Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
File:                     323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (raw, json)
Hash identifier:          CXVj4L42dSCgbE9+Y3+9SAPnKs8nCfC0yQsWGTQwkZc=
Subject key identifier:   5F:64:AA:19:D9:57:A4:9E:8F:5A:97:87:32:DE:D4:08:81:E4:1B:D4
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       7F609B444CD700FCC14BA51D46DD9CC9E3086C24
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
Signing time:             Wed 05 Jun 2024 19:23:04 +0000
ROA not before:           Wed 05 Jun 2024 19:18:04 +0000
ROA not after:            Wed 04 Jun 2025 19:23:04 +0000
asID:                     264414
IP address blocks:        2804:1e34::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
                          rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:60:9b:44:4c:d7:00:fc:c1:4b:a5:1d:46:dd:9c:c9:e3:08:6c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: Jun  5 19:18:04 2024 GMT
            Not After : Jun  4 19:23:04 2025 GMT
        Subject: CN=5F64AA19D957A49E8F5A978732DED40881E41BD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:5d:9a:99:c4:cf:4a:17:5d:ae:c4:87:7d:
                    43:3d:8b:7f:3d:ec:16:54:88:66:45:ec:d1:85:49:
                    47:69:5d:78:fa:e1:24:82:81:56:9c:a2:b7:4a:09:
                    01:eb:6a:e1:04:27:33:b9:13:ef:c9:74:b6:23:8a:
                    71:1f:ad:2b:f8:17:85:02:ef:83:19:b8:15:7b:1b:
                    49:7e:46:1c:04:a9:24:40:b6:7f:b8:4d:f6:4f:2f:
                    22:c2:1d:97:80:6f:a1:51:ee:bb:c4:9a:50:90:a8:
                    ff:ab:4d:b1:67:e6:22:24:e7:af:03:59:34:d6:e0:
                    ed:dc:13:42:46:d9:58:71:05:0d:a6:e0:b2:04:38:
                    f6:1a:2d:fd:55:c1:55:ae:1c:4d:97:c1:61:31:d2:
                    17:40:a1:83:4e:7e:e7:d4:24:04:25:ab:b7:e5:c7:
                    5c:d2:e7:ec:8a:89:87:bc:03:d3:1f:b5:a4:bd:8a:
                    9c:c9:4e:98:e8:b1:ed:83:8a:a0:c8:a1:15:2b:8b:
                    34:6c:49:c8:20:c7:7d:02:e4:b9:b7:af:63:93:77:
                    80:42:42:ca:69:3b:dd:ed:f9:be:41:eb:b0:8a:18:
                    5f:3c:9e:7f:c3:b9:dc:a7:ea:e8:17:b2:35:23:ef:
                    f6:d0:4b:70:d2:97:a0:da:83:56:9e:46:01:dc:91:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:64:AA:19:D9:57:A4:9E:8F:5A:97:87:32:DE:D4:08:81:E4:1B:D4
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:22:76:28:f9:eb:84:46:ae:d4:37:e0:53:4a:a7:36:63:
         b2:43:88:62:08:ec:00:30:da:84:4d:28:4f:01:9e:35:23:a8:
         f5:e1:b5:a1:4e:2a:2d:28:96:4f:82:1d:3b:66:3d:f9:bc:5b:
         11:0e:0b:4e:b2:2d:2b:6a:9b:a4:d7:0d:86:79:4d:b8:3b:8b:
         f6:70:5f:51:05:84:d7:0d:e3:43:d3:ac:1e:3c:36:b7:90:97:
         fa:d9:4e:2b:d8:2b:23:98:f3:29:9a:a3:e5:a2:46:88:4b:0c:
         e9:39:a8:48:15:99:50:84:72:16:d9:94:0e:cb:c2:9c:12:6f:
         32:91:7b:81:a5:68:92:1e:61:84:40:ed:ba:aa:34:07:30:0b:
         43:9a:82:c9:7d:bd:65:bb:a0:85:98:5a:16:b4:ad:5b:79:25:
         12:27:b8:92:10:af:76:ab:bf:98:91:ca:b5:80:8d:05:dd:57:
         05:bb:59:24:ee:31:8d:aa:86:ca:eb:7d:ff:e4:84:9c:38:b7:
         80:3a:95:25:8f:de:de:9b:86:0d:35:f6:71:86:a3:f9:7a:e1:
         c2:da:34:61:e1:9f:e2:ed:aa:3b:2a:04:b8:11:1a:ec:e9:ef:
         73:d6:6b:e0:2e:32:55:5e:6e:89:5d:43:f3:89:a4:31:44:00:
         ad:17:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org