Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa
File:                     323830343a356230633a3a2f33322d3332203d3e20323638383135.roa (raw, json)
Hash identifier:          0DstTUjVOo+mYb15MEt4GaxMIqIApPDW0oOMSiiGoj4=
Subject key identifier:   E1:72:7C:C9:86:3B:DF:1B:BF:25:75:41:F3:30:FF:C9:D2:F0:50:FA
Certificate issuer:       /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial:       67B13AE2FF29E332D8D44038E7F4AC388D3E7C1C
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa
Signing time:             Thu 16 May 2024 14:13:09 +0000
ROA not before:           Thu 16 May 2024 14:08:09 +0000
ROA not after:            Thu 15 May 2025 14:13:09 +0000
asID:                     268815
IP address blocks:        2804:5b0c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
                          rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 00:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b1:3a:e2:ff:29:e3:32:d8:d4:40:38:e7:f4:ac:38:8d:3e:7c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
        Validity
            Not Before: May 16 14:08:09 2024 GMT
            Not After : May 15 14:13:09 2025 GMT
        Subject: CN=E1727CC9863BDF1BBF257541F330FFC9D2F050FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3a:a6:ce:6e:52:f3:b9:fb:aa:bc:a4:e0:bc:
                    2c:08:1a:f9:ed:cb:b4:3a:08:93:dd:4a:5c:85:e4:
                    ba:ef:4d:6c:f8:b6:af:7c:2e:3c:fa:16:37:a4:f0:
                    a0:5e:c4:e8:4c:88:ea:b8:b4:df:82:c9:c7:72:5e:
                    c4:0b:f0:fd:0a:87:a1:d0:d7:af:2e:fb:e2:1b:96:
                    5b:99:a9:2c:41:e3:60:67:e6:20:af:8a:8e:cc:2c:
                    fd:d6:3d:50:eb:12:e9:ed:a9:e8:dc:94:ab:b6:9e:
                    d0:a7:8e:f4:d0:62:6e:91:aa:8e:81:33:a4:49:29:
                    16:44:57:0f:c8:fe:31:d4:d5:ed:78:36:59:f4:09:
                    ad:ee:0c:78:20:4d:dd:f6:14:98:91:0a:b9:62:28:
                    fd:b8:3b:f7:06:9a:ad:43:e0:a8:d2:10:0c:5b:f9:
                    9e:a3:9d:91:25:12:8b:05:66:7e:81:38:d2:62:b4:
                    13:d4:ed:ce:89:58:cc:73:ac:00:e9:56:8f:84:6a:
                    e5:60:31:67:47:53:86:77:48:43:1a:9a:dd:72:7c:
                    ad:77:0a:96:9a:70:a9:26:08:0d:89:d9:71:38:d0:
                    4f:4f:59:e0:17:5a:1f:5d:83:b3:08:3b:8a:7e:e7:
                    d1:8c:df:70:89:b3:fe:2d:08:74:02:bd:3a:8e:4d:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:7C:C9:86:3B:DF:1B:BF:25:75:41:F3:30:FF:C9:D2:F0:50:FA
            X509v3 Authority Key Identifier:
                keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/323830343a356230633a3a2f33322d3332203d3e20323638383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:12:ef:8e:04:1b:bd:63:9a:07:b3:19:e7:29:d6:fd:d8:
         1f:c3:7a:82:cc:75:ce:3b:22:a9:71:70:90:62:8b:df:07:d7:
         c5:1b:30:58:bc:38:d8:d7:6f:96:38:d8:66:ff:4f:dc:2f:b3:
         3c:7c:f7:27:c0:1b:c2:9e:e6:6d:2c:27:67:82:b2:7a:44:c5:
         7b:1e:a6:ce:37:e7:3f:b8:77:a1:7a:fa:a4:33:e9:ff:55:74:
         90:4c:4c:ae:21:08:b7:c3:e0:4a:5a:fe:f8:1b:8f:1f:f4:44:
         81:23:ec:f8:a8:53:59:bd:d8:d6:b4:87:88:8f:b7:a9:63:fb:
         54:ba:2f:05:5e:5f:72:61:60:e3:bc:33:e3:21:1c:04:7d:2a:
         58:57:b5:80:4d:88:31:d0:64:3f:21:81:ca:ea:d6:e1:b2:55:
         02:b2:87:e2:d4:26:9e:b4:47:6f:bc:fa:1f:79:ca:5b:51:39:
         b0:24:fa:a6:c2:7c:d6:da:44:e2:be:63:7d:36:76:26:3a:31:
         bc:d5:ea:a5:99:0e:e9:43:37:75:fc:a2:2a:d0:fc:da:4f:10:
         31:71:db:95:66:a8:19:36:fd:1a:24:09:bd:64:82:ac:26:0c:
         2f:4b:13:dd:39:c9:10:cd:49:7c:03:52:ed:36:19:24:d7:fa:
         08:81:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:52:25 2024 by rpki-client on console-ams.rpki-client.org