Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/323830343a353234303a3a2f33322d313238203d3e20323638353035.roa
File:                     323830343a353234303a3a2f33322d313238203d3e20323638353035.roa (raw, json)
Hash identifier:          ubKKfKAOrKdFisp41lmSV/Bz0MnBfuMsh2l+Grn/NaI=
Subject key identifier:   97:ED:DF:93:C0:6D:3A:13:DD:8E:A7:CB:25:44:7E:85:38:65:3F:87
Certificate issuer:       /CN=0CB5FA63FE8A75BC46313C51DF1E80C17F64039C
Certificate serial:       54587E6954811164948FA4514D79A2B609241355
Authority key identifier: 0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/323830343a353234303a3a2f33322d313238203d3e20323638353035.roa
Signing time:             Mon 12 Aug 2024 19:59:21 +0000
ROA not before:           Mon 12 Aug 2024 19:54:21 +0000
ROA not after:            Mon 11 Aug 2025 19:59:21 +0000
asID:                     268505
IP address blocks:        2804:5240::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.crl
                          rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:58:7e:69:54:81:11:64:94:8f:a4:51:4d:79:a2:b6:09:24:13:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CB5FA63FE8A75BC46313C51DF1E80C17F64039C
        Validity
            Not Before: Aug 12 19:54:21 2024 GMT
            Not After : Aug 11 19:59:21 2025 GMT
        Subject: CN=97EDDF93C06D3A13DD8EA7CB25447E8538653F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:70:f4:3f:94:f5:9f:c3:95:07:0c:e1:56:47:
                    af:3e:bb:65:8f:23:46:04:be:d2:f8:c0:a0:14:b6:
                    cb:74:67:dc:b8:41:f4:75:44:4f:bb:18:d2:ef:ef:
                    53:6f:8a:fc:cb:1d:4b:43:bf:57:ee:c5:3a:bd:5e:
                    74:af:d3:0f:ec:f1:15:75:a3:27:df:f5:5f:d7:6b:
                    d9:f0:65:cb:0b:51:56:d8:f5:61:83:d0:62:01:f9:
                    5e:5d:dd:91:e8:c3:ac:d1:68:5a:fe:91:82:06:76:
                    b4:1c:a8:09:07:dc:3b:0d:e1:19:a3:ce:24:d1:c6:
                    fb:23:fe:33:7e:31:91:cd:12:ce:8c:57:e3:4f:15:
                    1f:b6:10:38:37:60:94:f3:54:e7:06:10:4c:72:cc:
                    71:fd:a0:c6:0f:22:6b:a6:16:b9:d8:8d:97:c2:56:
                    5b:da:b4:40:eb:df:16:1a:72:8e:62:a4:06:e9:f3:
                    11:eb:b8:95:33:4c:3c:f6:c7:36:51:c6:53:63:06:
                    96:2a:7d:18:5a:34:50:30:6c:8a:7a:f8:92:85:e0:
                    d4:8f:a2:cb:87:7d:7b:88:5e:09:57:67:48:82:44:
                    cc:c5:33:96:c5:da:d9:57:6c:62:22:c1:19:cf:50:
                    a9:4c:4d:76:97:92:07:bb:31:6d:36:09:94:33:85:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:DF:93:C0:6D:3A:13:DD:8E:A7:CB:25:44:7E:85:38:65:3F:87
            X509v3 Authority Key Identifier:
                keyid:0C:B5:FA:63:FE:8A:75:BC:46:31:3C:51:DF:1E:80:C1:7F:64:03:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CB5FA63FE8A75BC46313C51DF1E80C17F64039C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3QGTuzhgrW81gZoNHNbMaLcZufcAoQXL38dHEKeNvRHK/0/323830343a353234303a3a2f33322d313238203d3e20323638353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5240::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:ef:be:67:93:7a:cd:de:60:07:ea:22:63:e6:9e:7a:07:a0:
         12:86:5c:5a:4e:92:5a:4c:05:13:89:5c:e7:66:75:df:8b:e4:
         e5:d0:69:af:9c:32:e3:e2:38:03:32:9c:4a:22:13:ac:eb:cd:
         23:87:f6:35:1a:7a:bd:20:e9:3f:3a:31:4b:46:d2:85:af:f3:
         9b:9b:12:bb:38:94:6c:e9:79:3b:09:9b:31:48:bc:19:ea:15:
         7a:d1:20:6f:58:e5:84:7b:7b:a6:45:a1:bc:c5:be:3b:a8:ef:
         6f:ab:b2:e2:0f:51:5c:2b:32:d3:e4:5a:5c:b6:9f:29:73:be:
         9e:ac:61:db:36:b0:30:47:fa:40:83:29:6d:ca:f9:c2:2c:2e:
         62:c4:ce:7e:e5:c0:3a:9f:6d:51:4e:34:18:9e:38:38:43:59:
         a3:0a:eb:9e:c9:f6:8a:f9:8e:1b:66:ab:d3:8a:40:46:9a:40:
         1d:30:67:a0:99:3c:ab:b4:13:ae:47:97:6b:03:ec:2c:9d:2a:
         13:38:d7:f3:61:66:9d:3c:67:d3:0b:d3:fe:e7:33:f4:22:b5:
         5d:c5:25:c0:5c:cc:2c:68:e0:81:56:f4:49:a8:62:41:b8:2e:
         d4:59:72:89:c5:b5:23:1b:c1:00:11:06:a0:28:8b:e4:55:b9:
         98:01:9c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:14 2024 by rpki-client on console-fra.rpki-client.org