Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
File:                     323830343a353830383a3a2f33322d3332203d3e20323638313031.roa (raw, json)
Hash identifier:          xkQTk72N6v6foo/DYmWBDZeyMQf5FIEWUJGCLOV3nQE=
Subject key identifier:   59:92:91:6B:71:7C:C4:9D:33:13:79:02:0F:83:E6:A9:A9:3B:D0:46
Certificate issuer:       /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial:       67936EBC90899458070D4A9BC00831FEE2AF74B4
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
Signing time:             Wed 03 Apr 2024 18:32:05 +0000
ROA not before:           Wed 03 Apr 2024 18:27:05 +0000
ROA not after:            Wed 02 Apr 2025 18:32:05 +0000
asID:                     268101
IP address blocks:        2804:5808::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
                          rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:6e:bc:90:89:94:58:07:0d:4a:9b:c0:08:31:fe:e2:af:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
        Validity
            Not Before: Apr  3 18:27:05 2024 GMT
            Not After : Apr  2 18:32:05 2025 GMT
        Subject: CN=5992916B717CC49D331379020F83E6A9A93BD046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:2f:ad:99:ea:43:2c:9b:76:17:fb:86:f1:
                    6c:a4:62:0f:68:3c:85:4f:60:69:6c:cf:ea:f1:c6:
                    68:db:87:67:ec:51:32:18:18:6f:23:db:84:97:06:
                    7e:65:8c:69:28:de:50:72:1b:19:15:5e:fa:31:fd:
                    f1:8e:51:a0:1d:b0:df:77:a1:8e:3d:04:87:fc:d0:
                    8f:dc:3e:0f:79:97:fd:fd:58:16:a6:87:5c:ea:e7:
                    47:b1:07:61:46:a2:0e:cc:fb:ed:76:4e:9b:ff:77:
                    0c:78:93:dd:8a:26:e4:28:f5:55:e3:59:d8:d2:86:
                    6f:b8:18:2d:ba:d1:9d:48:75:56:cd:07:6b:cb:9b:
                    9a:7d:3f:c0:d7:a3:1e:c3:48:d9:59:09:69:70:d7:
                    13:44:3b:98:a1:1d:84:dc:46:d7:e3:67:ad:af:16:
                    65:58:08:c6:bc:44:8a:c8:50:9b:12:5f:7e:92:e3:
                    80:cc:8d:c7:0b:9d:b7:39:bc:49:cc:1d:b9:33:a6:
                    f4:b2:c4:4e:46:28:13:da:21:04:54:eb:04:85:7c:
                    05:6d:8c:ff:bc:92:9a:ec:7d:cf:d6:16:45:63:62:
                    6f:0e:bd:fa:06:c3:5a:bb:a1:64:86:2c:89:cb:06:
                    45:68:e8:a9:bd:b6:d2:87:c4:15:0f:b1:43:74:89:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:92:91:6B:71:7C:C4:9D:33:13:79:02:0F:83:E6:A9:A9:3B:D0:46
            X509v3 Authority Key Identifier:
                keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5808::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:1f:3f:c4:c9:d9:9b:c2:d4:d8:d5:2c:25:6f:b5:1c:8d:32:
         b1:02:8c:cf:0f:d4:32:77:97:4f:e3:5f:2d:10:5d:fe:89:9b:
         25:a0:88:f1:c5:1a:dd:fa:ca:0e:54:4a:74:35:26:36:66:bc:
         e2:05:29:ed:55:c0:13:46:70:db:9d:d3:62:bf:5c:8b:2e:56:
         ce:08:5b:61:78:87:ee:8d:3d:b9:44:0c:b6:0f:76:b9:0c:55:
         2b:bd:f6:99:6e:0a:6c:c7:c9:f5:c8:c1:54:0c:f5:97:e4:cc:
         d2:e4:70:62:cf:27:04:78:d3:c0:74:47:a5:19:53:8f:ea:47:
         3d:af:6d:11:0b:26:a3:25:76:6f:37:b4:b2:60:24:5c:25:f1:
         bb:f6:cf:2d:40:96:8f:22:fb:90:82:cb:fa:1f:0b:e5:57:b6:
         95:b1:11:27:43:bb:59:1c:a5:7f:66:12:05:d8:d9:7c:f3:8a:
         5c:1c:d4:95:7f:3e:f4:a3:2a:44:7b:8e:8d:78:b4:4c:a9:61:
         1d:10:08:02:bf:c6:fd:6d:36:25:dd:f4:a9:1e:c4:48:00:9a:
         49:c7:24:94:c6:55:00:4c:c1:d9:26:db:6c:4e:0a:85:95:31:
         65:af:43:a5:73:f4:22:b3:b4:29:a1:6f:97:11:cf:1c:54:72:
         30:c1:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org