Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a63303a3a2f34332d3433203d3e20323634323834.roa
File:                     323830343a323538303a63303a3a2f34332d3433203d3e20323634323834.roa (raw, json)
Hash identifier:          dekHNyRnbINUJi7vcgKG4AIViUPPvGmzQhtFk0XHpdw=
Subject key identifier:   CE:79:DA:0E:10:4A:9F:53:A8:AB:9D:72:05:0C:7C:36:45:9E:86:65
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       1B3D4397B3A6785679322E5C634A093EF4E81A81
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a63303a3a2f34332d3433203d3e20323634323834.roa
Signing time:             Fri 17 May 2024 14:33:51 +0000
ROA not before:           Fri 17 May 2024 14:28:51 +0000
ROA not after:            Fri 16 May 2025 14:33:51 +0000
asID:                     264284
IP address blocks:        2804:2580:c0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3d:43:97:b3:a6:78:56:79:32:2e:5c:63:4a:09:3e:f4:e8:1a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: May 17 14:28:51 2024 GMT
            Not After : May 16 14:33:51 2025 GMT
        Subject: CN=CE79DA0E104A9F53A8AB9D72050C7C36459E8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:4f:28:9e:04:43:b3:91:33:41:6d:b9:65:
                    3c:a5:6d:94:d0:97:68:5b:e5:5f:78:4f:a1:bd:52:
                    68:5b:36:63:43:c0:34:64:a5:e7:33:0f:96:e8:d8:
                    a8:0f:69:62:ec:32:3e:f3:43:8f:f8:ab:39:1b:2b:
                    98:55:8e:f2:51:84:22:26:83:c0:db:0a:49:37:84:
                    29:1c:29:ef:71:fa:05:3b:1d:36:e8:29:0f:63:d3:
                    77:eb:8a:66:d2:0d:29:90:64:d8:ec:ad:ae:f9:f3:
                    a9:cc:91:2f:a0:fa:a4:8f:d0:5c:19:47:43:b5:2c:
                    2d:a5:96:50:64:1a:b5:84:ce:74:61:c9:b5:d1:45:
                    e9:64:e7:31:ba:43:7e:2f:db:45:4c:07:84:89:05:
                    2a:de:1a:f8:a6:99:92:a1:a4:51:e4:27:00:99:79:
                    1d:90:ab:67:8a:e0:c5:26:ee:fd:57:d5:56:ca:42:
                    1c:3d:d1:fc:89:55:1a:ab:d2:69:1c:8e:ce:66:a5:
                    5f:09:19:1a:79:0f:46:6c:80:34:a6:69:05:a3:2e:
                    f3:b0:9a:9d:20:13:84:a3:ce:1c:c5:42:3c:03:2b:
                    7c:63:a2:49:69:f9:20:dc:ed:d5:04:c8:71:44:cd:
                    6b:47:2b:28:1f:a6:3a:22:3f:c6:06:c8:61:19:8d:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:79:DA:0E:10:4A:9F:53:A8:AB:9D:72:05:0C:7C:36:45:9E:86:65
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a63303a3a2f34332d3433203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         83:20:ec:a6:a4:e2:98:d9:a8:58:1d:3b:66:4a:4c:86:82:0a:
         91:17:3c:1c:31:50:4a:20:96:3b:61:67:d0:a8:a8:71:a6:ac:
         af:08:48:05:d2:52:b1:45:03:0a:01:75:c7:21:9a:e0:f8:5c:
         f7:f8:8b:47:48:94:e5:0f:19:39:0d:5e:85:6d:4a:38:e3:4b:
         45:43:a7:c8:b2:69:f7:8d:27:68:96:6c:c0:35:07:e9:1a:48:
         29:c0:95:75:11:04:a8:06:d7:5d:ee:35:04:be:ae:0a:a8:47:
         df:0d:31:64:3b:38:9d:b9:f5:67:80:98:b2:28:d3:1f:07:95:
         1c:2f:23:fb:ea:93:6e:6a:78:0b:e0:12:df:e0:22:cf:0e:fb:
         2b:e9:6a:75:22:fe:1f:f2:47:3c:fa:4a:ce:08:92:5e:e6:f9:
         af:45:18:24:17:32:f7:ce:2e:3b:38:cf:7e:7f:f2:1d:7a:65:
         a2:6c:ee:97:ce:70:a2:90:4a:07:a9:5b:73:ad:58:e9:7b:7d:
         19:27:7b:96:e2:de:17:b7:27:5a:47:d0:06:1d:fb:a5:6e:3e:
         1e:3d:56:fa:ae:b9:82:70:fb:6e:cc:0e:06:b0:e0:c8:fc:cc:
         61:42:14:2b:df:fc:c2:d9:21:6e:07:83:48:61:e0:fe:73:0e:
         74:d0:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org