Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
File:                     323830343a373631633a3a2f33322d3332203d3e20323731303930.roa (raw, json)
Hash identifier:          fcCEvepzhjWFA/u5zbKhbXzaN0Rdv/V6BayTRYnQINo=
Subject key identifier:   B4:A1:2B:4C:81:7F:5F:0D:C5:5F:BE:29:51:A7:81:DB:95:D6:0D:76
Certificate issuer:       /CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
Certificate serial:       6275EB6A96637DDDDD587BB2C4507E2E040646D7
Authority key identifier: 54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa
Signing time:             Thu 04 Apr 2024 20:35:35 +0000
ROA not before:           Thu 04 Apr 2024 20:30:35 +0000
ROA not after:            Thu 03 Apr 2025 20:35:35 +0000
asID:                     271090
IP address blocks:        2804:761c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl
                          rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:75:eb:6a:96:63:7d:dd:dd:58:7b:b2:c4:50:7e:2e:04:06:46:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54CEDD2E24960DE589D4B16EB4D662384CCC0FAF
        Validity
            Not Before: Apr  4 20:30:35 2024 GMT
            Not After : Apr  3 20:35:35 2025 GMT
        Subject: CN=B4A12B4C817F5F0DC55FBE2951A781DB95D60D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:3c:8f:5a:8c:12:d2:86:8f:40:e7:bc:62:
                    ba:a1:c6:bc:59:12:23:a1:e6:8e:e9:1f:70:7a:29:
                    8b:24:e2:fe:56:01:44:0d:7c:31:1c:34:96:fa:82:
                    25:ec:d4:a7:a1:e4:59:b2:e6:1e:bc:f8:90:b5:17:
                    e4:09:9e:fb:cc:44:c9:32:4a:b6:15:29:07:37:12:
                    27:1a:f8:44:44:89:4c:e7:6b:9e:27:d4:18:b1:0b:
                    d7:22:2e:be:0b:83:25:a6:d7:fd:a0:e1:bf:4e:bb:
                    38:e7:e9:32:b4:a4:78:d6:55:de:bc:d0:17:2d:2e:
                    87:87:d9:0d:b1:24:2c:aa:1a:ec:b8:97:1d:a1:29:
                    93:d7:ed:29:02:08:12:a6:9f:d8:fa:7a:e8:43:6b:
                    5c:11:90:d4:29:f3:3d:cf:42:9f:c8:f9:8d:1d:fb:
                    2e:a5:17:57:ed:d2:d1:6a:2e:2d:b3:33:e5:23:a8:
                    4c:b3:7d:c4:48:4c:56:31:a0:62:af:0a:23:23:5b:
                    f7:6a:4d:3a:ca:ee:90:64:02:fa:18:8f:f6:92:34:
                    51:4e:f7:bb:51:e4:bc:6b:8e:93:98:a8:4f:f3:33:
                    53:3d:0a:7c:65:43:58:e5:37:d3:a1:04:a8:f8:b1:
                    6e:22:9d:1d:06:88:7e:5b:55:84:9a:c4:ce:27:ec:
                    6a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A1:2B:4C:81:7F:5F:0D:C5:5F:BE:29:51:A7:81:DB:95:D6:0D:76
            X509v3 Authority Key Identifier:
                keyid:54:CE:DD:2E:24:96:0D:E5:89:D4:B1:6E:B4:D6:62:38:4C:CC:0F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54CEDD2E24960DE589D4B16EB4D662384CCC0FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hz5ZvdbTMw1xhkD5FDw9Zbk12PJAW2ZY5UcUGGT5U8F7/1/323830343a373631633a3a2f33322d3332203d3e20323731303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:761c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:59:7c:bb:7b:36:a7:43:fb:1c:9f:f1:17:f0:0e:73:3a:ea:
         e5:94:50:17:c7:d1:3a:da:8a:36:b8:39:bf:bc:3e:d7:ca:fd:
         90:a1:94:ac:25:21:b3:d5:6a:cb:9f:8d:2f:fa:55:c3:7d:e6:
         71:8d:bd:47:22:49:0c:b8:64:4e:15:e0:05:a5:d1:56:b6:94:
         01:c6:62:4d:2e:92:e5:09:ab:19:b3:cf:d9:20:ed:93:9f:11:
         74:c1:52:10:f4:46:7f:d2:0b:4c:22:28:a4:9f:5a:91:28:42:
         d7:3a:2f:c5:17:81:60:2c:e1:76:6a:b4:79:c5:f3:29:bf:d9:
         67:fa:1d:8d:92:54:38:9a:f6:5b:2c:9d:34:d2:bc:2b:93:e1:
         6b:02:b6:26:d4:a7:92:c4:21:85:07:37:69:e8:f2:f1:8c:2f:
         db:a7:18:b7:68:6d:6d:39:4f:02:8a:b6:2f:27:71:51:93:f4:
         c6:9c:6c:3e:fc:c2:cf:77:c7:14:1e:7d:64:40:50:da:b7:5e:
         f2:c7:ba:4b:09:f4:74:24:b2:56:93:f9:78:49:40:1a:a2:94:
         14:fc:04:d3:ae:f2:26:84:2e:b6:1a:1b:34:9c:7a:b7:b2:77:
         09:b1:21:93:22:5f:62:59:75:e0:48:9e:67:11:23:9a:88:60:
         2c:5e:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org