcRg3c=
Subject key identifier:   20:31:70:7E:97:48:3A:45:5F:C6:B7:85:C7:62:40:72:F9:A6:91:45
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       10BC05CE8CA2BB200E224899DE0A717344465192
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363730303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:16:27 +0000
ROA not before:           Wed 20 Nov 2024 19:11:27 +0000
ROA not after:            Wed 19 Nov 2025 19:16:27 +0000
asID:                     268471
IP address blocks:        2804:51b4:6700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:bc:05:ce:8c:a2:bb:20:0e:22:48:99:de:0a:71:73:44:46:51:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:11:27 2024 GMT
            Not After : Nov 19 19:16:27 2025 GMT
        Subject: CN=2031707E97483A455FC6B785C7624072F9A69145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:ec:26:cc:fc:86:85:73:07:03:24:0e:78:
                    c3:0f:6a:10:5b:14:e3:cd:0d:3f:b3:99:d0:83:08:
                    31:e7:9d:5c:53:f4:d1:ea:4b:38:18:cd:ad:7d:d9:
                    8c:99:6f:98:56:32:6a:7b:19:ec:31:bc:25:67:bb:
                    a9:cd:0b:93:8b:da:55:cf:f4:f5:76:fc:12:33:09:
                    51:1d:97:04:17:7e:78:5f:a4:15:01:4a:79:7b:d1:
                    9b:27:de:79:6c:32:72:da:cd:42:6f:d7:1a:cb:96:
                    b5:e9:db:ef:34:a7:a4:8f:25:fa:d3:d9:8e:b7:65:
                    6d:97:89:e0:de:5e:28:61:b1:fc:3e:96:ff:8e:af:
                    a0:be:72:67:b0:fa:a2:69:6b:52:a7:b1:7b:6d:9c:
                    33:09:57:65:84:c3:cc:59:4a:08:a2:71:df:85:d1:
                    ab:d1:38:73:92:7a:6f:67:03:2e:05:47:fb:26:02:
                    05:3d:9d:bf:ce:dd:2d:7f:1d:d8:38:21:5d:c1:96:
                    7b:c2:40:f8:a7:ff:a8:ea:53:ab:60:ce:44:d0:16:
                    fb:14:c6:8e:d0:d6:ec:d4:e3:11:62:cf:b0:5a:14:
                    20:60:65:b3:93:fb:09:c7:d9:44:97:80:5a:b7:94:
                    00:b3:8f:f4:18:c2:b9:c5:99:e2:f0:ec:d7:32:84:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:31:70:7E:97:48:3A:45:5F:C6:B7:85:C7:62:40:72:F9:A6:91:45
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363730303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:6700::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:fc:97:74:66:e9:2b:a5:50:67:cb:15:72:b7:04:03:5f:62:
         4c:6a:a5:ab:94:e9:ba:da:7f:b0:94:a3:ea:93:85:65:4c:07:
         d0:a7:b4:e4:63:0b:24:79:77:0f:e2:0e:c4:ae:0f:b2:fa:fb:
         3a:88:5b:97:05:2e:b4:33:97:44:f4:dc:31:51:5c:ed:f3:2a:
         d3:ac:a8:9c:7b:ca:02:86:3e:ed:46:2e:65:76:72:1d:a2:87:
         7a:04:03:59:bc:a4:d8:6f:cb:9f:44:64:95:33:05:e3:b5:08:
         75:f7:0c:7b:19:75:2d:a6:10:41:b3:e5:d2:e4:46:84:bd:40:
         d4:fd:63:bc:76:64:88:62:15:7d:33:51:66:e5:64:12:81:66:
         10:b6:49:3f:6a:3f:37:85:43:2d:f4:4e:fa:8a:6c:a0:df:2c:
         38:a0:5e:9b:ab:37:f2:6d:8f:0d:3b:6a:75:a9:58:2a:7a:d0:
         3f:c7:9b:d6:46:7c:ed:d8:b2:35:bc:fd:a9:a9:38:8c:75:52:
         0f:de:b8:60:e1:0f:a4:41:61:58:5f:69:b5:e1:b6:72:fc:b0:
         19:ce:3d:e9:25:01:e7:87:71:ce:a6:77:4e:45:ab:57:9a:cd:
         d6:2f:4c:55:c9:66:75:c1:cf:fc:97:ba:20:08:93:16:c4:10:
         1d:b3:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org