Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa
File:                     323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa (raw, json)
Hash identifier:          xJRm+mPk4S8dtClnu8BwuaAY6xRFF8wo6KWJpQ9uF5w=
Subject key identifier:   CA:C1:81:20:33:EB:C6:96:D2:2F:68:DA:79:6F:58:96:C9:53:D3:85
Certificate issuer:       /CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
Certificate serial:       7DD0469E2E0042842D286E96AEA2EEC019D217D9
Authority key identifier: 3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa
Signing time:             Mon 26 Aug 2024 14:48:31 +0000
ROA not before:           Mon 26 Aug 2024 14:43:31 +0000
ROA not after:            Mon 25 Aug 2025 14:48:31 +0000
asID:                     268843
IP address blocks:        2804:8388:8009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl
                          rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d0:46:9e:2e:00:42:84:2d:28:6e:96:ae:a2:ee:c0:19:d2:17:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AFD4BA8C10F1B3F69EC684228D490292CC7C736
        Validity
            Not Before: Aug 26 14:43:31 2024 GMT
            Not After : Aug 25 14:48:31 2025 GMT
        Subject: CN=CAC1812033EBC696D22F68DA796F5896C953D385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:dd:59:ea:f6:8c:af:b0:1a:7e:96:86:93:
                    76:16:d7:15:7f:d2:9e:70:cf:03:00:ac:57:de:b9:
                    09:f2:f2:b5:69:30:5b:b1:f0:f9:80:c2:69:d0:37:
                    11:3b:be:a7:02:08:6c:5d:dc:40:04:ea:75:d6:22:
                    31:eb:28:05:31:ec:ac:53:a9:38:fc:67:a3:03:22:
                    7f:44:e5:47:cc:30:40:6b:53:0a:2f:71:9f:e5:ac:
                    a7:07:54:76:c8:e2:d7:cb:ce:64:b3:f1:d3:b7:ae:
                    a5:4c:38:80:e5:26:76:aa:ce:28:00:0a:45:fa:58:
                    c4:d8:f7:3f:85:8a:00:0a:31:c0:b4:78:3e:c4:0b:
                    c9:1c:b9:55:c9:23:73:8a:47:91:1c:5b:a3:20:a1:
                    ba:6d:67:5f:c2:e7:be:79:ae:09:74:b9:56:ab:f5:
                    cc:cc:a7:a5:b3:3f:04:1f:f6:71:38:b6:f1:15:2e:
                    de:89:8a:6d:78:49:03:e5:6c:e3:e9:20:06:a7:04:
                    18:79:9a:ea:ac:ed:20:eb:91:a4:be:2f:95:5c:ca:
                    17:ee:99:c9:54:15:71:5a:81:40:a9:f7:c5:77:cc:
                    a5:71:c5:50:af:a9:7a:ec:70:43:13:fc:b7:6e:0a:
                    6f:3d:b9:86:ec:22:7a:3b:47:ed:ab:af:f3:83:6e:
                    3f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C1:81:20:33:EB:C6:96:D2:2F:68:DA:79:6F:58:96:C9:53:D3:85
            X509v3 Authority Key Identifier:
                keyid:3A:FD:4B:A8:C1:0F:1B:3F:69:EC:68:42:28:D4:90:29:2C:C7:C7:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AFD4BA8C10F1B3F69EC684228D490292CC7C736.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Dw8HMr1NJWAxzJJjtCgtyrWL2EA2Q3A8ANp9ewWDBZK/0/323830343a383338383a383030393a3a2f34382d3438203d3e20323638383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8388:8009::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:d8:74:40:5e:97:ea:e2:98:b5:91:1b:6c:55:da:37:da:
         c3:ae:4b:f6:1b:02:15:13:a8:86:a0:a3:fb:cd:d8:7e:02:1e:
         28:ec:a9:d6:06:4c:84:99:ed:4e:70:df:ce:f1:1e:ee:5e:4e:
         1d:37:91:9f:ff:4b:7d:3f:81:ff:f0:8a:b0:ed:36:c9:9a:04:
         9b:7d:31:91:e7:5f:32:68:4f:7d:09:70:76:7c:83:ee:ad:5f:
         0c:6b:af:46:f2:92:f9:4f:d7:9d:e3:e0:ce:2d:cf:58:7c:5f:
         d7:30:4d:19:e6:c9:b3:0e:c3:5d:a3:87:a7:bf:47:38:48:a8:
         a4:76:d9:e0:2b:b6:b1:e4:45:db:c7:40:8d:8a:7d:11:09:30:
         a4:f1:c4:81:e2:fa:34:38:58:c9:ea:f8:e1:1a:3d:ca:c1:da:
         92:1e:7b:b1:c2:a8:3d:1d:30:a4:46:87:18:86:0d:1f:52:a3:
         7f:4f:05:9d:00:dc:ce:f7:76:a7:7e:4f:e1:e6:00:8a:39:6f:
         49:1b:7a:e5:62:eb:d8:93:6a:9f:e6:8d:8d:4c:d8:b6:43:1f:
         c8:77:05:e7:0b:06:c0:bb:d4:a2:e9:44:7d:71:75:24:25:05:
         f0:92:f0:65:dd:3e:65:29:9f:40:14:e2:53:d6:a8:25:35:1a:
         c9:c9:a9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:08:03 2024 by rpki-client on console-ams.rpki-client.org