Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
File:                     323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa (raw, json)
Hash identifier:          /m+xd3Xran3y7Sr/gqknifBOYDA9ZwOxyZxarx/BP5Q=
Subject key identifier:   F2:07:F5:0D:A0:16:19:04:A0:07:A7:05:B6:99:A9:8C:C0:5F:8F:94
Certificate issuer:       /CN=328938F6B87D58141D853FA04B61F2EC68371E43
Certificate serial:       60FB8BD5FF879CF8C906B974E29DEDF2DFEFE938
Authority key identifier: 32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa
Signing time:             Wed 03 Apr 2024 18:31:57 +0000
ROA not before:           Wed 03 Apr 2024 18:26:57 +0000
ROA not after:            Wed 02 Apr 2025 18:31:57 +0000
asID:                     272185
IP address blocks:        2804:833c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl
                          rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fb:8b:d5:ff:87:9c:f8:c9:06:b9:74:e2:9d:ed:f2:df:ef:e9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328938F6B87D58141D853FA04B61F2EC68371E43
        Validity
            Not Before: Apr  3 18:26:57 2024 GMT
            Not After : Apr  2 18:31:57 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:7f:08:26:9c:f1:43:e6:4c:2a:c3:30:6e:
                    00:07:4a:2c:de:a6:f4:5b:7d:d3:3a:f5:51:5c:cd:
                    0d:d6:43:38:f4:38:7e:79:25:a4:c9:bf:08:fb:61:
                    90:0f:e7:2f:23:13:7f:7f:b4:0d:4b:6b:cc:a0:2a:
                    77:7d:f5:c7:28:fd:45:7c:91:6b:17:50:ca:a2:a8:
                    7d:57:f4:0a:a7:da:c0:de:65:03:5d:26:69:6c:82:
                    5e:89:ca:fb:ea:02:42:12:34:0d:22:69:39:83:98:
                    8f:d5:df:bf:b5:a0:b4:b3:68:33:dd:1b:a6:50:82:
                    e2:39:14:99:11:96:ef:1b:5c:0a:12:98:47:53:e6:
                    9c:3f:b2:c9:e8:7b:b7:ac:d6:31:56:75:73:a1:ae:
                    4a:f8:97:59:0e:43:16:ac:5a:6f:7f:b4:96:99:9b:
                    d2:f5:46:e5:36:71:f1:e0:0c:89:d7:1a:b4:f2:5c:
                    5f:01:e7:e4:71:43:12:05:ed:79:4c:94:21:fa:f6:
                    f9:34:2c:93:1f:66:2d:4b:ef:0f:bf:d9:59:42:5d:
                    51:8d:bc:76:60:66:fc:0d:65:87:c3:1d:ac:3f:7e:
                    ad:ba:b1:2e:c1:bf:e9:77:2f:12:22:ad:89:ec:75:
                    cd:7c:6a:61:47:3b:3b:ce:a3:9b:59:ad:a4:08:3b:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:F5:0D:A0:16:19:04:A0:07:A7:05:B6:99:A9:8C:C0:5F:8F:94
            X509v3 Authority Key Identifier:
                keyid:32:89:38:F6:B8:7D:58:14:1D:85:3F:A0:4B:61:F2:EC:68:37:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/328938F6B87D58141D853FA04B61F2EC68371E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328938F6B87D58141D853FA04B61F2EC68371E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5M8ukuVpcnk9LWJQr7Y9ZiiFChbYK7h3pcqjYJ29gZvg/2/323830343a383333633a383030303a3a2f33332d3333203d3e20323732313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:833c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:3c:8f:44:13:3b:f5:e4:e7:c7:fd:64:a1:94:f6:31:98:35:
         b3:7a:df:ee:f4:36:e6:6a:11:fc:b9:e4:e8:c6:6b:3d:99:2b:
         51:d1:20:dd:40:4f:c0:07:16:4c:12:45:5f:7c:55:d2:ba:0f:
         f6:76:29:de:4b:08:07:6d:6f:ff:b8:14:39:3f:58:3a:28:d0:
         68:c7:85:9f:38:91:c8:2c:b8:28:41:5b:fe:dd:9f:33:56:dc:
         ad:21:5f:bb:3a:e7:ab:33:08:cc:74:42:eb:44:e5:7d:b9:2e:
         51:e6:28:05:f9:24:d3:15:55:3a:0d:3f:44:9e:4f:c6:13:d2:
         37:61:8b:05:50:19:9e:d1:85:e6:ad:9a:78:bc:15:83:43:4d:
         3a:80:43:84:20:a8:5a:a0:54:b6:10:9e:07:2e:14:5f:49:7a:
         6c:0e:f8:16:a8:f5:bd:3f:e7:31:7a:68:b8:ad:92:fb:0e:e2:
         d8:77:cc:e0:f7:dd:fb:3e:1f:61:b3:c8:52:3c:ee:08:a3:3f:
         b8:26:7c:38:f4:d0:71:bc:e5:76:07:36:29:45:e7:e7:eb:47:
         bb:47:52:11:b7:4c:9c:51:0f:0f:d2:ed:49:db:d2:80:39:18:
         8c:65:86:fe:b8:e6:13:45:a8:8f:b6:c6:cb:36:a7:9a:33:ca:
         d5:58:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org