Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa
File:                     323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa (raw, json)
Hash identifier:          U2xnj7+94Pa1enDSbuU9NqIfnbGV8nEKEDr41FnYa0U=
Subject key identifier:   75:23:23:34:31:5D:2F:50:E6:9F:19:BA:A3:57:E3:A5:00:A8:C6:8C
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       5239B95EE523289E4FC4E40D9965974B02594D6D
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa
Signing time:             Thu 25 Apr 2024 17:28:57 +0000
ROA not before:           Thu 25 Apr 2024 17:23:57 +0000
ROA not after:            Thu 24 Apr 2025 17:28:57 +0000
asID:                     262566
IP address blocks:        2804:3f10:5000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:39:b9:5e:e5:23:28:9e:4f:c4:e4:0d:99:65:97:4b:02:59:4d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Apr 25 17:23:57 2024 GMT
            Not After : Apr 24 17:28:57 2025 GMT
        Subject: CN=75232334315D2F50E69F19BAA357E3A500A8C68C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:2e:09:42:6a:5d:bd:f6:53:fb:de:77:8d:
                    0d:68:83:57:b1:05:ba:7f:d8:c4:3d:ae:ff:6a:49:
                    69:96:1f:c7:99:8c:80:33:8f:77:c1:23:f0:fb:bf:
                    ba:75:ea:fc:85:e8:84:ef:a6:83:19:28:21:16:84:
                    7d:65:91:a0:d3:34:bf:cc:b6:e4:5f:4b:c8:3a:dc:
                    c3:80:be:58:db:39:f0:22:28:db:d9:c8:55:e4:0e:
                    e7:9b:3a:25:ae:45:6e:86:78:62:af:46:0d:d7:ec:
                    da:21:ac:38:33:7e:5a:80:93:ed:a4:c0:c0:76:d4:
                    30:13:e9:8d:c4:17:bd:fa:9e:94:07:3f:85:fc:bf:
                    d2:82:4a:ba:99:17:92:02:b0:b5:86:09:e7:b3:b0:
                    30:1f:bf:8f:32:56:ea:71:84:33:6f:f8:c3:18:b7:
                    9f:fe:db:66:a5:31:8f:5d:a2:fc:dd:8f:ff:07:c7:
                    2c:21:61:b9:6d:3f:67:61:14:c5:f0:02:1a:08:63:
                    97:47:d4:24:7d:56:57:17:8c:d7:63:7b:4e:7c:3f:
                    a4:8c:f4:3b:fb:24:f4:48:74:0c:4c:10:fa:45:55:
                    4d:ca:fd:ea:9e:da:0d:ac:1e:29:d4:11:0d:55:6f:
                    f5:4d:58:5c:c6:77:4b:98:36:f3:6a:0d:d3:1d:c3:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:23:23:34:31:5D:2F:50:E6:9F:19:BA:A3:57:E3:A5:00:A8:C6:8C
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/323830343a336631303a353030303a3a2f34382d3438203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f10:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:b4:54:e8:6e:ae:12:c2:34:78:ee:87:a8:02:07:69:66:93:
         71:e8:88:ff:82:66:4a:ad:7f:87:9d:dc:a4:ad:f8:9f:ec:1c:
         d9:a5:2f:5a:bc:c7:e3:d4:7e:3d:dc:48:29:32:7e:c3:8c:97:
         e0:ee:72:e5:53:93:3f:74:b8:f5:7c:97:c1:69:8f:0f:52:a9:
         42:3f:74:e9:9d:f3:3d:2d:2e:dc:56:22:c4:07:a2:f1:94:0e:
         0b:dd:13:cd:92:20:10:8e:79:23:c2:c2:a1:06:6e:5f:ff:26:
         5c:27:55:5d:84:88:98:63:6b:ce:eb:76:b5:15:30:fd:f8:32:
         a1:2a:5f:1d:6f:23:0a:56:4a:59:25:8c:9b:aa:3c:6c:41:6e:
         62:9e:7d:66:08:f4:02:82:e4:c2:ed:4d:45:93:b0:f9:36:ee:
         76:c6:d0:90:22:26:9b:18:60:8b:39:7b:0d:2e:da:2e:7f:76:
         3f:71:cc:51:74:4f:d6:c2:56:ec:67:0e:18:da:d5:47:76:ef:
         9e:ea:82:ab:99:f2:f4:e6:6a:38:be:a2:9f:f0:84:47:04:90:
         d8:5b:78:8c:0b:84:3b:ea:bc:81:de:1d:70:a0:03:9f:da:ea:
         62:c2:07:9f:46:0f:67:04:1b:27:9c:af:cc:77:44:2c:bd:73:
         f9:fb:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:22 2024 by rpki-client on console-ams.rpki-client.org