Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa
File:                     323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa (raw, json)
Hash identifier:          ul1f4ky2oH9XDlmsg8j4yfF2vAfY9xt2eDDbzd/HFQc=
Subject key identifier:   F3:BA:CA:75:76:FC:C9:3B:FF:1E:97:05:85:BC:A6:3B:B5:BD:85:29
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       4B92B4BB7781507CBFB8E4CC40899392DB8FD604
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa
Signing time:             Fri 20 Sep 2024 19:50:43 +0000
ROA not before:           Fri 20 Sep 2024 19:45:43 +0000
ROA not after:            Fri 19 Sep 2025 19:50:43 +0000
asID:                     268564
IP address blocks:        2804:531c:230::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:92:b4:bb:77:81:50:7c:bf:b8:e4:cc:40:89:93:92:db:8f:d6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Sep 20 19:45:43 2024 GMT
            Not After : Sep 19 19:50:43 2025 GMT
        Subject: CN=F3BACA7576FCC93BFF1E970585BCA63BB5BD8529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:5a:a2:1d:ac:d8:3d:10:af:02:b1:c7:82:
                    f9:a7:3b:03:5f:23:62:22:a4:c3:e0:15:82:fc:aa:
                    29:39:bc:71:fe:c6:9d:a7:a2:c3:cf:4b:91:4c:1e:
                    6b:eb:9e:3d:29:3b:e6:8c:29:94:a5:6a:62:85:f7:
                    b2:0a:5e:08:2b:e3:dc:14:09:b7:72:42:72:ee:0c:
                    9d:31:9e:12:59:03:13:a7:c5:32:0f:92:d8:36:4b:
                    68:7f:0a:f3:36:da:2d:0c:18:c4:ef:8f:63:be:78:
                    b4:ff:ca:74:f5:80:a3:6d:6a:0a:1b:41:b4:87:13:
                    22:f2:3b:9a:a7:53:5d:d9:b0:8d:20:a7:57:ec:a8:
                    e5:17:3b:cd:a7:5f:21:aa:95:91:00:20:cd:1d:11:
                    cf:ed:b3:fd:ec:b2:2c:9f:5a:50:95:34:29:f6:d5:
                    51:47:84:ac:6d:b9:c7:99:43:9c:61:65:0e:f1:e7:
                    0a:81:54:2a:d4:f0:eb:f3:08:ea:3b:04:b7:81:00:
                    6a:e8:87:96:5d:82:74:f4:97:71:ea:66:c2:ef:3a:
                    8b:fd:40:e7:5b:76:6d:9e:a4:d1:0e:25:a5:c6:00:
                    53:43:2b:74:5f:46:93:10:1f:74:ef:98:15:7f:10:
                    0b:f6:74:d7:a7:2e:c3:85:8f:29:6a:0a:6c:27:d2:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:CA:75:76:FC:C9:3B:FF:1E:97:05:85:BC:A6:3B:B5:BD:85:29
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233303a3a2f34352d3435203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:230::/45

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:fa:0e:90:d9:18:82:25:e5:1a:00:5d:95:3f:37:74:77:
         5f:b7:30:71:ec:68:8c:ce:13:53:92:96:7a:6f:35:a4:a6:67:
         c0:5c:16:f1:1a:bd:8c:54:a1:85:0b:e0:6b:ee:a8:56:9c:13:
         82:f5:4a:0c:be:f1:9b:ee:b4:29:9e:af:3b:e1:22:b9:45:01:
         12:9d:c6:f8:6c:6b:30:f8:df:4e:4e:1f:43:61:4c:47:d0:4f:
         2c:4f:36:b8:eb:2a:a1:df:51:87:38:70:07:3b:b2:4a:62:f0:
         db:cd:24:6d:30:48:38:6c:f3:81:83:ff:8f:1c:7b:95:88:1a:
         65:4d:ef:80:2f:5a:3c:50:97:29:cd:f6:65:57:ca:06:e9:8e:
         2f:47:b0:c3:27:a5:3e:dc:99:9a:8f:da:24:44:f1:50:45:e6:
         a2:18:ff:a0:1f:9c:d4:7f:78:47:70:2d:3a:a5:a2:5e:40:7c:
         85:e8:4e:cb:ae:c7:5c:a4:fa:f0:9a:b4:e3:94:f6:8c:f9:71:
         74:c5:8a:d5:31:40:75:43:26:4e:0c:1a:00:97:2a:49:17:00:
         68:02:24:77:72:1c:86:54:5a:84:ee:23:01:25:da:97:e9:17:
         71:96:7c:ab:15:ab:a5:4d:08:94:1f:e8:f7:aa:3f:83:5f:bb:
         43:78:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:14 2024 by rpki-client on console-fra.rpki-client.org