Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa
File:                     323830343a353939303a3a2f33332d3333203d3e20323638373130.roa (raw, json)
Hash identifier:          alszrsp2bJYiAjrK9Io1rDmkp5983nhEdx9pJnApnNs=
Subject key identifier:   E3:88:19:7E:7B:18:B8:31:8F:44:31:86:80:2C:4D:45:40:6B:AF:48
Certificate issuer:       /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial:       3E296837E0C9CF6A5682AD115B73B623BA9C799A
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa
Signing time:             Thu 04 Apr 2024 16:45:32 +0000
ROA not before:           Thu 04 Apr 2024 16:40:32 +0000
ROA not after:            Thu 03 Apr 2025 16:45:32 +0000
asID:                     268710
IP address blocks:        2804:5990::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl
                          rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:29:68:37:e0:c9:cf:6a:56:82:ad:11:5b:73:b6:23:ba:9c:79:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
        Validity
            Not Before: Apr  4 16:40:32 2024 GMT
            Not After : Apr  3 16:45:32 2025 GMT
        Subject: CN=E388197E7B18B8318F443186802C4D45406BAF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5c:b3:a1:2e:16:ef:c5:88:26:08:b7:c2:c4:
                    f2:54:06:1c:7f:c1:fc:ba:8e:ba:d5:96:64:ef:3d:
                    c4:b2:18:91:ed:66:3c:46:db:e2:c7:3c:9f:a1:e3:
                    39:57:27:f1:48:c6:cb:4a:62:59:5b:c6:cc:f0:30:
                    ed:74:a5:b7:18:c3:82:c8:fa:69:0c:88:58:f4:89:
                    7f:8c:66:02:2c:ab:d0:70:d8:ec:33:dd:f6:2b:0f:
                    14:75:54:52:7c:1b:16:83:7b:9d:c2:37:50:3c:d4:
                    48:5e:2a:bc:c4:c9:a8:95:ee:f7:4d:b4:88:cf:72:
                    b4:4c:28:ba:32:45:5c:af:70:32:2e:e3:2d:8f:95:
                    38:26:7c:17:12:17:92:af:b2:bc:0f:32:2f:1e:ed:
                    a3:cf:1f:35:30:9e:ac:fe:96:ff:82:15:bf:88:39:
                    bb:5b:54:3a:ac:d3:f6:ff:ea:f3:9f:71:72:78:f0:
                    45:8d:bb:83:8f:d6:65:fc:7f:0b:20:38:9b:39:91:
                    ba:fa:51:65:f4:33:c8:85:11:e1:ac:bb:cb:a6:f6:
                    b4:bf:02:31:3b:87:20:33:74:e9:c1:af:65:8f:03:
                    13:1a:7f:65:31:f7:6b:34:ee:62:9a:54:43:fb:e0:
                    b4:bf:29:86:1c:9b:66:85:7c:db:bc:68:40:01:1f:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:19:7E:7B:18:B8:31:8F:44:31:86:80:2C:4D:45:40:6B:AF:48
            X509v3 Authority Key Identifier:
                keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/323830343a353939303a3a2f33332d3333203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5990::/33

    Signature Algorithm: sha256WithRSAEncryption
         08:56:cd:1b:21:94:2b:95:c2:3b:d1:37:da:bb:b6:8e:2c:e1:
         02:db:6e:3a:d1:b4:76:bd:40:4e:e2:6b:12:31:c7:10:2c:1f:
         83:a9:d9:ff:75:4a:28:91:02:6b:30:04:04:1a:4d:f1:c2:32:
         bb:5a:7c:37:7c:08:56:69:9e:05:ba:90:a8:0b:7b:95:84:db:
         4c:9f:c9:d1:9c:e7:f5:f2:fc:40:86:1d:c4:91:f5:18:95:d6:
         de:4f:8f:db:88:10:65:55:cc:40:05:41:31:b5:9e:8f:c8:b3:
         6f:2a:ee:d4:3f:53:3d:04:83:3c:ba:28:d5:ce:a4:15:70:2a:
         62:bd:c7:4d:70:0d:ef:57:37:cc:32:60:68:9c:75:11:ff:36:
         86:f5:44:6e:84:5a:61:b1:50:dc:5f:1b:96:1c:2c:eb:f1:be:
         39:3f:5a:1b:ba:2a:1b:1b:c5:5c:58:c9:fd:47:30:f9:51:6e:
         b6:12:d9:b3:a6:19:11:a6:d7:86:1f:47:fa:2d:80:3d:cb:e5:
         4e:34:b5:b4:f2:71:30:db:03:65:fd:1d:84:6d:56:00:c6:e3:
         a6:9f:b9:4c:8b:7e:22:ce:dd:3b:19:26:ef:cb:99:3e:2d:c2:
         8a:28:df:ce:5d:13:92:39:71:64:6f:0b:fe:0c:8f:cd:2a:a4:
         15:39:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:05 2024 by rpki-client on console-ams.rpki-client.org