Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323a3a2f34382d3438203d3e20323633303439.roa
File:                     323830343a6665303a323a3a2f34382d3438203d3e20323633303439.roa (raw, json)
Hash identifier:          JGwx3BxyDCn0iUnaqw4wvpfol0LFCPvyHGx+rZNzdhM=
Subject key identifier:   E3:97:73:81:99:36:9F:A9:6D:37:BB:D3:BD:FC:F3:F9:E1:4B:38:43
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       525AF3E4B4702AC3B85B8F51DA6936410AEF6E96
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323a3a2f34382d3438203d3e20323633303439.roa
Signing time:             Wed 17 Jul 2024 14:51:31 +0000
ROA not before:           Wed 17 Jul 2024 14:46:31 +0000
ROA not after:            Wed 16 Jul 2025 14:51:31 +0000
asID:                     263049
IP address blocks:        2804:fe0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5a:f3:e4:b4:70:2a:c3:b8:5b:8f:51:da:69:36:41:0a:ef:6e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Jul 17 14:46:31 2024 GMT
            Not After : Jul 16 14:51:31 2025 GMT
        Subject: CN=E397738199369FA96D37BBD3BDFCF3F9E14B3843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:9c:fe:97:ff:2a:f1:c3:2b:df:8f:c8:8f:
                    65:8d:9c:6e:32:5b:7b:e4:c9:2d:a7:62:54:a6:c1:
                    7e:4f:61:19:50:04:dd:7c:c7:42:27:bf:d7:82:dd:
                    eb:20:be:46:91:9c:b7:93:fe:c7:3d:b9:87:f0:ec:
                    91:e1:fa:02:cc:8e:1d:84:05:ea:19:55:60:f2:a2:
                    b5:8c:2e:81:df:a0:ca:82:d8:56:81:35:f5:2e:2a:
                    1e:09:cd:23:c0:3e:d7:2c:83:c1:0a:71:8d:10:92:
                    7e:10:50:86:58:a8:54:fc:4a:8a:5b:4e:11:cd:a7:
                    71:5b:07:b0:54:d3:5f:dd:05:bd:33:a2:de:3e:67:
                    3d:3a:0d:db:42:3e:02:47:2a:ec:30:b5:65:38:2a:
                    d0:c5:a1:3e:a3:38:46:ea:86:ec:a4:66:43:f7:0a:
                    58:91:45:7c:ec:c9:a1:e7:9b:e8:ee:be:ce:22:f1:
                    29:3a:26:13:1b:c7:c9:5a:c4:9d:4e:fa:6f:7f:01:
                    e6:a8:a4:89:52:07:4b:00:8c:d7:f5:3b:cc:26:d1:
                    79:d9:8a:0d:37:78:05:47:7e:fa:de:be:7b:6a:71:
                    9d:59:12:a3:8d:c8:ca:7a:f5:7b:6f:7d:cd:41:c4:
                    f9:93:48:a6:10:5b:c8:b5:5c:50:7d:56:a4:6b:52:
                    41:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:97:73:81:99:36:9F:A9:6D:37:BB:D3:BD:FC:F3:F9:E1:4B:38:43
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323a3a2f34382d3438203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:c0:53:82:a6:81:5f:5e:ff:d4:9c:dd:31:28:ff:ed:c3:
         2d:f6:b8:aa:dd:76:eb:01:1a:1e:21:10:1d:11:29:5e:9b:6f:
         48:b6:fe:ee:5a:77:ee:5c:22:52:4d:f5:5b:95:1e:14:43:8a:
         be:32:53:d4:63:a6:46:16:e6:4e:6a:ca:b7:1d:bf:d6:19:99:
         54:4a:63:57:aa:a1:35:4a:72:26:1c:48:7a:f5:ea:8f:fc:8a:
         af:2d:fb:cd:3e:2a:69:d9:cb:94:6a:a7:a2:47:03:d4:9d:d0:
         ca:a8:9d:0d:b8:05:15:bb:05:ab:64:f4:3e:7c:9c:53:4e:7f:
         7e:23:99:01:09:38:13:c7:3a:d1:c4:e7:07:55:fc:b3:93:1a:
         28:e4:3f:ba:96:2e:60:66:67:4c:ac:8a:8a:b4:99:d2:1a:6f:
         cb:fb:ff:ae:2f:8e:2c:ff:8d:c1:aa:65:74:eb:6e:b6:95:e4:
         41:15:08:b2:ad:38:ca:97:9a:12:65:7c:54:46:db:86:6d:ef:
         64:94:a9:2d:b8:6b:a2:d3:15:fb:db:f0:ae:d8:11:0a:48:66:
         aa:88:c3:1b:64:7b:d3:4b:f6:4e:04:30:f3:39:f7:d0:87:91:
         d6:66:b6:d8:4d:e0:36:4f:0d:31:5e:ca:45:eb:82:71:99:c1:
         3d:45:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org