Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa
File:                     323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa (raw, json)
Hash identifier:          h0eCCMK5iqGCYtea0lsizGJR76FYtWQQX7aFuu7HTzw=
Subject key identifier:   21:47:89:A8:43:75:08:8C:5F:F3:66:21:27:E2:6E:8F:8B:8E:96:F5
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       5D40ABCC0CE56E75211452BDFE8CA5D9779DE2CF
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa
Signing time:             Thu 04 Apr 2024 15:13:30 +0000
ROA not before:           Thu 04 Apr 2024 15:08:30 +0000
ROA not after:            Thu 03 Apr 2025 15:13:30 +0000
asID:                     268261
IP address blocks:        2804:4e70:fff0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:ab:cc:0c:e5:6e:75:21:14:52:bd:fe:8c:a5:d9:77:9d:e2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr  4 15:08:30 2024 GMT
            Not After : Apr  3 15:13:30 2025 GMT
        Subject: CN=214789A84375088C5FF3662127E26E8F8B8E96F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:43:3b:1a:a9:81:43:f1:12:dd:28:ec:f4:
                    f6:77:fd:09:a0:4d:d2:98:c5:b9:f2:ee:ca:8e:f4:
                    60:0b:49:b7:ee:a9:46:e3:84:38:b4:35:b5:a4:9b:
                    50:f1:f5:1d:67:68:ea:56:79:f8:b2:2d:bc:aa:99:
                    56:df:46:41:82:9d:75:ac:48:ae:6e:b6:16:f5:39:
                    c1:fb:fb:f6:2e:b2:ea:05:89:01:e8:b4:87:33:dd:
                    14:c8:b9:49:3b:db:82:c7:48:61:52:8c:dd:8a:67:
                    1a:a2:c2:3a:7f:50:92:e3:d3:4d:26:d4:4e:53:aa:
                    28:05:7a:4b:f3:20:d6:c7:6c:ec:06:28:77:81:2f:
                    9c:36:7e:1d:ed:36:c0:ed:8f:ff:e7:fb:43:94:ed:
                    9a:56:62:f1:6a:82:2e:1a:10:06:27:69:02:66:45:
                    4a:7d:5b:d0:2b:c9:5f:ea:29:8d:a5:28:28:fa:07:
                    8f:49:ad:ad:68:24:58:2d:59:64:44:83:98:1b:93:
                    40:7f:3c:be:d8:7c:b4:30:4a:d6:3b:04:34:db:07:
                    86:40:64:3e:04:e7:23:de:d3:1f:4e:14:99:78:bc:
                    93:0b:a0:ae:43:f6:4a:e7:8a:14:33:f3:ad:c5:10:
                    fe:a0:9c:08:4b:cb:e8:f7:d6:54:f2:61:5a:41:29:
                    a3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:89:A8:43:75:08:8C:5F:F3:66:21:27:E2:6E:8F:8B:8E:96:F5
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a666666303a3a2f34342d3434203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:0b:f9:48:18:f1:b3:6c:0e:9b:07:d0:7f:f0:04:65:43:8d:
         76:06:56:f1:6a:3b:8c:51:83:84:1c:93:4c:cd:eb:85:d8:63:
         4b:62:7e:2d:22:01:44:dd:22:35:50:f0:33:82:8e:9a:42:ec:
         ed:51:12:80:79:72:cc:90:0b:83:4d:4c:31:b9:05:10:75:f3:
         f9:65:5c:54:d4:5a:63:49:62:fe:9f:39:00:3f:a1:07:13:e7:
         b7:ff:91:13:53:cd:a7:0e:cc:2d:a8:83:3f:82:5d:e3:15:e0:
         5c:1f:8b:c3:05:4e:71:42:5d:48:53:de:ee:b7:ff:04:4a:b7:
         0d:ab:c0:a1:c1:71:7f:89:b4:10:0b:d8:f5:c1:5e:df:f3:df:
         83:b3:4d:8b:95:db:7b:83:c1:d4:3b:2f:4c:03:10:b0:18:e4:
         05:d6:34:ab:5e:8e:f9:d1:f1:07:b9:35:68:4d:14:83:62:68:
         98:ec:a6:f5:41:e6:06:9e:3b:db:9f:7e:51:42:a8:60:7e:54:
         81:7f:33:97:aa:89:15:63:03:cb:b5:63:db:7b:51:c6:91:d2:
         bf:15:12:ce:25:48:6c:27:9a:8f:82:ff:5e:2a:31:44:9f:54:
         62:86:2d:d4:7b:7e:21:f4:52:dd:f9:95:22:e5:ac:05:70:1a:
         98:e4:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org