Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          Nwf4Wx/U9RN9PQg2m7FLd1WdJCMfGvOKYyNg01RIOs4=
Subject key identifier:   1B:59:46:AD:C4:D5:DC:E5:CF:44:79:A0:88:27:D2:D3:88:DA:44:3C
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       34B3CF18E977112E1B2024AA7732F8F866792273
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:25 +0000
ROA not before:           Mon 26 Aug 2024 14:43:25 +0000
ROA not after:            Mon 25 Aug 2025 14:48:25 +0000
asID:                     268843
IP address blocks:        2804:8388:8004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b3:cf:18:e9:77:11:2e:1b:20:24:aa:77:32:f8:f8:66:79:22:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:25 2024 GMT
            Not After : Aug 25 14:48:25 2025 GMT
        Subject: CN=1B5946ADC4D5DCE5CF4479A08827D2D388DA443C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:84:af:4e:cd:be:25:7d:ef:aa:e2:f4:22:
                    62:98:ae:f9:ee:2f:fb:59:17:31:b5:ca:e6:d0:c2:
                    76:b5:14:5b:5d:dd:ab:80:01:d7:f9:53:fa:5d:62:
                    fc:26:73:81:d9:f1:e0:74:d8:7e:0e:f8:43:09:21:
                    a6:b7:ac:13:95:05:4c:f0:c2:bb:55:d4:84:c2:9d:
                    47:19:d6:3f:31:52:6a:47:6e:a2:b8:97:3c:8f:4f:
                    b6:d3:d8:8f:90:6f:0e:8f:87:30:d4:f2:de:a0:45:
                    ca:3f:42:09:a1:25:2e:ce:12:5c:33:73:69:a7:49:
                    0d:b1:31:83:bb:97:cf:27:9b:8f:88:68:49:5d:c1:
                    35:43:f4:27:bb:36:93:a1:ff:53:1d:3b:0a:c1:2d:
                    32:cf:a8:77:67:bc:79:51:5a:57:7c:a0:c6:9c:67:
                    e5:c5:df:22:87:f5:8c:13:a8:b2:8f:cf:a3:9c:03:
                    55:cb:b4:c0:bc:69:3e:52:9d:97:bf:c1:e1:9e:a3:
                    75:cc:cd:60:d2:31:3d:6d:7b:1f:d0:11:82:dc:4b:
                    33:b8:1d:48:6f:ff:6b:0f:31:8c:66:ef:a2:a5:f6:
                    7e:b0:2e:b1:00:0c:5d:fa:05:fa:18:c1:fc:e1:ee:
                    8f:68:99:35:be:0b:96:af:d3:92:e7:78:c2:3b:b3:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:59:46:AD:C4:D5:DC:E5:CF:44:79:A0:88:27:D2:D3:88:DA:44:3C
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030343a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8004::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:45:5e:3f:6e:86:56:e8:ba:2d:b2:71:95:d7:0e:5f:69:63:
         ae:f3:be:bb:f6:e4:53:29:84:33:b6:c9:54:d0:87:95:10:95:
         8c:1c:4d:82:82:76:e5:c1:21:93:72:38:58:7e:30:45:31:e6:
         54:84:e1:5f:01:01:14:f8:79:c4:1a:8a:c1:00:08:50:d5:fc:
         b5:cb:f5:69:cf:30:f6:04:6a:cd:46:61:26:c4:22:08:a3:eb:
         4a:4c:04:25:56:29:7d:a1:a4:37:4f:69:38:b9:2f:8d:96:ef:
         ae:66:1f:bf:25:be:76:1b:3e:07:a4:f1:dc:10:ad:4e:2b:b1:
         b1:b5:a5:f4:19:4d:3e:77:1e:51:c9:34:43:14:c5:04:88:9a:
         05:b9:43:ca:d9:20:b8:0f:64:3b:5a:df:d7:e1:22:6c:72:ad:
         d1:cb:56:fc:a7:f6:d4:69:21:5d:74:b6:e9:41:a8:a4:18:4e:
         b8:ef:83:ac:94:ab:ab:27:c9:36:70:9b:9b:82:f3:28:59:ad:
         55:77:80:b8:e8:3f:b6:9e:8d:61:2b:a7:06:30:86:38:75:81:
         58:7e:6d:73:b4:d1:0e:5c:69:ba:f5:85:48:89:91:b1:98:c4:
         78:43:fe:87:c7:3b:ea:e0:74:4a:a1:61:97:07:a2:f1:68:3e:
         9a:a5:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org