Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
File:                     323830343a353666383a3a2f33332d3333203d3e20323638303335.roa (raw, json)
Hash identifier:          fkH7L5a5xJJBCWKKOzOgFgghGW+JnXvkpf3dNI7tWSw=
Subject key identifier:   5F:45:B8:D7:8D:18:9E:BE:FB:B1:D2:5C:AD:55:04:E5:F9:6C:DA:BA
Certificate issuer:       /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial:       7880B6A37ACCD797CB0F2F49B76933B9F1D16268
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa
Signing time:             Thu 04 Apr 2024 09:24:28 +0000
ROA not before:           Thu 04 Apr 2024 09:19:28 +0000
ROA not after:            Thu 03 Apr 2025 09:24:28 +0000
asID:                     268035
IP address blocks:        2804:56f8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
                          rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:80:b6:a3:7a:cc:d7:97:cb:0f:2f:49:b7:69:33:b9:f1:d1:62:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
        Validity
            Not Before: Apr  4 09:19:28 2024 GMT
            Not After : Apr  3 09:24:28 2025 GMT
        Subject: CN=5F45B8D78D189EBEFBB1D25CAD5504E5F96CDABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:ba:de:af:ca:5f:57:65:a0:74:3f:74:f6:
                    a1:35:a5:36:71:dd:a4:af:00:e7:24:45:24:c5:04:
                    39:de:c7:bc:41:e2:19:08:7e:69:47:5f:c0:07:ee:
                    31:b9:58:34:0d:58:d5:8f:a8:2c:28:66:ec:75:89:
                    76:94:6e:f5:8b:10:02:f2:7e:5c:5f:fa:6e:93:27:
                    93:6a:c2:0a:c2:52:65:b3:cf:37:05:d5:11:08:05:
                    c8:de:35:a0:c2:fd:14:9e:64:28:af:48:fb:01:59:
                    58:18:fb:c9:5c:56:f7:8c:7e:9c:94:88:74:91:8b:
                    4c:fd:51:70:33:6f:54:0a:5f:e4:34:57:8d:a3:ed:
                    06:31:02:f9:4f:ac:80:99:a1:a0:aa:84:27:93:71:
                    c3:23:c7:bb:5e:4c:a3:e0:57:35:6a:1b:11:1d:f8:
                    21:e6:6d:ea:a0:48:67:7a:62:b6:48:4f:ec:3b:6e:
                    6d:3c:73:c0:1a:a1:15:75:e8:fc:e9:14:2c:20:c3:
                    87:1a:a5:52:3d:eb:72:b2:88:92:af:41:c9:79:fc:
                    a1:87:69:36:cb:ff:1d:d6:11:47:e4:f6:23:35:b6:
                    4d:ce:d9:3e:3b:6e:b9:6b:04:53:85:e5:d1:a0:c5:
                    ae:21:c5:0f:e5:e8:dc:ae:48:8d:4a:49:05:c5:bc:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:B8:D7:8D:18:9E:BE:FB:B1:D2:5C:AD:55:04:E5:F9:6C:DA:BA
            X509v3 Authority Key Identifier:
                keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/323830343a353666383a3a2f33332d3333203d3e20323638303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f8::/33

    Signature Algorithm: sha256WithRSAEncryption
         62:08:e9:3a:d1:69:8e:dc:f8:ed:94:dc:2e:b7:f5:fa:7a:61:
         d2:3c:dd:5b:a2:c1:42:fa:61:ea:20:db:bc:49:c4:5b:2c:f0:
         67:24:27:9b:60:57:08:ff:58:0d:3c:7e:36:81:ab:eb:64:94:
         f0:81:7f:66:ad:84:e2:94:fa:c4:8f:a8:36:65:e0:37:cd:fa:
         4b:2e:19:54:00:f4:b2:25:0b:19:35:38:61:c1:b0:86:73:eb:
         b7:4a:bb:ff:c1:3b:d4:4f:cb:7d:8e:0d:58:0d:78:c6:7f:5f:
         6a:e9:5e:75:af:92:fa:b9:16:69:8c:66:ae:5b:d6:a9:f9:98:
         1b:a6:0e:ff:cd:b0:c7:0e:a4:d3:78:f6:ea:85:22:81:44:e9:
         eb:38:6b:73:5b:bf:be:f5:28:17:8b:3f:1b:b5:21:ea:9c:ea:
         81:b5:e8:70:7a:6b:e5:d9:ff:34:90:18:82:60:33:0d:4c:c8:
         10:00:94:88:40:11:cd:2b:80:3d:46:1d:55:cf:ef:87:21:cc:
         ed:2f:d6:8f:32:1b:09:76:9e:71:a5:1a:e5:97:04:eb:26:c9:
         f2:50:f2:bb:f2:1d:52:c3:da:c2:30:e6:1d:01:24:90:04:4b:
         9e:7c:30:ec:38:98:b3:45:65:f8:00:9f:ef:10:84:ef:50:ab:
         ff:6d:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org