Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
File:                     323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa (raw, json)
Hash identifier:          aF+tovmGChR2EznN/7xVTioVvno+LauGdrWX1oQDMPo=
Subject key identifier:   AC:96:1D:90:7A:12:27:9F:0D:3C:CA:F9:71:11:68:C5:D9:B0:64:07
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       7D18A1A8B1BCDE1CD31D89834BFAA89BCA55193A
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa
Signing time:             Thu 04 Apr 2024 00:53:38 +0000
ROA not before:           Thu 04 Apr 2024 00:48:38 +0000
ROA not after:            Thu 03 Apr 2025 00:53:38 +0000
asID:                     28594
IP address blocks:        2804:5208:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:a1:a8:b1:bc:de:1c:d3:1d:89:83:4b:fa:a8:9b:ca:55:19:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Apr  4 00:48:38 2024 GMT
            Not After : Apr  3 00:53:38 2025 GMT
        Subject: CN=AC961D907A12279F0D3CCAF9711168C5D9B06407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:bf:17:d5:23:de:49:8a:1c:24:a8:81:a5:
                    a7:70:95:7e:f5:b7:50:92:1d:bb:96:94:fb:da:e2:
                    d3:26:4e:ab:a6:bd:a6:3f:53:62:ad:9a:01:bd:19:
                    17:ed:c6:cd:9f:f0:6c:7e:39:ad:19:79:09:4e:7a:
                    b7:9b:95:20:08:d4:83:d2:31:4d:3c:1f:35:f5:47:
                    1f:f6:60:f1:71:c9:da:a0:ec:85:ca:c2:ae:fa:bf:
                    93:9d:1a:fa:38:f2:b7:69:84:bc:39:2e:ec:9b:bf:
                    5e:b1:56:7d:c0:8c:2f:d8:12:8a:22:18:fb:45:74:
                    bd:c9:62:e5:a4:b1:57:08:09:f7:0f:aa:12:a2:66:
                    a4:08:73:93:8b:7b:9e:b4:02:a3:9a:c8:6e:07:48:
                    73:9a:ae:6f:ff:eb:18:80:3f:3a:70:72:9c:9b:3b:
                    67:56:a0:e0:76:09:18:4f:b8:8c:7d:e6:2f:9a:04:
                    59:11:31:7d:8b:63:12:71:a3:d5:c9:f9:b3:d8:c5:
                    1d:1d:31:20:2c:b5:cf:60:ac:02:03:81:bd:98:d6:
                    03:03:ee:a0:cb:e8:40:63:4b:9d:89:7e:0d:a4:a5:
                    20:f8:59:9c:73:e3:8a:d5:b2:18:eb:82:87:c3:fa:
                    83:d9:34:1a:08:f9:1f:53:16:c3:ac:3a:35:bd:d0:
                    2f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:96:1D:90:7A:12:27:9F:0D:3C:CA:F9:71:11:68:C5:D9:B0:64:07
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/323830343a353230383a313a3a2f34382d3438203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5208:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:ea:83:c4:e7:d5:f5:62:f7:8f:74:6a:6b:08:1a:54:c3:42:
         85:06:1b:4b:16:bf:f3:de:23:de:d4:f7:e7:25:64:9f:7b:72:
         d7:a0:64:35:13:97:18:75:b7:ff:d1:86:12:e6:ec:cf:0c:b4:
         bf:20:f0:13:29:e5:00:7a:55:60:c1:93:d5:ff:2a:73:f4:fc:
         ed:f7:61:6f:72:6e:77:1a:4f:c8:8a:bb:80:c9:80:48:7d:14:
         23:d3:63:d8:20:d5:cf:bf:4d:b2:c0:03:4b:7b:6f:db:92:01:
         60:e3:e4:3f:15:fc:f9:8d:c0:e4:88:5f:16:a9:c6:54:06:73:
         b0:2e:24:fe:44:07:7a:29:4e:5a:48:dd:47:a1:89:50:25:d5:
         bc:6a:3b:0c:ff:18:16:f8:24:66:d1:44:3c:f8:4d:79:c2:ad:
         9d:7f:46:88:8b:dd:69:5f:b4:fc:73:13:88:01:d6:d2:b5:d3:
         1b:f4:01:cf:c0:e8:47:dd:01:f2:c0:48:99:f6:87:6c:ce:7c:
         16:56:92:48:56:a2:6b:c7:60:2d:07:8a:9b:e7:3d:e3:a5:67:
         3d:2b:d8:36:5f:b9:b8:61:68:c7:a3:ac:be:8f:0e:dd:3e:f8:
         bf:bc:08:6c:98:58:e8:13:98:74:56:4a:6f:60:55:f9:a8:f4:
         e5:d7:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:15 2024 by rpki-client on console-ams.rpki-client.org