Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3336203d3e20323632353530.roa (raw, json)
Hash identifier:          8wgu840duihojru8pVnwn2HRmlZeZwamZlKAK1kiiQc=
Subject key identifier:   C0:4E:97:F3:D4:E1:15:17:CE:61:CB:A1:9A:D3:B5:A8:DE:58:CC:54
Certificate issuer:       /CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
Certificate serial:       5EB8F90F4B64153F66C9E1517F19095681DB21CD
Authority key identifier: 50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
Signing time:             Thu 12 Sep 2024 18:59:48 +0000
ROA not before:           Thu 12 Sep 2024 18:54:48 +0000
ROA not after:            Thu 11 Sep 2025 18:59:48 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b8:f9:0f:4b:64:15:3f:66:c9:e1:51:7f:19:09:56:81:db:21:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5060A86A09E56CD00DC4540812BD4D7775AC9715
        Validity
            Not Before: Sep 12 18:54:48 2024 GMT
            Not After : Sep 11 18:59:48 2025 GMT
        Subject: CN=C04E97F3D4E11517CE61CBA19AD3B5A8DE58CC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:ff:a9:04:80:42:f3:bd:1c:aa:96:92:7d:
                    4b:c4:96:1d:af:80:cb:33:bb:94:fc:8c:96:51:59:
                    ed:f4:91:85:f4:17:29:b9:bd:05:6f:ce:2a:12:01:
                    71:13:81:a3:82:17:9e:94:4b:42:6d:dc:d1:3f:ad:
                    a8:07:82:c4:ec:70:77:92:84:36:a5:47:8f:7d:40:
                    ad:32:52:1b:8e:4e:6a:4a:e2:f5:32:25:3d:29:3a:
                    c2:d6:08:68:4c:90:94:2c:7f:03:89:b9:d0:86:52:
                    d8:f6:1c:40:e9:37:d5:95:fd:94:4e:5f:6a:98:1c:
                    09:e4:02:8d:2c:e3:55:a7:9a:80:59:28:24:01:96:
                    e5:51:00:27:5a:65:1f:86:6b:72:82:9b:f9:8d:03:
                    e8:80:83:09:d9:80:51:23:66:fd:54:eb:fa:7d:b6:
                    8f:aa:f7:f6:15:23:4c:32:78:b3:2f:21:85:26:31:
                    86:44:2b:2b:08:72:e1:b0:74:ae:08:a4:a0:a5:1f:
                    b8:52:23:32:4b:04:cf:9a:45:db:7b:9d:b4:3b:6b:
                    6e:4e:bb:96:e7:d1:94:aa:6a:f9:b2:b4:4f:69:5e:
                    33:64:1b:61:e4:18:a5:4e:f5:7f:02:27:ad:a9:0b:
                    d5:3d:22:5a:7a:94:6f:17:bb:f8:dd:85:3e:89:b6:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4E:97:F3:D4:E1:15:17:CE:61:CB:A1:9A:D3:B5:A8:DE:58:CC:54
            X509v3 Authority Key Identifier:
                keyid:50:60:A8:6A:09:E5:6C:D0:0D:C4:54:08:12:BD:4D:77:75:AC:97:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/5060A86A09E56CD00DC4540812BD4D7775AC9715.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5060A86A09E56CD00DC4540812BD4D7775AC9715.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:fc:22:60:aa:07:50:d7:a6:9c:d9:11:a2:5f:7b:7d:36:
         08:16:bb:d4:4d:85:07:9b:89:10:bd:12:67:69:49:f2:f7:6d:
         48:00:5d:84:da:b9:52:39:7f:4f:e1:84:53:d1:3c:c0:cf:74:
         3e:a4:7e:2e:c7:dc:39:f7:d3:06:7e:22:99:cf:a2:e4:2c:fb:
         4b:af:63:a6:b5:b9:ca:ac:3c:fe:57:a2:45:72:c6:82:a7:7b:
         1b:ea:55:f2:24:f1:90:93:4d:1d:f3:86:2e:c3:c7:11:ef:bc:
         4a:38:f6:e1:07:d9:4e:a6:12:cd:f9:00:4d:c1:52:67:cf:71:
         0b:ef:39:3e:1a:48:54:49:fd:e1:db:ae:c7:fa:0c:87:f6:f7:
         3f:d2:a2:b5:5e:2e:3c:9e:71:22:0b:e1:fb:f2:f6:73:5a:49:
         13:75:70:e8:6e:1f:19:3e:18:c4:1d:ef:39:ee:f4:6d:08:27:
         c6:c7:32:22:7a:d9:c4:b3:35:ef:d2:32:81:bf:4e:33:ca:49:
         57:76:f9:16:26:86:7e:c1:1d:65:4c:be:ef:e4:37:a8:d8:18:
         7a:72:dd:c7:90:d2:ff:04:2d:47:ba:8f:51:82:94:9a:2e:f9:
         4d:b0:7d:54:9a:3f:d7:03:ba:21:a7:95:86:ac:31:07:87:48:
         d6:55:8e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:51 2024 by rpki-client on console-fra.rpki-client.org