Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373130303a3a2f34302d3430203d3e20323638343731.roa
File:                     323830343a353162343a373130303a3a2f34302d3430203d3e20323638343731.roa (raw, json)
Hash identifier:          FEox2g8moZbvhe7sSArv04CM6R8z4rRYlXfXFWFlQyU=
Subject key identifier:   B0:BC:FB:B9:AC:75:A0:13:22:C7:05:6D:31:6C:5B:27:2C:42:23:F1
Certificate issuer:       /CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
Certificate serial:       5099CA655D48E9D35AEFA9A3CAA3E4294847F75A
Authority key identifier: 04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373130303a3a2f34302d3430203d3e20323638343731.roa
Signing time:             Wed 20 Nov 2024 19:16:40 +0000
ROA not before:           Wed 20 Nov 2024 19:11:40 +0000
ROA not after:            Wed 19 Nov 2025 19:16:40 +0000
asID:                     268471
IP address blocks:        2804:51b4:7100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl
                          rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:99:ca:65:5d:48:e9:d3:5a:ef:a9:a3:ca:a3:e4:29:48:47:f7:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04935EE7605C3D6FD1FEF381759D0F015EC30C14
        Validity
            Not Before: Nov 20 19:11:40 2024 GMT
            Not After : Nov 19 19:16:40 2025 GMT
        Subject: CN=B0BCFBB9AC75A01322C7056D316C5B272C4223F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:88:7c:a1:30:2a:4a:e2:a9:05:e9:13:d2:51:
                    e5:d5:48:ed:43:22:f5:88:6e:cd:46:aa:e1:0a:c1:
                    97:4a:43:ff:e1:b1:3f:62:8e:0e:9a:55:76:13:95:
                    7f:be:50:c8:fb:04:e8:f2:df:d9:73:e8:c3:4b:79:
                    83:28:17:cd:92:d1:20:1b:22:c8:a2:24:17:d7:22:
                    07:da:df:6e:fa:9b:30:25:94:66:f8:99:0d:5d:18:
                    35:e9:f5:19:58:b5:40:57:00:44:f4:8a:3c:f9:a3:
                    83:dc:2d:0d:81:15:38:94:13:b3:60:8e:2c:dc:16:
                    8d:87:2a:c6:48:8d:66:f9:f8:5b:bb:d7:49:89:66:
                    e7:9a:82:16:a4:69:58:cd:c6:ce:be:d3:b8:98:1f:
                    da:39:a6:fc:1f:c4:de:3f:0f:cd:99:a0:e7:35:c8:
                    e5:f5:3a:43:39:b6:97:3f:b6:7e:e7:2b:84:b7:84:
                    c1:07:a5:c8:9f:93:a6:eb:00:32:cf:3a:ad:af:a1:
                    0f:ee:66:b5:9a:49:3a:1d:bd:17:62:c7:88:a5:5c:
                    f0:ef:04:79:b9:4d:cb:4d:7c:52:29:dd:78:7b:8d:
                    30:1a:98:fa:3d:6e:65:0d:53:d5:43:07:f3:f6:64:
                    eb:f7:99:e9:9e:a4:5e:13:7e:7d:52:c1:31:f4:20:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:FB:B9:AC:75:A0:13:22:C7:05:6D:31:6C:5B:27:2C:42:23:F1
            X509v3 Authority Key Identifier:
                keyid:04:93:5E:E7:60:5C:3D:6F:D1:FE:F3:81:75:9D:0F:01:5E:C3:0C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/04935EE7605C3D6FD1FEF381759D0F015EC30C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04935EE7605C3D6FD1FEF381759D0F015EC30C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373130303a3a2f34302d3430203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:40:fc:00:7a:d4:e9:8b:5f:d6:70:ad:2f:49:fa:18:cb:
         57:6d:14:99:9f:58:da:18:8d:de:7e:18:f7:89:8e:b9:d5:cb:
         9d:a0:d9:ff:f5:02:17:3b:a8:47:c3:ee:85:a8:8f:29:4f:aa:
         90:19:82:2f:88:25:53:10:0b:22:8b:c3:b4:7e:4d:fe:b6:03:
         69:40:ef:53:53:6d:62:36:9b:b8:fd:ce:f0:b6:65:b0:84:49:
         50:af:2a:29:5a:d8:36:d9:e8:af:1a:f0:3e:c1:b8:53:0a:22:
         4f:62:81:87:35:31:0f:c1:f4:6c:3a:92:a1:60:a0:02:d4:1f:
         ce:d2:f1:95:e0:87:44:08:a7:d1:b6:d9:73:f0:8f:b0:58:93:
         ee:01:66:a3:bd:29:93:00:f8:6c:0f:a4:b3:01:e6:13:9f:29:
         95:6a:89:a8:1d:4a:c1:c7:4f:94:0c:a4:18:ce:89:97:fb:8b:
         9f:06:3e:83:67:98:fe:62:1b:9b:67:3e:0e:7a:ef:cf:10:b6:
         1a:ea:63:2b:d3:34:e0:5c:7d:4e:50:7e:fe:af:7f:2c:44:f1:
         cb:0b:0f:94:31:9c:71:15:60:13:92:5d:43:25:4f:49:dd:dc:
         c0:23:7e:a8:33:b9:06:c0:ac:f8:dc:15:c8:c8:f4:2c:a7:8d:
         69:c5:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:19 2024 by rpki-client on console-fra.rpki-client.org