Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630313a3a2f34382d3438203d3e203631363636.roa
File:                     323830343a316361303a666630313a3a2f34382d3438203d3e203631363636.roa (raw, json)
Hash identifier:          n0/BFJ4H6MqMkwYXC/cAXuWDYBoWp9I+aOpZeyQ4dcM=
Subject key identifier:   35:64:5D:32:C7:D0:A9:A7:74:E9:DA:59:1D:8A:69:06:99:62:9E:0A
Certificate issuer:       /CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
Certificate serial:       42691FB5D56E282EC539E4D33A424CF421B65689
Authority key identifier: DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630313a3a2f34382d3438203d3e203631363636.roa
Signing time:             Wed 03 Apr 2024 20:24:08 +0000
ROA not before:           Wed 03 Apr 2024 20:19:08 +0000
ROA not after:            Wed 02 Apr 2025 20:24:08 +0000
asID:                     61666
IP address blocks:        2804:1ca0:ff01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl
                          rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:69:1f:b5:d5:6e:28:2e:c5:39:e4:d3:3a:42:4c:f4:21:b6:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D
        Validity
            Not Before: Apr  3 20:19:08 2024 GMT
            Not After : Apr  2 20:24:08 2025 GMT
        Subject: CN=35645D32C7D0A9A774E9DA591D8A690699629E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:fe:2d:ef:f7:41:5b:55:4c:2b:48:97:94:
                    4c:37:10:62:31:81:b6:32:46:67:75:86:b5:bc:43:
                    e0:49:f8:06:3a:7a:4c:95:11:a6:b8:70:ab:a6:ec:
                    ef:1b:89:f3:37:58:bc:56:a0:07:75:c7:a2:f1:d2:
                    1d:23:8b:ff:fb:8a:8c:0a:82:1f:af:00:c4:06:ab:
                    82:f0:49:89:c5:3a:35:f0:b8:82:7d:fc:41:3a:22:
                    94:82:02:a7:68:f3:d3:84:1d:4a:68:54:b0:84:b6:
                    5e:64:e8:f0:6d:8d:09:34:dc:6a:2d:80:45:84:72:
                    40:ca:6a:30:99:ce:d1:58:7d:35:d2:d7:b5:dd:63:
                    00:78:fe:03:32:b3:59:88:52:2c:9d:56:08:42:46:
                    0e:2b:93:a8:ee:cb:3a:3e:33:dc:35:03:43:0a:96:
                    ca:16:5f:cf:00:59:89:6a:b1:47:c5:d4:ba:ad:13:
                    d0:db:41:1b:41:e8:18:2c:d4:68:9b:8f:63:ec:31:
                    80:b9:5f:54:44:0f:60:78:21:80:0c:00:b0:9c:b1:
                    d4:42:94:b3:cc:e8:fe:e4:14:1f:44:f9:0e:3f:11:
                    9a:5d:3d:60:6e:2d:84:17:61:58:d2:d4:2b:3f:87:
                    7e:2b:74:d5:b4:80:cd:88:e6:6d:69:c4:b8:de:34:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:64:5D:32:C7:D0:A9:A7:74:E9:DA:59:1D:8A:69:06:99:62:9E:0A
            X509v3 Authority Key Identifier:
                keyid:DC:E5:95:51:AB:4F:B4:A6:7B:6C:AF:5A:C4:75:5F:89:D4:5A:FB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE59551AB4FB4A67B6CAF5AC4755F89D45AFB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/1/323830343a316361303a666630313a3a2f34382d3438203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ca0:ff01::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:4c:01:f4:52:42:83:92:71:10:d7:8f:46:cf:62:df:b0:42:
         6a:0d:d0:c3:85:df:f0:5d:90:84:b7:f0:11:8c:e2:e7:eb:49:
         1a:a3:0e:b7:cf:10:67:a4:64:53:45:83:f3:f4:6e:1d:e9:df:
         6d:df:c1:6d:07:cd:4a:2f:78:ba:2b:09:8b:19:aa:08:57:35:
         e3:e9:1b:30:2b:e0:cd:4b:7b:f2:63:2a:80:a3:40:b4:15:8a:
         3b:51:cd:12:00:c4:cc:0b:b8:ac:3d:00:ca:38:7a:2d:4c:16:
         79:16:94:26:88:80:9d:3c:32:9b:50:32:79:34:2d:bb:4f:b2:
         16:f6:9e:e6:4a:1a:71:af:94:98:6d:69:0d:18:3e:e4:a5:57:
         9e:06:e8:c8:3d:fb:4b:a4:e8:25:a9:fe:76:cf:be:9b:65:c3:
         96:5f:9c:d9:34:c7:d3:91:d1:ed:bc:0a:57:ff:13:95:9e:88:
         45:df:e1:5d:5b:4e:04:fb:7c:4b:88:38:f2:8c:f1:f0:fb:9e:
         d9:02:ea:91:e6:b4:03:c1:00:ba:64:de:21:4c:07:22:2e:47:
         2b:cc:f3:38:88:b6:f8:fd:36:3b:ce:17:b3:9d:e7:fa:6f:c8:
         e8:2f:66:fd:67:51:a6:84:a7:04:b6:8a:6e:20:06:9d:4d:eb:
         f7:83:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org