Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa
File:                     323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa (raw, json)
Hash identifier:          CxWZgc8ul31SeZgY2Gdsq2p22lelyPeY2rL/mPIi3X0=
Subject key identifier:   11:E6:74:89:60:8C:2B:A3:9A:6B:E6:DF:A5:46:82:D6:A1:0E:4A:A7
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       2A6E2319F066D9A4693F00B5304CFF633BB9D76E
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa
Signing time:             Fri 30 Aug 2024 14:26:36 +0000
ROA not before:           Fri 30 Aug 2024 14:21:36 +0000
ROA not after:            Fri 29 Aug 2025 14:26:36 +0000
asID:                     272710
IP address blocks:        2804:8774:1a0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl
                          rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 01:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6e:23:19:f0:66:d9:a4:69:3f:00:b5:30:4c:ff:63:3b:b9:d7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 30 14:21:36 2024 GMT
            Not After : Aug 29 14:26:36 2025 GMT
        Subject: CN=11E67489608C2BA39A6BE6DFA54682D6A10E4AA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:28:de:58:75:99:6c:0d:36:2b:e0:ac:45:
                    f0:ff:bb:31:24:42:a6:76:56:f3:f3:b9:b9:39:cb:
                    93:ae:b7:69:0f:d9:d2:04:43:57:48:f2:9e:a1:c1:
                    ba:55:9f:ca:ed:6b:f3:b2:f2:eb:04:f6:00:7b:61:
                    97:54:7c:fd:87:b4:8c:01:23:71:e3:92:30:d7:ab:
                    0a:2a:6d:77:59:88:66:c6:0c:ac:a3:18:90:64:7d:
                    27:6e:29:51:39:e4:89:cc:f0:aa:2d:77:f3:6b:be:
                    c7:c9:4d:45:50:6b:4b:62:29:db:76:d8:3d:60:5c:
                    0f:c7:f9:8a:83:ce:f0:7d:d9:88:62:c5:94:22:e6:
                    f3:f4:dc:0b:1d:6c:5e:c6:9f:00:72:a1:ce:94:c0:
                    98:3e:d6:bf:c5:b4:4d:e9:f5:32:3d:da:a8:47:c4:
                    67:8e:cb:ba:e7:16:21:e0:8a:a9:21:bf:2f:ee:92:
                    03:06:96:72:f5:31:37:07:0b:56:52:5c:ea:38:4a:
                    e6:0f:24:52:4d:2b:c1:07:c3:5e:78:21:ca:4a:f3:
                    bc:53:50:74:14:07:d7:9e:f3:9a:8e:c9:7b:5e:ad:
                    e9:68:dc:27:3d:76:a4:ff:39:64:db:5d:a7:30:cc:
                    e7:40:b0:a8:82:02:ee:80:50:6f:95:10:b8:60:6f:
                    ca:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:74:89:60:8C:2B:A3:9A:6B:E6:DF:A5:46:82:D6:A1:0E:4A:A7
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3161303a3a2f34352d3435203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:1a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         a0:e3:15:54:76:0c:61:9d:54:f8:36:30:42:ad:91:34:f5:28:
         72:90:a6:a6:fd:0d:c5:69:13:c5:5d:fc:91:50:61:11:26:eb:
         a8:15:64:04:c4:2e:48:45:a5:e6:c6:6e:19:21:a9:08:0a:dc:
         0e:b4:64:d4:92:10:2b:a1:45:66:92:cb:09:03:22:54:06:ca:
         db:df:f0:f3:97:74:b4:87:4e:46:53:54:b9:bc:8e:29:21:28:
         e1:65:00:a9:36:e1:43:d3:b6:2b:5a:01:db:65:9f:ef:75:70:
         8b:8e:f5:8a:98:36:68:7d:2b:b8:85:d9:77:13:02:4d:41:6c:
         92:19:0a:09:98:d9:02:e0:38:01:c9:4a:fd:ab:89:02:9d:94:
         19:dc:c2:61:2a:3c:58:bf:99:02:ab:87:31:9e:dc:df:7b:2e:
         a4:ef:10:e3:91:bf:10:b6:7b:a9:bf:02:ef:42:db:5d:bf:3d:
         53:10:4e:94:6f:e4:fb:15:99:2e:b1:44:c2:94:a4:f7:21:48:
         0c:ac:f2:57:38:ea:63:72:15:0c:7b:e3:28:b5:c0:e7:8b:4d:
         5e:21:6d:50:e0:3e:0a:be:be:f5:9a:c7:b4:f8:8f:23:3d:52:
         38:05:23:44:76:76:9e:17:bf:22:77:b9:4f:bf:cc:bb:38:62:
         6f:71:aa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:20 2025 by rpki-client on console.sobornost.net