Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
File:                     323830343a6632303a3a2f33322d313238203d3e203532373431.roa (raw, json)
Hash identifier:          ikIW++xb1ZctaoILPpvQ+sGWfFpbt3YJxaAeqYewhqo=
Subject key identifier:   F4:90:B1:18:AD:8F:4C:EF:06:10:D1:69:51:08:B1:49:64:BD:9C:FB
Certificate issuer:       /CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
Certificate serial:       27BFB2515601D6FAA7643564A9C3DADFB17CAAC8
Authority key identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
Signing time:             Fri 27 Sep 2024 14:45:07 +0000
ROA not before:           Fri 27 Sep 2024 14:40:07 +0000
ROA not after:            Fri 26 Sep 2025 14:45:07 +0000
asID:                     52741
IP address blocks:        2804:f20::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bf:b2:51:56:01:d6:fa:a7:64:35:64:a9:c3:da:df:b1:7c:aa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
        Validity
            Not Before: Sep 27 14:40:07 2024 GMT
            Not After : Sep 26 14:45:07 2025 GMT
        Subject: CN=F490B118AD8F4CEF0610D1695108B14964BD9CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6e:88:bd:76:f7:71:05:40:e8:75:60:ab:56:
                    22:6c:4b:fc:8a:0a:0b:c9:35:14:a6:e3:69:e0:e7:
                    07:ad:79:e9:44:78:be:70:6a:5c:67:f7:39:b9:b1:
                    01:61:2e:6f:75:2b:39:78:7f:cc:07:3c:52:49:00:
                    49:52:82:25:2b:19:41:24:b4:cc:58:c6:a6:7a:07:
                    22:a1:2d:00:8d:25:89:38:fc:c0:9e:92:46:bf:6f:
                    3b:c9:15:74:c0:e4:b8:e8:cd:e4:bd:1a:4b:73:fa:
                    36:40:f7:37:b0:2f:e4:45:69:7d:0f:9f:96:2a:b5:
                    49:db:58:7e:3f:44:4f:b2:06:8c:33:12:29:9b:d9:
                    cf:84:31:fd:b0:5d:63:b9:aa:79:8a:49:ca:88:cc:
                    d8:10:9e:7c:65:22:f9:f3:58:0f:6f:44:2b:28:8a:
                    61:ba:88:9d:cb:62:19:10:54:d7:95:2d:7a:dc:98:
                    cc:a1:fb:14:e7:17:1a:a7:f5:87:78:32:33:02:77:
                    c1:ab:38:9c:6a:21:51:6d:06:3d:8a:f0:37:61:68:
                    d9:b3:c5:56:26:94:fc:d2:e9:b4:47:ee:e0:61:2a:
                    b5:b5:af:68:be:4a:31:ed:80:3d:ee:0a:76:19:cf:
                    34:b9:6e:a9:c2:43:e0:78:f0:d1:3f:b7:f0:09:e0:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:90:B1:18:AD:8F:4C:EF:06:10:D1:69:51:08:B1:49:64:BD:9C:FB
            X509v3 Authority Key Identifier:
                keyid:7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:ce:85:a4:33:22:4a:02:f1:8e:cc:c4:72:e1:df:6e:c6:
         4d:01:8e:22:13:2f:50:ff:d5:92:cb:ac:14:57:76:76:ea:70:
         bc:48:14:94:66:44:81:37:e9:cb:2d:0b:64:f1:b7:4d:95:bb:
         36:e7:92:9c:bc:aa:ce:18:c1:7f:13:83:e2:ad:d3:8b:82:80:
         0e:1e:e5:5d:46:e1:09:0e:7d:7f:3d:4f:b5:4b:15:54:ca:84:
         74:60:84:a8:58:d6:e3:71:81:8a:b2:11:73:58:2d:b0:a6:10:
         04:91:d5:02:3d:66:c3:37:3d:40:6b:8a:0c:55:ab:96:55:8b:
         9c:ce:3a:df:ef:bb:79:39:ad:a5:d1:29:4a:b1:51:31:75:26:
         d9:1c:cf:1a:b0:57:67:ed:d5:7a:f0:95:65:05:f3:9a:a7:88:
         fe:6e:76:0a:53:1b:74:d2:f6:5b:41:1a:93:0b:9b:9c:08:06:
         47:da:6a:40:29:81:5c:eb:ea:d8:51:db:84:fe:54:85:d2:93:
         0f:92:90:b1:31:07:43:8d:8c:3b:5b:02:f5:33:9b:00:51:99:
         1e:63:5e:f3:98:58:fb:09:8e:d0:09:2f:ac:55:e9:b7:3e:e8:
         e1:ff:c0:00:00:41:f8:69:aa:25:6a:be:9e:85:d7:4b:39:82:
         a9:61:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:59 2024 by rpki-client on console-fra.rpki-client.org