Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          WHK0L+8/j8fX4GE34xUk4/na45+6+SFtRCZgnlusW94=
Subject key identifier:   82:E2:02:FD:75:5A:BB:C1:25:57:A7:A1:80:C4:62:7D:3D:B0:9B:0C
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       2EE2AEE732C3F3845CE5CD385945CB471A64E8FE
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 02:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:ae:e7:32:c3:f3:84:5c:e5:cd:38:59:45:cb:47:1a:64:e8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:a5:28:ad:fa:85:41:30:5e:b1:9c:3a:64:
                    4e:4d:a2:31:b6:c7:0e:7f:2e:8c:7d:5e:f8:f9:cd:
                    d1:34:92:8f:29:d1:b0:0d:32:fa:94:34:6f:9b:28:
                    47:2f:16:75:dc:04:d4:e2:a1:3a:03:f7:6b:f7:e7:
                    88:82:ca:45:23:a6:0d:b3:f3:e9:df:d1:98:64:0d:
                    69:0c:3a:da:94:9e:1d:4d:71:5a:a7:d7:48:49:e0:
                    78:91:1f:75:22:e7:a1:1f:21:f4:3a:30:a4:bd:7a:
                    dc:e7:a1:3d:40:91:1a:16:65:68:17:d6:45:ce:47:
                    51:8f:81:cb:3a:36:9c:c0:cd:35:8a:e3:ea:8f:46:
                    be:31:aa:5f:4c:b3:3b:ec:34:a9:f3:e0:cd:58:52:
                    d0:42:a6:89:2b:74:36:12:8b:01:f6:5c:31:72:07:
                    8d:0c:a6:9a:fb:14:46:5d:e6:86:91:4f:20:ac:c1:
                    27:e6:e1:97:cf:76:93:f2:5a:ca:fa:ce:49:be:bf:
                    27:00:cd:db:2b:25:bf:e4:47:c8:57:a6:a6:65:d1:
                    24:96:64:2d:74:fc:a0:22:f3:0b:bd:52:f2:e3:8b:
                    e1:ce:80:39:1f:3e:aa:d7:87:2c:3c:6c:00:d5:7a:
                    7c:43:75:d2:03:04:68:ec:58:33:74:5d:aa:b0:cb:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:02:FD:75:5A:BB:C1:25:57:A7:A1:80:C4:62:7D:3D:B0:9B:0C
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:ea:64:7b:98:e9:bd:7c:bb:43:cb:4e:d9:97:8c:3f:5f:4e:
         b1:8c:28:ed:05:b2:20:f4:4b:6c:9b:dd:fe:14:5c:52:06:c5:
         37:7f:6c:85:4b:27:97:f9:fc:91:77:85:58:e0:1c:fe:12:40:
         bd:f9:b3:6c:77:bf:d9:e5:bf:98:eb:5b:fa:d6:af:90:cd:8a:
         8f:f6:eb:af:89:65:6b:2c:24:e8:ab:fe:c7:c2:60:da:81:b7:
         21:1f:de:cf:e9:66:d6:fb:20:4a:f4:69:42:ae:f9:a2:be:5e:
         e1:c5:05:0f:4a:db:0a:7b:83:74:92:e9:f6:09:7b:52:bf:98:
         47:b9:fa:a2:6e:b5:2d:d8:9d:f8:f4:fc:82:01:27:e5:58:2a:
         58:44:5f:90:6b:5b:8b:9c:d7:97:77:d3:1e:5d:6d:62:a2:a2:
         3b:b5:30:46:1a:29:4c:f3:e2:03:36:b5:74:12:16:8f:4d:ee:
         37:a7:2b:53:71:d0:89:97:71:bc:93:01:20:ae:46:1e:15:a8:
         a5:3a:d5:f7:40:91:5e:58:59:d0:7f:5f:6d:c3:b7:0c:54:31:
         1c:41:69:70:17:d0:35:8e:3a:95:d5:7b:bb:5f:7c:84:fa:a4:
         b0:5f:14:43:30:0f:23:51:b7:86:6d:b9:58:de:b2:41:6f:eb:
         2f:3d:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:03:54 2024 by rpki-client on console-fra.rpki-client.org