Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa
File:                     323830343a336236343a3a2f33322d3438203d3e20323636313436.roa (raw, json)
Hash identifier:          Y5XTgZR6OUeZMGSge1pnwkK2KxkQUWlBXZecutlBAQU=
Subject key identifier:   44:59:11:F4:F5:EA:3F:1E:17:F4:A2:BE:DC:1D:C6:DE:7D:5D:20:F9
Certificate issuer:       /CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
Certificate serial:       5BCD595D1476E1386D8B61C69D5818825EEB4C90
Authority key identifier: 05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa
Signing time:             Thu 07 Nov 2024 15:48:17 +0000
ROA not before:           Thu 07 Nov 2024 15:43:17 +0000
ROA not after:            Thu 06 Nov 2025 15:48:17 +0000
asID:                     266146
IP address blocks:        2804:3b64::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl
                          rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 15:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cd:59:5d:14:76:e1:38:6d:8b:61:c6:9d:58:18:82:5e:eb:4c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
        Validity
            Not Before: Nov  7 15:43:17 2024 GMT
            Not After : Nov  6 15:48:17 2025 GMT
        Subject: CN=445911F4F5EA3F1E17F4A2BEDC1DC6DE7D5D20F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:90:1f:e7:0f:b3:0d:13:b6:49:7c:6d:b0:
                    b4:d0:a0:05:95:8f:6a:ab:c4:22:c2:18:52:cd:37:
                    13:72:ba:0a:08:b7:4f:c1:41:6b:bc:27:1e:5e:2e:
                    99:e2:31:27:95:d4:ae:1b:ed:c7:77:de:3e:17:06:
                    05:4f:7a:e3:a9:f3:fa:2b:d9:6e:52:4e:b8:f0:47:
                    04:4b:8c:2b:70:e2:f4:0b:c2:f2:27:f9:67:7d:45:
                    0c:be:1f:94:bd:61:c5:d9:a6:d2:9a:db:e4:a7:9a:
                    8f:0e:f8:fe:cb:a0:0c:0d:27:d6:8f:1c:83:96:5d:
                    dc:98:03:ae:d0:62:4b:19:c6:dc:b9:9d:59:16:69:
                    f6:c3:f1:9c:d9:3f:26:0f:ef:c7:70:b8:d3:07:66:
                    39:58:bd:d0:53:3f:a7:cd:d2:99:bf:72:c9:42:20:
                    b1:fe:13:8e:8e:16:b6:97:05:d6:b5:a9:b1:c8:5c:
                    50:3d:09:c1:c9:ff:3b:28:20:5f:5e:25:32:43:ab:
                    2f:9d:92:dc:8b:dd:c3:1a:60:d9:b2:0e:c4:53:eb:
                    b7:2f:27:cf:c8:0d:dc:fb:c4:b2:c3:cb:28:a4:14:
                    de:24:9d:81:0c:91:00:9f:d9:ed:c8:70:19:d9:26:
                    8f:bb:7d:e6:f3:f9:6f:46:ce:48:28:c1:d1:c6:5b:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:11:F4:F5:EA:3F:1E:17:F4:A2:BE:DC:1D:C6:DE:7D:5D:20:F9
            X509v3 Authority Key Identifier:
                keyid:05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3438203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:85:84:8d:39:2f:e3:f8:7a:d2:b9:fc:0a:3f:34:65:ea:69:
         ce:d9:27:7e:f7:26:44:ff:62:14:8d:9f:74:7b:44:f2:3c:cb:
         5c:59:6c:68:28:fc:22:a3:0a:2c:ea:4a:ad:95:55:52:3e:be:
         7c:1e:05:b1:ce:30:ce:02:b6:ee:f7:ca:d1:3b:63:48:49:bf:
         08:cc:19:a8:6c:1b:dd:e3:ae:e9:8e:78:64:91:40:4c:51:f3:
         b9:1d:31:ee:f9:70:6f:be:f0:95:b6:06:37:6e:21:bc:84:6f:
         2e:29:6d:b9:2d:40:4d:2a:65:ac:8e:06:1b:5b:63:1f:56:13:
         91:71:1e:28:29:93:e5:36:0b:d2:1f:5f:58:c5:90:3a:25:56:
         0f:52:9b:1f:dd:9a:33:2a:1b:f9:72:3b:11:39:02:4e:5e:c0:
         a0:56:28:e8:a9:18:45:d0:e3:8b:eb:81:20:8c:46:db:6b:61:
         11:57:25:31:1f:5b:83:df:9c:ea:8f:c1:65:f8:7b:fe:44:0b:
         ba:d0:3d:7e:b9:55:b2:68:d6:31:f6:83:b2:81:92:c2:d7:25:
         f5:23:44:88:7b:32:4d:a4:0a:9b:5b:2f:72:2f:ea:73:2b:2b:
         f6:e2:98:3f:cb:b3:21:84:2d:38:09:d4:cc:82:1f:d5:46:12:
         a2:a6:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:15 2024 by rpki-client on console-fra.rpki-client.org