Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/323830343a323061343a3a2f33322d313238203d3e20323634353033.roa
File:                     323830343a323061343a3a2f33322d313238203d3e20323634353033.roa (raw, json)
Hash identifier:          ElXhKZNTP/M5s7KSMnuYEJp0A3M9rZwnokXkh+XLD0w=
Subject key identifier:   A4:0E:31:98:BF:56:2C:CC:EE:E0:B5:4D:42:69:18:D0:AF:5C:65:AC
Certificate issuer:       /CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
Certificate serial:       500D482CB4F629F5FC3E80BD83747F2201A03B5E
Authority key identifier: 49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/323830343a323061343a3a2f33322d313238203d3e20323634353033.roa
Signing time:             Tue 30 Jul 2024 14:51:24 +0000
ROA not before:           Tue 30 Jul 2024 14:46:24 +0000
ROA not after:            Tue 29 Jul 2025 14:51:24 +0000
asID:                     264503
IP address blocks:        2804:20a4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl
                          rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 03:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0d:48:2c:b4:f6:29:f5:fc:3e:80:bd:83:74:7f:22:01:a0:3b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
        Validity
            Not Before: Jul 30 14:46:24 2024 GMT
            Not After : Jul 29 14:51:24 2025 GMT
        Subject: CN=A40E3198BF562CCCEEE0B54D426918D0AF5C65AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:3d:60:b5:19:ab:d7:a6:cf:79:09:b1:ec:
                    37:b7:31:df:17:39:95:a7:13:5e:b5:07:ba:88:ac:
                    12:af:4c:c7:94:2a:c5:ca:9e:da:3c:95:0f:23:a3:
                    5b:44:a6:0e:5f:34:96:1c:0c:61:93:70:2d:a8:32:
                    f3:db:04:90:71:23:83:1a:89:2a:06:cb:22:68:8c:
                    32:94:c8:a7:92:20:58:01:e3:db:72:ff:e5:5a:2e:
                    ea:26:67:c3:22:60:b5:52:5a:be:3d:fc:76:90:36:
                    f3:e6:bf:cc:18:ce:d0:c5:7f:11:7a:0c:dd:8a:ba:
                    39:05:95:ef:aa:46:3b:bb:1b:16:f4:b8:ea:d7:4f:
                    7c:be:96:db:07:93:ca:39:32:00:4f:04:bb:5f:23:
                    0c:70:bb:d0:f6:43:39:6d:f0:13:86:2f:49:b3:df:
                    27:10:e4:1c:23:82:e2:a1:c3:53:75:aa:70:9b:8b:
                    f5:44:e5:1f:8a:ce:0d:dc:96:e1:c3:8c:e6:88:4b:
                    2e:00:2c:5c:3a:f3:ca:c7:c1:82:ea:64:0e:e7:92:
                    21:4b:f9:2d:04:51:43:5b:7b:bb:bf:0f:40:cd:9b:
                    d6:1d:68:f1:1b:47:a6:b0:77:71:38:4a:fe:ca:80:
                    ad:cb:44:9a:ea:08:9b:6c:a5:86:66:48:5c:3b:de:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:31:98:BF:56:2C:CC:EE:E0:B5:4D:42:69:18:D0:AF:5C:65:AC
            X509v3 Authority Key Identifier:
                keyid:49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/323830343a323061343a3a2f33322d313238203d3e20323634353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:0e:aa:e5:e8:26:c8:44:07:6f:09:03:0e:78:b2:96:e3:
         28:40:af:5e:f1:c8:8e:5b:67:92:42:46:64:fb:cc:d3:7e:54:
         9e:2f:92:39:00:f2:b4:dc:f9:8b:b0:64:03:82:a5:7e:08:dc:
         04:c3:58:d2:5d:9f:ad:08:e8:5f:de:99:fe:fa:51:78:50:3e:
         b2:14:e7:93:59:8e:e4:22:53:0b:cc:4a:83:9b:fb:27:b9:2e:
         d7:f4:44:64:5a:1f:dd:c4:b5:fd:a2:7b:72:e0:1f:d3:ef:cc:
         08:c2:e5:ca:5a:02:75:04:e9:5a:9f:a3:44:fe:20:89:cf:a9:
         e8:f3:73:de:cf:4b:fa:48:e8:3b:7f:9e:e3:29:ef:39:04:7f:
         31:04:8c:88:89:cd:8c:bc:91:12:06:0f:07:21:9a:70:08:15:
         f7:db:b7:71:8f:f9:77:bb:ef:4d:f4:31:09:bb:88:f6:f0:25:
         a4:e1:ee:56:fc:5d:06:9b:82:2c:ac:6d:e7:b3:72:38:2b:db:
         e9:9f:b7:e3:21:90:6d:4b:da:55:45:28:2d:67:cc:a5:5e:8e:
         f3:30:74:72:60:09:ff:9e:1d:5e:95:8a:01:2d:6c:a8:93:62:
         75:30:82:ca:b9:12:9d:16:1d:6f:36:ba:94:c3:04:1f:a9:aa:
         5c:6f:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:21 2024 by rpki-client on console-ams.rpki-client.org