Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          O7lRxtgZl8BapuqLa5UPSp0xWtN5Trehm8J2qxloqwk=
Subject key identifier:   0B:55:35:D1:14:F3:03:FD:C7:A9:8E:35:4D:38:19:24:9B:65:A5:02
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       12387A60DD7D6B3E68E8A71C97F30E0B1713FF85
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:21 +0000
ROA not before:           Mon 26 Aug 2024 14:43:21 +0000
ROA not after:            Mon 25 Aug 2025 14:48:21 +0000
asID:                     268843
IP address blocks:        2804:8388:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:7a:60:dd:7d:6b:3e:68:e8:a7:1c:97:f3:0e:0b:17:13:ff:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:21 2024 GMT
            Not After : Aug 25 14:48:21 2025 GMT
        Subject: CN=0B5535D114F303FDC7A98E354D3819249B65A502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:09:0a:52:ac:51:00:32:f0:bd:d5:74:52:
                    db:39:fa:0d:49:ad:60:90:a5:0a:66:9e:2b:f4:a3:
                    62:67:85:62:81:52:2f:75:9d:e7:21:eb:ff:df:0a:
                    ef:61:b7:6f:03:63:29:6b:6c:29:c0:6e:d4:49:61:
                    cf:bb:b4:c2:67:23:a5:da:32:8f:6e:22:56:ec:ac:
                    a8:94:67:70:93:ac:24:30:bb:bc:d5:04:be:61:c9:
                    5f:eb:d6:4f:6c:84:b3:a2:66:42:33:1c:0d:bc:64:
                    1c:73:37:b1:9f:2b:8d:9f:ac:6a:df:c4:5b:a5:ce:
                    10:76:74:20:09:79:01:c0:4e:27:39:fe:79:e7:7f:
                    94:35:c6:2d:3c:9e:96:67:32:38:40:8e:54:28:6b:
                    98:b2:a8:4f:23:2b:af:7c:16:9c:0f:2f:72:05:3c:
                    48:91:44:76:bb:f5:dd:f8:e7:b6:c6:a2:06:4a:e5:
                    8a:1a:37:66:7c:8a:44:06:62:bf:29:dc:0f:a1:ef:
                    d0:fb:c5:ef:33:31:ec:5a:31:59:f5:57:92:cf:0b:
                    d4:0e:ad:b4:d5:ed:56:11:c5:c6:9a:32:47:14:2c:
                    01:f7:13:fa:e2:94:53:d5:e4:24:2f:4b:2b:18:d2:
                    3e:fa:44:5c:3c:c2:23:25:d8:8b:68:d3:29:78:1f:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:55:35:D1:14:F3:03:FD:C7:A9:8E:35:4D:38:19:24:9B:65:A5:02
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030313a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:ba:6d:4f:5a:e5:9d:25:f8:ac:8c:77:4c:78:83:4a:25:
         f6:5e:5e:c1:3e:4e:ce:58:07:9b:1e:a8:78:71:87:7b:82:3a:
         d2:23:b7:90:ed:32:27:30:20:89:c8:66:b0:65:8a:66:58:48:
         bd:ed:c5:7d:3a:15:bc:61:5e:a1:b7:9a:1e:44:65:b2:ff:0e:
         5f:58:c7:b3:45:99:e0:83:02:a2:15:27:de:0c:e9:88:5b:45:
         00:0a:3c:10:a0:c8:d7:25:97:e3:80:03:85:ab:d5:3f:1f:7c:
         4f:7e:82:0b:14:4d:47:3a:50:43:e2:71:72:df:9e:30:22:01:
         da:84:b3:bf:04:5f:50:ff:c2:2a:fb:63:b4:17:df:65:f0:90:
         bd:07:ea:2b:62:c1:61:52:b8:bd:fb:b5:69:9a:93:5f:8a:70:
         f7:bc:d6:cf:2d:45:6c:de:32:bb:40:a0:83:c3:26:53:17:34:
         c0:b6:4d:9c:59:d4:1d:b9:7c:5d:db:f4:0f:0c:6e:f5:75:27:
         86:ea:f1:c1:35:b7:eb:78:c9:ed:b7:25:9d:d5:8f:b1:c8:be:
         0d:1a:ec:a6:44:c1:69:7f:3f:44:df:9a:c5:85:72:2c:ec:d8:
         b0:14:c3:36:bb:f8:ab:da:2c:d0:21:c5:27:71:59:0f:f6:d0:
         fb:4d:df:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org