Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          6kRHbE1h8q7d5tsWVXHgr8te1HuPLygJSRch5payQZE=
Subject key identifier:   E7:3F:33:81:3E:01:A2:75:3E:B2:7D:64:B2:B0:23:37:6A:7D:A1:F1
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       410195BD0AD6A724A55F1DC9EC42C8F4A95792DD
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:17 +0000
ROA not before:           Mon 26 Aug 2024 14:43:17 +0000
ROA not after:            Mon 25 Aug 2025 14:48:17 +0000
asID:                     268843
IP address blocks:        2804:8388:4000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:01:95:bd:0a:d6:a7:24:a5:5f:1d:c9:ec:42:c8:f4:a9:57:92:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:17 2024 GMT
            Not After : Aug 25 14:48:17 2025 GMT
        Subject: CN=E73F33813E01A2753EB27D64B2B023376A7DA1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:88:02:13:8e:46:3d:0e:06:85:f8:20:43:
                    2a:57:46:c8:bd:c8:f0:72:62:a7:81:26:f1:50:34:
                    67:e0:fe:b9:35:b1:4f:a1:29:c2:d0:65:10:86:26:
                    90:6f:41:b9:e8:96:1c:56:91:ca:08:53:d4:0a:a8:
                    a8:64:9b:fa:a8:8b:07:90:9d:34:d5:0b:50:e1:b0:
                    f5:05:83:6f:ae:eb:63:d5:13:09:6a:c6:2c:04:e1:
                    45:f9:ef:b7:5c:1f:21:ea:f9:a7:50:9c:18:6b:6c:
                    7d:b8:a6:99:1d:22:d6:f8:31:fa:e3:dd:dc:c6:7e:
                    db:88:37:f7:17:61:36:af:76:93:02:3d:cc:18:68:
                    22:9d:78:b8:bc:03:0b:94:e1:a7:a0:9e:76:fc:13:
                    d6:8d:3f:37:e5:c0:49:c4:f6:bb:34:25:e9:9b:0d:
                    72:36:76:00:74:c8:ba:d5:96:a9:df:4e:b9:df:78:
                    50:73:24:fc:c1:f2:0d:58:af:02:17:f0:4f:f5:43:
                    35:97:a4:43:11:de:95:14:77:0e:58:fa:84:24:0d:
                    17:75:8a:a1:31:af:9c:5d:85:f8:cc:13:08:c0:7f:
                    24:be:69:f4:4b:33:94:03:0c:0d:3c:78:24:7e:76:
                    3b:b7:cc:1c:d3:11:81:5d:14:b7:ee:e6:d7:43:c5:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3F:33:81:3E:01:A2:75:3E:B2:7D:64:B2:B0:23:37:6A:7D:A1:F1
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a343030303a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:34:56:e7:b3:2c:d7:5d:a5:ed:8c:8e:66:60:4e:5e:d5:
         14:8d:35:3d:91:23:73:8e:15:a0:33:21:9c:9c:01:01:10:36:
         7b:ab:b2:da:c7:4a:cd:1d:f6:86:6d:f2:cf:d3:76:91:91:e9:
         fa:e5:6c:62:34:0c:88:4c:fc:53:5e:aa:b0:70:d7:01:93:b5:
         44:b7:8e:08:67:25:e5:86:2d:65:3a:4e:f7:9e:52:78:b4:f8:
         61:e0:66:66:25:f4:6a:97:3e:0e:50:81:c3:ca:b3:ca:84:b1:
         df:c9:6c:cc:aa:27:6a:29:0c:f3:33:12:c7:80:b4:4a:be:45:
         9f:ed:4e:2d:e9:0b:35:c7:b3:88:63:1b:b0:a6:f2:2c:1c:e8:
         60:ec:c2:b9:d8:b5:4e:ef:6b:9f:64:26:4d:a4:bc:f8:8f:7f:
         6b:f4:cf:78:4b:51:d2:79:0e:79:84:34:43:8d:35:5c:bf:a7:
         ab:b1:30:58:8c:92:73:4d:d8:eb:9b:b6:1b:d5:3b:9e:9a:04:
         48:c8:87:22:42:4f:14:84:3c:a3:ac:0c:b6:e7:47:93:40:39:
         ba:1b:f7:d1:5d:13:88:b3:06:7a:bc:d6:c4:01:7d:2e:2c:7b:
         45:cd:a2:50:a7:a1:24:46:d9:65:03:d0:09:4d:4c:cc:47:41:
         02:a9:91:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org