Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          Li5IZ1G3yE+zwRhjo/SEH0WjMVFhtBp4ZxsT3OdmNYE=
Subject key identifier:   A3:90:20:09:5B:BE:18:00:3B:FF:16:57:0E:B4:BC:9B:A0:0F:8F:86
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       147D0332DB558BFE19CE1D9F3311CABEABA42D9F
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:09:34 +0000
ROA not before:           Thu 14 Nov 2024 15:04:34 +0000
ROA not after:            Thu 13 Nov 2025 15:09:34 +0000
asID:                     262585
IP address blocks:        2804:8f70:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7d:03:32:db:55:8b:fe:19:ce:1d:9f:33:11:ca:be:ab:a4:2d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:04:34 2024 GMT
            Not After : Nov 13 15:09:34 2025 GMT
        Subject: CN=A39020095BBE18003BFF16570EB4BC9BA00F8F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:c2:5d:d5:19:a2:c4:5a:bf:78:81:e9:21:
                    86:43:8f:34:55:3a:3d:13:fb:49:63:98:4e:49:92:
                    c2:5d:66:b9:49:8a:1d:02:76:13:2a:62:ad:96:ff:
                    7f:00:c9:0d:9f:b1:9f:d8:82:f5:01:29:1f:ee:14:
                    1b:09:0d:e8:6f:49:f7:e2:a9:7f:9d:8f:cb:5c:32:
                    af:65:af:f3:1b:1b:81:04:ad:56:05:5a:b5:9d:4b:
                    92:1c:6b:ce:44:fb:20:69:c0:b0:3c:c8:aa:f7:90:
                    02:56:f3:ec:4e:08:4c:78:cc:0f:37:f0:33:07:52:
                    ef:b6:a7:2c:14:a3:a4:38:f8:e9:fe:3c:f3:9b:e3:
                    b6:db:e5:68:28:82:dc:da:bb:8b:4e:39:5e:a7:12:
                    0b:da:10:b2:74:58:e4:56:22:6d:ea:57:50:5e:37:
                    8b:e5:03:7a:e6:8f:ca:04:dd:62:26:71:6e:2d:88:
                    b6:0a:3a:1e:3c:8d:ca:78:7e:97:fa:61:46:fc:2a:
                    87:0f:0e:56:3e:8f:46:bd:b1:61:17:01:3b:d2:33:
                    ba:37:ec:0a:d2:f3:59:c9:53:b0:7e:e5:2b:38:27:
                    3d:68:be:2e:cd:0f:26:6a:73:8c:ca:75:26:0a:cb:
                    18:b2:0e:73:9e:23:c3:2f:ba:9c:ad:32:32:89:dc:
                    cc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:20:09:5B:BE:18:00:3B:FF:16:57:0E:B4:BC:9B:A0:0F:8F:86
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a613030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ac:c3:38:83:bf:77:81:68:98:29:89:20:c9:28:01:f6:94:85:
         73:9b:dc:71:79:82:99:45:bb:3a:9f:dd:eb:d1:b5:80:da:07:
         ed:ca:f4:fd:3b:01:1e:2f:08:11:e4:84:47:b9:e6:70:72:c3:
         01:80:8a:e7:d9:2e:d5:d5:5a:45:bc:fd:36:3d:17:15:95:bf:
         a8:74:bb:bb:02:18:0c:e8:f0:b4:43:20:3e:80:89:1d:cf:ce:
         d1:31:03:dc:fe:f7:57:50:15:3e:ad:da:d7:52:31:66:95:11:
         5f:b0:e8:c6:34:9e:d5:31:8e:06:19:8c:a9:f8:44:83:17:3e:
         33:c8:10:5f:b0:34:81:f6:59:16:f2:8d:48:fc:bb:fe:bb:cc:
         d8:1f:f4:d1:74:f8:17:40:88:5f:9c:21:c4:2a:8a:bd:03:df:
         04:c2:53:ae:81:99:19:b8:67:2b:67:fb:29:7e:76:a8:34:7a:
         4f:50:9d:cc:c5:c7:7a:db:13:58:6e:a1:fc:17:f3:a5:31:5b:
         ed:e9:bd:c0:79:15:c7:5e:15:de:28:06:03:fd:aa:d9:37:3c:
         86:c7:5f:fc:82:64:44:8b:59:30:d3:cb:0a:f4:0e:1c:b9:98:
         38:74:33:4c:21:e1:d7:e8:13:ff:da:f0:1a:c0:a9:1b:e8:f9:
         4e:ab:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:19 2025 by rpki-client