Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3438203d3e20323637303738.roa
File:                     323830343a343764303a3a2f33322d3438203d3e20323637303738.roa (raw, json)
Hash identifier:          YqpWS9spyJ0lkB6q6F8bHeWlLzd4l+MnX24rqtUGEj8=
Subject key identifier:   F5:56:AA:84:F2:6E:19:A4:2F:4E:EF:55:A9:2E:72:ED:29:F0:51:16
Certificate issuer:       /CN=289C0FA8F74E8A496A1CF040353916504C4E789F
Certificate serial:       67FE482A07088A06346E9CBF56D9DE006D3DEE53
Authority key identifier: 28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3438203d3e20323637303738.roa
Signing time:             Wed 05 Jun 2024 19:02:44 +0000
ROA not before:           Wed 05 Jun 2024 18:57:44 +0000
ROA not after:            Wed 04 Jun 2025 19:02:44 +0000
asID:                     267078
IP address blocks:        2804:47d0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl
                          rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:fe:48:2a:07:08:8a:06:34:6e:9c:bf:56:d9:de:00:6d:3d:ee:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289C0FA8F74E8A496A1CF040353916504C4E789F
        Validity
            Not Before: Jun  5 18:57:44 2024 GMT
            Not After : Jun  4 19:02:44 2025 GMT
        Subject: CN=F556AA84F26E19A42F4EEF55A92E72ED29F05116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:9c:75:b2:ce:c2:f2:1d:5f:ee:c9:e2:1e:
                    af:50:06:0f:1b:c8:f3:bf:f9:bd:8c:94:77:19:8d:
                    82:fd:cc:ec:70:59:3a:74:73:d3:cc:3e:93:87:c4:
                    62:de:07:88:07:a9:e6:ee:57:02:de:e1:ea:a0:8d:
                    eb:95:38:5b:f9:d1:f7:6e:b6:63:aa:c5:fb:9f:43:
                    09:6c:73:2c:0e:f6:97:58:45:dd:6e:e7:ac:c3:15:
                    b1:20:ad:b1:03:6b:e1:64:1a:58:68:fe:96:7e:52:
                    bf:54:c3:db:7c:8e:8b:cb:7c:dd:5e:08:24:af:7b:
                    12:9e:34:39:6a:5c:46:a0:a4:8c:49:36:ac:fa:0b:
                    e7:ee:ad:16:57:73:4d:64:c9:b0:e6:cf:2f:2c:d8:
                    e0:ac:40:ae:6e:f0:01:2e:e0:16:b4:4c:1a:86:38:
                    43:18:c7:ba:44:a9:59:36:d0:15:d6:c6:58:9a:4b:
                    bf:f7:40:17:14:73:f8:f8:36:03:1f:8e:53:8c:d9:
                    a9:6b:fe:d5:59:3d:f2:82:10:c1:8e:e0:92:76:66:
                    a5:a9:85:d7:53:20:74:40:38:03:37:53:b9:45:3b:
                    4f:ad:57:88:18:d5:98:6c:2d:cf:1c:b3:e3:15:68:
                    02:88:eb:d5:9a:a9:49:2e:6f:73:87:82:ee:9b:d1:
                    fd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:56:AA:84:F2:6E:19:A4:2F:4E:EF:55:A9:2E:72:ED:29:F0:51:16
            X509v3 Authority Key Identifier:
                keyid:28:9C:0F:A8:F7:4E:8A:49:6A:1C:F0:40:35:39:16:50:4C:4E:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/289C0FA8F74E8A496A1CF040353916504C4E789F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/289C0FA8F74E8A496A1CF040353916504C4E789F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a3a2f33322d3438203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:74:5c:ac:9e:40:03:41:c8:11:3b:27:89:e4:ac:a4:4e:15:
         8e:ec:17:44:d4:5a:2c:cb:b0:19:2b:de:8d:12:e0:c1:c7:06:
         e7:05:b7:6a:0e:d9:cf:1d:51:0d:c0:b1:0d:f7:f2:09:10:ea:
         e1:5b:8c:b1:07:3a:77:05:d8:b2:d5:80:8f:eb:f8:2c:3c:fa:
         ec:28:1c:78:41:33:1c:7d:9a:45:0f:e2:8c:1a:26:71:04:87:
         f9:8a:6a:b7:f9:9f:df:5d:1c:95:a8:c6:53:0a:3d:fa:4d:cb:
         a6:8e:47:c1:d6:d2:47:13:bf:15:fa:40:3a:de:ba:de:f7:ae:
         45:79:85:6d:ef:e0:a4:2a:f0:6b:e7:c5:bf:18:3b:c6:60:be:
         c7:d2:dd:27:85:c3:d0:8a:27:92:89:5e:1b:8f:3d:29:e6:4a:
         00:3a:a0:93:71:e9:49:09:6f:fe:9b:c6:9c:20:f0:07:6b:08:
         41:ef:d8:a5:66:ae:1c:ab:3b:d5:c9:c9:32:25:ea:90:27:83:
         ef:ae:e4:36:cb:9e:d6:a6:01:40:62:3b:1d:a4:ea:c3:6f:49:
         7a:b6:0e:3d:8e:a7:6a:2e:2b:02:1b:2a:8d:a3:e1:4e:42:ae:
         e3:41:35:d0:d9:ca:50:53:7a:27:fc:89:e2:15:b2:56:be:f9:
         de:8b:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org