Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33322d3332203d3e20323638353333.roa
File:                     323830343a353261633a3a2f33322d3332203d3e20323638353333.roa (raw, json)
Hash identifier:          vieOpHhNQ4CzQmfvPotXsiFoo3Zov9IMZzCnb7CUG8E=
Subject key identifier:   0A:96:76:B4:92:A8:39:97:78:EB:C6:0C:36:AC:DB:C4:92:F4:63:C0
Certificate issuer:       /CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
Certificate serial:       6FE489CAD0C6190EAD61B726327A0D50B544DC91
Authority key identifier: BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33322d3332203d3e20323638353333.roa
Signing time:             Wed 03 Apr 2024 21:48:24 +0000
ROA not before:           Wed 03 Apr 2024 21:43:24 +0000
ROA not after:            Wed 02 Apr 2025 21:48:24 +0000
asID:                     268533
IP address blocks:        2804:52ac::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl
                          rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:89:ca:d0:c6:19:0e:ad:61:b7:26:32:7a:0d:50:b5:44:dc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C
        Validity
            Not Before: Apr  3 21:43:24 2024 GMT
            Not After : Apr  2 21:48:24 2025 GMT
        Subject: CN=0A9676B492A8399778EBC60C36ACDBC492F463C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c2:4d:71:06:10:8c:40:e5:79:ff:0d:8f:3f:
                    01:e5:51:d1:e9:94:9e:5d:db:4f:64:1f:c7:36:5f:
                    0e:80:25:72:c5:f5:81:e7:ab:4e:13:c1:d5:13:6a:
                    4e:d4:fe:eb:5e:54:29:97:a9:05:64:6b:20:86:11:
                    81:e9:7f:3b:f6:07:28:c4:fb:07:a4:3d:33:eb:95:
                    13:fb:cb:46:2b:9a:f3:02:2f:a9:14:54:22:44:cb:
                    3e:b0:f0:ef:20:51:0d:54:9d:4c:fa:91:a1:1c:23:
                    16:79:fe:e2:09:14:e3:82:ef:f6:7c:9a:b9:c3:b0:
                    8d:56:41:7d:b1:39:8e:38:e5:be:65:c9:bc:34:e7:
                    8e:eb:f5:ed:e2:a2:f6:f8:1d:b8:d8:9f:2e:e2:d3:
                    7b:b5:1f:a8:9b:8c:3d:fa:f5:aa:9e:93:63:8f:70:
                    ca:a2:df:8f:c5:e6:cc:53:92:bd:d8:21:84:32:90:
                    f5:b3:96:e5:e4:b5:01:39:f9:a2:6d:1c:4b:48:5b:
                    61:88:c7:ea:56:98:e9:fc:0e:fd:2d:1a:a0:a0:43:
                    48:1d:af:41:91:8f:59:27:6a:b5:51:36:c9:07:9d:
                    07:00:e9:c2:b2:f0:44:0c:b0:57:ce:d1:cd:a9:33:
                    fc:a5:42:38:12:4c:56:fd:97:da:46:82:24:a1:7f:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:96:76:B4:92:A8:39:97:78:EB:C6:0C:36:AC:DB:C4:92:F4:63:C0
            X509v3 Authority Key Identifier:
                keyid:BB:15:8F:1F:98:3D:8F:21:CA:EB:93:C9:28:AC:6A:B5:2B:51:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB158F1F983D8F21CAEB93C928AC6AB52B51CB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/1/323830343a353261633a3a2f33322d3332203d3e20323638353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:39:16:40:4e:4c:b0:30:43:4c:4c:b5:e7:a1:c4:4e:35:0b:
         b4:3d:19:e3:25:b9:69:05:81:18:63:11:e8:e6:ad:51:9f:4d:
         a3:01:ac:99:9c:80:ab:c8:dd:88:e3:39:37:16:ff:20:c4:0e:
         49:ca:62:0b:df:d6:83:10:b2:63:d1:3a:62:b1:0a:cd:13:21:
         97:ac:8d:97:c9:b2:6f:b0:57:66:3f:a1:ae:2d:54:17:9a:e6:
         7d:24:0f:de:74:dc:de:0b:7b:c8:9b:94:81:8c:96:ac:78:53:
         dc:22:23:99:1f:40:58:ef:42:c2:05:18:74:11:d9:08:8d:aa:
         db:28:09:22:28:a3:3a:46:94:92:32:3d:9e:15:94:b9:44:1f:
         98:c2:d6:93:83:f6:59:30:9b:db:45:8c:3c:64:17:0c:2a:79:
         30:36:30:a2:74:ea:06:22:e1:a2:34:ed:f0:53:81:ad:3f:3f:
         53:ed:8e:c5:5f:97:d2:f0:b4:3e:41:d8:13:68:af:58:bc:f9:
         ad:8a:1b:68:76:24:ec:95:3f:0d:14:c8:79:47:8b:26:ca:ca:
         a0:e7:f2:d9:e5:e8:f5:56:72:3a:95:03:5d:0e:6d:7b:dc:b6:
         9a:b9:63:6c:5e:f6:83:ed:f2:39:00:fa:92:28:5b:13:87:e3:
         e0:d3:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org