Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a3a2f33322d313238203d3e20323638333732.roa
File:                     323830343a353032383a3a2f33322d313238203d3e20323638333732.roa (raw, json)
Hash identifier:          Q7zAyq5JEWaE3PpF8ktCkLmCo7TR7rFVnrURUNIkau0=
Subject key identifier:   5E:14:75:33:0C:9C:88:B0:2C:A7:23:1F:32:A5:B3:38:BB:A6:28:45
Certificate issuer:       /CN=4E543AA50EF098AA6EA925D72F3740ECB1497625
Certificate serial:       38FF8FFFAC34B1E550CFC95ECEC4A0E5B394CEA7
Authority key identifier: 4E:54:3A:A5:0E:F0:98:AA:6E:A9:25:D7:2F:37:40:EC:B1:49:76:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E543AA50EF098AA6EA925D72F3740ECB1497625.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a3a2f33322d313238203d3e20323638333732.roa
Signing time:             Sat 28 Sep 2024 00:58:56 +0000
ROA not before:           Sat 28 Sep 2024 00:53:56 +0000
ROA not after:            Sat 27 Sep 2025 00:58:56 +0000
asID:                     268372
IP address blocks:        2804:5028::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/4E543AA50EF098AA6EA925D72F3740ECB1497625.crl
                          rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/4E543AA50EF098AA6EA925D72F3740ECB1497625.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E543AA50EF098AA6EA925D72F3740ECB1497625.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ff:8f:ff:ac:34:b1:e5:50:cf:c9:5e:ce:c4:a0:e5:b3:94:ce:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E543AA50EF098AA6EA925D72F3740ECB1497625
        Validity
            Not Before: Sep 28 00:53:56 2024 GMT
            Not After : Sep 27 00:58:56 2025 GMT
        Subject: CN=5E1475330C9C88B02CA7231F32A5B338BBA62845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:31:b8:a0:f1:58:8d:5b:76:f6:1b:f9:76:
                    99:63:ef:0d:9f:74:fc:68:0a:18:ba:00:48:cf:c5:
                    62:d3:39:cd:b9:21:9f:bd:71:35:21:36:b7:84:9b:
                    fd:2e:4f:3e:41:16:bc:36:cb:a4:8d:19:c7:9e:cf:
                    f5:71:d1:76:ed:e4:2b:bf:f0:91:6c:85:9f:f1:1b:
                    22:03:8e:3a:1d:6f:0a:82:50:d5:51:20:24:9f:8b:
                    b8:1c:87:40:dc:34:2b:e0:9b:55:5e:f6:dd:a6:7b:
                    cf:ca:8c:7e:c6:a2:61:a1:55:30:bb:5e:1f:ee:b3:
                    46:26:b5:c6:e9:bb:23:97:3e:0d:5b:b2:a3:f9:c7:
                    df:34:ee:67:4a:ac:a1:3e:35:af:32:42:3f:be:43:
                    4f:8e:61:8a:25:5b:87:29:db:b1:df:5c:41:4c:b0:
                    25:8a:60:a2:4c:8d:4e:da:14:24:56:6a:a4:44:80:
                    8f:9c:7f:8b:f4:ef:45:3f:3a:cd:97:5a:e9:79:74:
                    dd:25:79:89:23:6f:9a:e4:5c:af:f1:ab:37:17:54:
                    a7:29:09:28:bd:71:06:63:2e:b6:bd:a3:22:84:d1:
                    ac:97:12:79:ea:41:06:5d:2f:42:79:df:39:74:d8:
                    0b:1c:93:b6:4f:69:05:b7:a0:a9:78:81:68:49:0f:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:75:33:0C:9C:88:B0:2C:A7:23:1F:32:A5:B3:38:BB:A6:28:45
            X509v3 Authority Key Identifier:
                keyid:4E:54:3A:A5:0E:F0:98:AA:6E:A9:25:D7:2F:37:40:EC:B1:49:76:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/4E543AA50EF098AA6EA925D72F3740ECB1497625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E543AA50EF098AA6EA925D72F3740ECB1497625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FtriNaqeFqeCpsum3gc2smke4zG95iG8RyGcYrkpKZPB/0/323830343a353032383a3a2f33322d313238203d3e20323638333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5028::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:85:91:3f:b2:6b:f1:97:18:49:f9:ac:1f:94:94:9a:a9:3f:
         2e:8b:4e:86:b5:85:5e:66:e3:ec:5e:97:08:0b:89:84:17:bb:
         ac:04:69:ac:da:32:67:d8:59:c9:d8:94:23:00:aa:2f:94:f6:
         f0:2f:5d:08:d3:ad:2f:07:9b:2a:1f:3e:32:27:0b:68:a2:9c:
         b3:95:93:4b:94:3a:1b:17:8f:c9:4e:36:6c:83:50:fe:d2:e8:
         49:be:a3:d5:d1:38:5d:7e:05:9f:fb:81:e5:55:11:cd:3c:18:
         19:cc:2d:36:63:ed:ca:f3:21:f0:50:e2:31:bf:6b:5a:b9:b9:
         f3:cd:d9:98:23:cc:3b:2d:7e:74:fb:ed:4b:c1:5d:94:1f:a4:
         ff:36:cf:24:1b:e9:b9:87:d4:84:67:23:b9:7c:29:f1:9d:32:
         db:4e:fb:70:9a:06:c4:ee:f1:b8:b4:42:39:03:59:75:fa:88:
         7c:44:0b:52:08:55:60:ed:04:a4:c9:53:28:78:0f:a3:47:9e:
         f4:aa:47:5a:8a:9e:1f:12:77:62:d1:55:ac:76:11:5f:49:28:
         b6:f7:db:b2:a8:b6:fa:c6:7b:b8:32:6a:39:0c:60:8d:f3:6a:
         a1:d0:f0:b9:e9:56:29:6b:0b:aa:b1:2a:ff:95:b3:a2:9d:fe:
         65:76:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:15 2024 by rpki-client on console-ams.rpki-client.org