Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
File:                     323830343a346332303a3a2f33322d313238203d3e20323637333531.roa (raw, json)
Hash identifier:          tFRCmGl3NObVSMwxV3hqpyHS+PAraBR1ZQBT+8HeC0I=
Subject key identifier:   BB:91:D3:FF:AD:0F:FE:19:67:CA:E8:89:D4:34:EF:76:C9:DC:07:DB
Certificate issuer:       /CN=FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7
Certificate serial:       01A8BE0C9159A6A393D58D3E6E06DEE269AADD0D
Authority key identifier: FE:EA:6B:7D:7D:B5:6D:4F:24:F7:3C:FF:B0:9D:93:55:68:7E:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa
Signing time:             Sat 26 Oct 2024 22:01:14 +0000
ROA not before:           Sat 26 Oct 2024 21:56:14 +0000
ROA not after:            Sat 25 Oct 2025 22:01:14 +0000
asID:                     267351
IP address blocks:        2804:4c20::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.crl
                          rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:be:0c:91:59:a6:a3:93:d5:8d:3e:6e:06:de:e2:69:aa:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7
        Validity
            Not Before: Oct 26 21:56:14 2024 GMT
            Not After : Oct 25 22:01:14 2025 GMT
        Subject: CN=BB91D3FFAD0FFE1967CAE889D434EF76C9DC07DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:e2:1f:7f:62:41:b7:de:37:d9:e7:db:ae:
                    c3:46:54:e1:e7:80:7e:ff:7f:d2:77:24:77:a7:d4:
                    25:31:e0:e8:cf:e6:0b:cc:b3:db:f2:8a:d8:78:77:
                    8e:90:e0:b4:02:50:c7:be:ce:92:ee:7b:5d:2a:c2:
                    8e:8d:d3:f8:dd:6b:05:27:a5:fc:53:7b:e2:b8:e9:
                    ce:bb:55:cc:e6:c2:57:39:99:d5:92:7e:fd:87:1c:
                    ed:52:d5:29:37:57:8c:c0:ca:08:55:90:8e:14:c8:
                    39:53:4a:d6:4f:c6:47:10:30:df:4c:84:4e:62:33:
                    f5:a9:4e:ad:72:fe:3c:76:0b:61:54:21:b8:b6:3a:
                    d9:41:ab:a6:07:1c:0d:3e:4d:64:78:c8:fa:10:5b:
                    47:b7:8e:80:9b:74:4c:c1:c2:e0:42:fc:24:7e:7a:
                    71:29:0a:bb:67:1b:f7:c3:6f:5a:87:f6:15:7a:4d:
                    d0:5b:2f:8b:c8:fa:f9:d5:99:42:9c:b8:38:0b:e4:
                    d3:4a:47:fe:ad:3a:96:0f:71:d5:dd:24:d2:8f:5b:
                    ac:47:e8:d1:a7:86:14:c2:4b:e2:b3:da:ad:b5:30:
                    ec:a4:32:23:9e:a3:f1:26:d0:1b:9b:a8:d5:73:ca:
                    7b:0f:9c:d5:fb:a3:e8:82:9b:9b:62:44:d7:48:15:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:D3:FF:AD:0F:FE:19:67:CA:E8:89:D4:34:EF:76:C9:DC:07:DB
            X509v3 Authority Key Identifier:
                keyid:FE:EA:6B:7D:7D:B5:6D:4F:24:F7:3C:FF:B0:9D:93:55:68:7E:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEEA6B7D7DB56D4F24F73CFFB09D9355687E3FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/323830343a346332303a3a2f33322d313238203d3e20323637333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:8d:21:98:7b:01:64:37:72:81:f5:5f:0c:34:c3:e7:64:
         93:63:91:41:6f:c0:52:76:5a:e8:80:62:a1:7d:5e:27:19:a0:
         ae:50:1b:92:78:91:fd:a5:4a:16:2c:94:dd:f8:ff:82:27:ce:
         ec:92:0d:61:ae:fa:d0:50:00:f0:bd:b4:e1:8c:ba:14:f5:8f:
         0f:e0:1e:e3:fe:e1:26:af:ab:eb:a5:58:f6:d2:94:24:9f:35:
         fe:37:72:a3:3e:37:3b:11:7d:f7:cc:6f:47:9c:1b:4d:60:62:
         b4:6d:74:c5:31:54:d4:4f:ed:36:16:f9:26:a0:de:d1:2c:ce:
         67:0e:d7:af:ee:37:81:86:b0:5f:a7:01:31:80:b2:46:33:49:
         62:ba:8c:8c:26:89:46:4c:28:2b:2b:af:eb:60:f2:a7:8c:64:
         72:c1:1f:72:cb:87:dc:cc:04:b4:fe:e6:a2:d2:9b:be:8b:68:
         7c:4f:37:d2:9a:ff:a6:f7:d0:a3:85:13:da:83:8a:9b:6c:d4:
         bd:da:de:f7:f1:ad:9a:b6:70:a8:84:c7:6d:3e:84:17:9b:d0:
         e8:81:86:c3:c2:91:d5:05:7b:1b:9d:08:a2:a9:14:75:fb:31:
         5c:e1:18:27:b2:99:2d:e9:83:a8:99:29:e3:9b:ab:56:d7:37:
         44:a9:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:15 2024 by rpki-client on console-ams.rpki-client.org