Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/323830343a3235343a3a2f33322d313238203d3e20323632383036.roa
File:                     323830343a3235343a3a2f33322d313238203d3e20323632383036.roa (raw, json)
Hash identifier:          NrPjgvjD/sO1OK+T7oZDnAifdTqyd25p+oe+1uvkmBc=
Subject key identifier:   50:00:5A:FE:BE:4F:FB:EF:9B:DF:52:4A:FB:82:C0:08:96:48:5B:60
Certificate issuer:       /CN=6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D
Certificate serial:       69F5302B58127857336600AE5537385C3D9CFBCD
Authority key identifier: 6D:53:5D:3D:BE:BD:56:60:B3:82:C0:18:BB:4E:BD:1C:E7:EF:10:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/323830343a3235343a3a2f33322d313238203d3e20323632383036.roa
Signing time:             Wed 29 May 2024 01:49:55 +0000
ROA not before:           Wed 29 May 2024 01:44:55 +0000
ROA not after:            Wed 28 May 2025 01:49:55 +0000
asID:                     262806
IP address blocks:        2804:254::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.crl
                          rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f5:30:2b:58:12:78:57:33:66:00:ae:55:37:38:5c:3d:9c:fb:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D
        Validity
            Not Before: May 29 01:44:55 2024 GMT
            Not After : May 28 01:49:55 2025 GMT
        Subject: CN=50005AFEBE4FFBEF9BDF524AFB82C00896485B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:2e:e6:73:43:20:4b:b0:2f:12:6f:87:32:
                    b5:37:24:dc:a4:f5:fb:27:97:54:eb:27:82:36:c5:
                    96:d3:a3:93:f0:0c:ff:9b:92:e8:87:92:78:f5:d6:
                    20:d6:6b:cc:bb:94:43:c8:02:81:6e:d8:74:e3:0a:
                    f7:a8:ce:48:22:34:28:58:dd:c0:8c:19:58:ae:04:
                    d6:56:93:3d:a3:cd:55:46:97:62:c4:f7:c9:97:3f:
                    cb:32:b1:4d:f4:3c:dc:69:9a:75:f2:57:21:fe:6c:
                    c1:a5:59:e7:16:d3:93:69:4f:43:53:d6:8f:03:80:
                    e9:99:ec:64:a0:86:41:d8:74:25:1e:12:93:74:ed:
                    20:ca:1b:6d:dd:ef:77:99:fc:44:ec:ed:c5:e8:77:
                    6b:03:90:7c:ea:a2:e8:81:ee:f8:a6:d1:0e:2e:ab:
                    1e:d8:ef:e8:3a:ae:d0:4a:93:e1:9e:fb:4b:8f:83:
                    58:64:8b:01:ea:de:8e:54:0b:c7:87:cd:72:4b:cb:
                    93:53:02:70:c8:6b:58:32:ac:cc:0a:d1:0e:05:ee:
                    ba:d0:c8:17:43:77:e4:99:7c:de:bd:50:db:80:d7:
                    0f:39:5d:ca:5d:10:fc:ce:bc:2a:94:30:f1:22:57:
                    87:de:d0:c3:d1:28:23:22:a2:1b:bf:5c:dc:eb:ae:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:00:5A:FE:BE:4F:FB:EF:9B:DF:52:4A:FB:82:C0:08:96:48:5B:60
            X509v3 Authority Key Identifier:
                keyid:6D:53:5D:3D:BE:BD:56:60:B3:82:C0:18:BB:4E:BD:1C:E7:EF:10:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D535D3DBEBD5660B382C018BB4EBD1CE7EF100D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2znAxbewVaAqfXZNHJSGxpeKYt6zaYRohhsdkdVPUpkU/0/323830343a3235343a3a2f33322d313238203d3e20323632383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:254::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:05:1e:e0:33:24:c4:10:a1:11:72:e8:d6:cd:5d:0a:1e:
         52:d1:b9:df:d9:39:a2:f1:7e:8b:17:b6:ba:01:3b:3c:58:c9:
         01:0a:52:bd:a7:78:d8:95:26:51:e4:5b:02:a5:5d:37:86:46:
         3d:40:1e:58:3a:20:05:3c:cd:b6:63:39:fb:1c:c2:81:0a:f6:
         9a:7e:53:f4:4e:80:c1:11:1c:b5:1c:60:2d:de:df:e3:3e:b1:
         59:08:3c:79:e9:63:47:8d:48:85:3f:b0:ac:ed:a1:08:e5:4b:
         b1:d2:58:bd:b3:9e:26:07:cc:90:46:c3:ba:aa:7c:85:53:66:
         31:12:fe:d6:f3:7d:1c:05:59:fe:ff:f3:37:1b:f6:ad:0d:dc:
         0a:33:df:ed:8d:e7:8a:db:85:d2:ae:08:fb:cc:db:b0:32:0a:
         e3:e8:50:7d:ea:8b:0f:a5:84:b2:80:21:a8:6e:6e:b0:93:40:
         f5:81:bc:9d:fd:d2:75:08:19:8b:5c:d4:e5:21:9e:d3:b7:65:
         63:0e:66:b3:ee:42:f3:cf:b5:31:eb:cf:ab:1b:5e:48:fc:7a:
         d3:15:f4:5d:4d:fb:53:24:90:54:56:b3:b9:a1:84:90:a7:88:
         0e:e9:55:fb:ad:30:cd:d1:b6:e8:69:8f:85:df:35:65:88:87:
         cb:91:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:51 2024 by rpki-client on console-ams.rpki-client.org