Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
File:                     323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa (raw, json)
Hash identifier:          YSoNbxF7dLMBAtnlFGdNfcs1o3NEI+QrU/xOsMMYzbc=
Subject key identifier:   B4:F0:D4:78:81:32:4E:A2:92:4E:38:D9:87:BD:D2:7D:65:B2:18:3F
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       6AE035AF941D70964B2AA4A8C593D9B4D0D5C423
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
Signing time:             Thu 04 Apr 2024 04:30:33 +0000
ROA not before:           Thu 04 Apr 2024 04:25:33 +0000
ROA not after:            Thu 03 Apr 2025 04:30:33 +0000
asID:                     263049
IP address blocks:        2804:fe0:1880::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:35:af:94:1d:70:96:4b:2a:a4:a8:c5:93:d9:b4:d0:d5:c4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Apr  4 04:25:33 2024 GMT
            Not After : Apr  3 04:30:33 2025 GMT
        Subject: CN=B4F0D47881324EA2924E38D987BDD27D65B2183F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:a1:06:d2:68:46:98:2e:c4:cc:8a:a9:aa:
                    16:de:e4:83:a3:14:94:1c:34:cd:d8:a2:1d:3e:81:
                    69:ec:31:d3:ef:a2:0b:44:35:42:bf:f1:cc:b7:37:
                    5e:b9:48:51:ad:ce:0c:8e:f5:50:0d:9e:aa:32:ea:
                    e9:de:60:d4:d3:92:f9:90:57:16:e5:c0:6a:b2:9d:
                    c0:53:f2:29:ac:38:5b:0c:35:46:61:3f:eb:46:0f:
                    43:03:31:7e:c9:9b:fd:6d:52:c6:97:d0:63:09:3c:
                    90:90:6c:05:9d:c5:75:51:7c:8c:07:86:f6:74:3d:
                    84:7f:e7:0b:dc:4b:75:26:77:24:84:ec:ec:1c:45:
                    1b:25:c0:8e:08:c0:4c:0c:76:bd:74:c9:9d:75:88:
                    e0:d9:cf:86:f6:f0:46:12:93:4c:ee:2e:67:1e:22:
                    9a:ab:69:e6:47:e1:88:ef:86:a5:d4:7b:45:39:f1:
                    10:13:60:30:af:2d:8a:a9:6e:c6:ec:43:08:db:d5:
                    a8:be:f3:be:08:7a:c3:8f:f6:7d:5b:cc:f9:50:1a:
                    ad:1b:6f:97:30:1e:c4:11:eb:31:ae:28:43:df:0f:
                    3e:1c:0f:bb:58:a0:0c:69:f8:d1:4a:ef:39:47:ce:
                    d2:64:78:57:d2:0d:dd:62:04:bc:85:ab:fe:55:22:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:D4:78:81:32:4E:A2:92:4E:38:D9:87:BD:D2:7D:65:B2:18:3F
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:1880::/41

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:75:89:3a:60:4a:1c:53:27:24:e3:77:24:b5:b8:f7:85:
         c4:e5:9f:12:86:c2:fa:42:ef:c7:c3:ed:f7:e2:59:34:ea:75:
         81:0b:26:86:82:ad:ed:8c:9f:2a:0d:51:d1:5e:b0:cb:bc:d6:
         fd:85:be:60:82:6c:71:5a:61:23:20:1a:5c:48:e5:97:df:e2:
         5a:e5:24:f8:da:de:ac:83:3f:68:42:62:b6:65:d8:ba:1d:ce:
         7c:cd:f2:ee:e8:71:43:4e:8a:0b:d6:4c:bf:f9:98:d5:93:09:
         a6:b1:5c:fd:f6:30:89:f5:89:3d:62:13:04:26:7b:48:ed:07:
         98:a6:6d:a1:7b:f1:5d:c7:10:bd:eb:44:a1:d6:09:ae:36:7d:
         24:4f:ab:c8:f2:76:96:f3:70:c0:8e:89:be:66:4c:bc:12:15:
         ba:5e:69:99:e2:e9:a1:2b:13:8a:21:da:7b:34:70:e9:ea:ae:
         b5:66:29:cd:e1:5b:8a:5b:85:65:74:46:0f:90:10:69:1a:19:
         01:32:d3:50:5b:27:b5:13:a0:81:18:86:45:69:ce:17:89:da:
         d2:32:cd:f8:90:f4:24:b9:71:30:f7:d0:e6:55:81:1f:0a:e2:
         a9:4e:8f:88:9b:57:ef:e2:b3:99:b0:07:74:d0:26:ca:ed:1b:
         2b:4f:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org