Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa
File:                     323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa (raw, json)
Hash identifier:          Pp1lnpYctSCG9VG9tqCk2U6ts1vzjbUrzZ62kZLPCo8=
Subject key identifier:   16:B7:7A:38:10:69:66:D3:A6:70:33:1B:C5:72:6A:7C:CB:1D:45:62
Certificate issuer:       /CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
Certificate serial:       2FC9E83A35DC209C7E2ECB397EFE988A427FB470
Authority key identifier: 5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa
Signing time:             Wed 03 Jul 2024 13:49:14 +0000
ROA not before:           Wed 03 Jul 2024 13:44:14 +0000
ROA not after:            Wed 02 Jul 2025 13:49:14 +0000
asID:                     265451
IP address blocks:        2804:3454:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl
                          rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 10:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c9:e8:3a:35:dc:20:9c:7e:2e:cb:39:7e:fe:98:8a:42:7f:b4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DBF389DE84A8068D72BA7A5E030F90D8F670D31
        Validity
            Not Before: Jul  3 13:44:14 2024 GMT
            Not After : Jul  2 13:49:14 2025 GMT
        Subject: CN=16B77A38106966D3A670331BC5726A7CCB1D4562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:b2:19:ab:bc:31:5d:3a:ea:1c:ae:21:bb:
                    e5:0e:50:61:3a:07:07:db:ba:39:ff:82:c6:26:22:
                    7d:ff:02:f4:5a:f7:b4:d1:d9:af:bd:1b:47:e7:2f:
                    15:b0:49:74:52:fc:64:3a:be:a6:f4:3f:42:3d:b5:
                    80:9d:71:fd:b4:03:19:a5:27:a1:d4:a0:9f:ed:2d:
                    0d:d0:f1:17:39:25:3c:3f:5e:a0:ba:43:eb:ce:5c:
                    88:77:01:0e:98:3d:77:a7:ff:dc:ff:9a:ee:69:ba:
                    39:eb:4e:de:17:e4:5e:83:ba:2e:d0:bb:96:92:38:
                    de:06:1a:94:5a:4a:73:db:24:e0:44:93:3e:a4:66:
                    7c:b4:3b:88:14:db:d2:8a:88:4c:54:58:05:03:41:
                    68:09:b9:39:de:37:03:53:15:9a:6d:13:cb:e6:75:
                    9c:70:5e:70:ac:c8:65:90:c2:fb:1c:c2:92:8d:5d:
                    f1:18:63:70:1b:98:dd:60:1d:e0:5b:fc:e0:ca:e0:
                    e6:59:aa:1a:c7:ed:ca:17:81:ad:88:4d:f7:76:f5:
                    bc:ba:c0:a8:ca:8a:5c:34:ec:81:9e:ea:84:e7:dd:
                    ad:ce:27:3c:73:94:36:1e:7f:c2:89:8e:18:f4:3d:
                    4b:49:e0:8e:90:e0:65:91:4f:70:6c:17:0c:45:12:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B7:7A:38:10:69:66:D3:A6:70:33:1B:C5:72:6A:7C:CB:1D:45:62
            X509v3 Authority Key Identifier:
                keyid:5D:BF:38:9D:E8:4A:80:68:D7:2B:A7:A5:E0:30:F9:0D:8F:67:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DBF389DE84A8068D72BA7A5E030F90D8F670D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4k4UigqsvCpVeF6ooRbNmtv69mXVAVAxMFTBrUhtA3Gv/0/323830343a333435343a323030303a3a2f33352d3335203d3e20323635343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3454:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:54:df:30:46:49:fd:0c:82:b7:0a:ab:13:ed:a2:9f:85:
         86:af:ba:73:4f:5d:65:c8:d7:53:bf:bb:c0:17:48:d1:bc:aa:
         1d:f5:a8:f7:00:bb:da:5f:8f:8e:50:ef:1d:cf:c3:a4:4e:2c:
         0e:d6:92:d1:25:b9:fa:a5:e5:8b:5c:20:22:16:94:92:ff:4b:
         87:40:ac:d2:d0:66:9e:25:73:72:09:bf:aa:7b:2f:61:ef:08:
         6d:ad:cd:bc:f7:26:a9:34:34:4a:8a:91:b8:cb:ba:e2:12:cc:
         de:20:9e:c1:67:51:85:c9:0f:a7:91:06:09:89:7e:4a:35:08:
         50:0b:12:d1:e9:00:8b:6a:97:36:da:c8:b8:46:68:ae:e2:9d:
         77:3e:1f:3a:b3:82:d1:96:8a:41:1c:ca:5a:e9:fc:4c:a7:18:
         cc:46:41:35:32:9a:f4:34:1a:1c:12:84:15:25:18:e6:7d:74:
         5a:96:2b:31:02:13:8f:99:6a:0f:87:fd:ab:23:ef:88:6b:98:
         be:1a:99:73:6b:1a:a3:ea:e6:fb:9b:d7:98:2a:f5:64:0b:6b:
         cd:99:1f:e3:a3:81:3d:bd:1d:ed:94:03:f0:74:71:78:82:19:
         bb:df:3a:33:3c:77:3a:b4:17:32:b5:92:66:83:e2:31:5c:ef:
         e7:f2:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 10:53:30 2024 by rpki-client on console-ams.rpki-client.org