Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323430303a3a2f34342d3434203d3e20323633303439.roa
File:                     323830343a6665303a323430303a3a2f34342d3434203d3e20323633303439.roa (raw, json)
Hash identifier:          msvcxGRS7080E6F632lEMDxpJ0PxNTMAESEq+QwQlzk=
Subject key identifier:   26:70:58:41:66:B2:86:4C:E3:DF:84:34:4C:66:7C:D5:07:26:24:CB
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       2A453BE4A4ABD853432D224908C027E9CE00872C
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323430303a3a2f34342d3434203d3e20323633303439.roa
Signing time:             Wed 17 Jul 2024 14:51:30 +0000
ROA not before:           Wed 17 Jul 2024 14:46:30 +0000
ROA not after:            Wed 16 Jul 2025 14:51:30 +0000
asID:                     263049
IP address blocks:        2804:fe0:2400::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:3b:e4:a4:ab:d8:53:43:2d:22:49:08:c0:27:e9:ce:00:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Jul 17 14:46:30 2024 GMT
            Not After : Jul 16 14:51:30 2025 GMT
        Subject: CN=2670584166B2864CE3DF84344C667CD5072624CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:52:0e:56:c2:2b:70:f7:4e:6a:e5:91:b4:
                    3d:46:89:d7:7b:e4:bb:8a:f5:35:32:16:2f:9f:84:
                    97:f8:c6:46:c3:7f:2c:b6:ba:44:ee:7c:73:81:c5:
                    f5:a0:25:44:82:89:19:51:84:c4:c7:4d:ca:1e:fa:
                    ee:19:76:63:ac:ef:7a:df:1f:26:9b:bc:0c:7e:24:
                    ca:89:77:ae:c3:89:c6:04:5c:36:d0:5c:5b:44:56:
                    5a:c1:5d:aa:7e:fa:b8:08:d0:72:9c:af:41:a2:ab:
                    85:8d:45:d6:2c:a0:ac:28:87:78:cc:4e:1a:33:f1:
                    90:51:0e:de:e1:d0:6f:82:92:d2:3a:f8:d4:fd:cb:
                    15:2f:76:d7:ad:86:c7:c0:4a:87:eb:74:fe:58:6a:
                    6b:28:23:b5:fb:6a:be:ac:76:00:fa:96:38:de:3d:
                    51:c5:7a:4c:2d:ca:47:2c:5e:d2:7b:b0:86:c7:58:
                    23:5b:28:15:14:42:b8:86:60:52:d6:92:e3:f5:8f:
                    b3:e6:bd:5c:b5:cd:c0:68:ce:2f:3e:1a:75:d3:10:
                    c0:7e:0b:d7:a3:23:8f:09:05:2c:e7:bb:b7:4d:ca:
                    8a:75:fe:d4:57:cd:e9:a2:9b:ef:c1:0f:8d:13:ca:
                    62:68:58:b0:0b:14:31:8f:15:50:55:f8:96:b5:fa:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:58:41:66:B2:86:4C:E3:DF:84:34:4C:66:7C:D5:07:26:24:CB
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323430303a3a2f34342d3434203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:2400::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:81:b3:37:29:d3:07:52:90:79:52:b8:7e:37:2a:f6:7d:31:
         60:c3:37:77:ae:20:3c:c2:62:83:b0:fb:7d:c5:57:22:32:f8:
         d0:e2:4e:d8:4d:d2:d2:c6:ad:3a:57:dd:da:f5:b0:e9:50:18:
         61:f1:35:5c:a0:74:45:3b:0f:64:97:94:61:04:f7:3a:58:a3:
         25:3a:f5:42:93:e1:20:7e:a7:0f:2c:20:51:52:5b:c3:7f:a4:
         e8:79:37:a1:d2:a1:07:37:a8:e9:34:ab:23:9f:bc:a6:10:df:
         d3:bd:2d:73:4a:bf:19:b1:bb:0c:4c:aa:93:6d:5a:f8:41:80:
         a3:c4:f9:a8:77:fb:ad:2d:ba:53:82:89:ec:56:88:57:92:27:
         05:eb:d7:2e:52:72:6c:04:ab:31:46:db:07:08:5f:b6:7f:50:
         4f:40:63:e3:9a:82:49:f7:68:c9:4b:2f:4c:fe:68:f0:87:e2:
         ba:2d:43:30:f5:1c:bb:68:5a:28:a0:9e:36:8a:0c:8b:4c:d1:
         e2:07:08:2f:a2:bf:01:08:13:6d:dc:2d:b5:d5:0f:b3:32:9e:
         28:48:8a:d6:dc:4b:e3:86:d6:5b:35:7a:46:c3:86:2a:81:c4:
         db:cd:e6:f3:a6:53:03:4e:86:ae:08:40:99:2f:8b:3b:3e:ce:
         9e:47:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org