Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
File:                     323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (raw, json)
Hash identifier:          5/SeLsQbAalt+QeFWW5Qe4AZLWnDJTGmHcwtGx062I0=
Subject key identifier:   62:92:E7:B5:F5:74:A7:5C:82:B8:D2:AA:E8:42:45:2C:82:43:96:9B
Certificate issuer:       /CN=85338CFAF888C0350AE9CB844AEBC476C4367656
Certificate serial:       026A4C886C422EACA319C5902E1A3305922F6E05
Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
Signing time:             Tue 23 Jul 2024 14:33:50 +0000
ROA not before:           Tue 23 Jul 2024 14:28:50 +0000
ROA not after:            Tue 22 Jul 2025 14:33:50 +0000
asID:                     269056
IP address blocks:        2804:5ec8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6a:4c:88:6c:42:2e:ac:a3:19:c5:90:2e:1a:33:05:92:2f:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656
        Validity
            Not Before: Jul 23 14:28:50 2024 GMT
            Not After : Jul 22 14:33:50 2025 GMT
        Subject: CN=6292E7B5F574A75C82B8D2AAE842452C8243969B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a7:43:7c:99:2e:12:0f:7e:18:37:6f:66:be:
                    3d:27:09:aa:9e:56:31:75:2b:58:a5:0f:c0:75:47:
                    26:f8:27:8f:96:85:b9:8a:5b:44:93:16:e5:74:92:
                    9c:69:48:ef:5f:7f:4a:30:d5:31:d0:bc:a9:04:c9:
                    26:91:1a:1e:e2:0d:7f:55:8e:b9:4e:ae:4d:31:47:
                    6c:c1:f7:17:63:8f:9f:5d:c5:86:e9:37:5d:ec:c1:
                    99:7c:07:80:7d:54:e9:de:10:d3:ca:9e:b0:3f:78:
                    4c:fe:c1:c4:60:b5:c9:e0:3e:36:99:af:a0:a5:04:
                    2b:73:49:20:58:a1:bf:04:e5:23:0e:5a:20:e3:ce:
                    40:bf:f4:43:70:3e:aa:91:df:aa:8b:c1:0c:df:f5:
                    d4:47:9e:dd:2c:8a:1f:bd:34:c5:5f:45:18:f3:8e:
                    de:b3:90:0b:fd:f5:50:14:9b:05:cd:e5:9b:7f:34:
                    56:f6:d4:b9:82:58:78:cf:6a:7d:48:68:50:23:56:
                    aa:c0:27:2e:de:9e:ad:4e:2a:f2:b3:2b:45:92:0e:
                    ae:94:81:67:0e:d6:d5:ad:6d:d1:df:bf:8a:8f:1d:
                    fb:b1:aa:33:21:e4:b8:76:01:d0:62:e2:80:49:08:
                    e0:55:43:9e:b6:49:23:e4:ff:0a:d2:00:9f:e0:fe:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:E7:B5:F5:74:A7:5C:82:B8:D2:AA:E8:42:45:2C:82:43:96:9B
            X509v3 Authority Key Identifier:
                keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:d6:c8:a8:e3:aa:71:4b:68:07:d2:49:b1:03:17:4e:f5:63:
         7f:14:50:c4:9a:5d:38:fb:46:3f:0e:2a:d6:39:39:a5:e8:73:
         ca:8d:c5:9e:d7:17:e8:0d:d9:d1:e3:15:b5:5b:53:1f:62:c4:
         af:04:02:3e:b4:82:9b:72:e5:1e:97:90:5b:64:b5:ac:b5:42:
         80:d2:1a:8e:1e:82:57:87:4f:d6:f7:58:14:15:07:5c:92:ad:
         33:6f:66:dc:d7:51:7e:fa:31:27:a3:bb:49:20:85:57:6f:79:
         62:d0:6b:48:b3:69:b8:a2:37:c6:2f:a9:21:33:19:c3:06:4e:
         72:72:55:2a:c3:30:57:aa:2f:73:88:67:67:69:0f:30:c7:52:
         cd:b4:e7:78:b7:c9:9c:b6:1c:32:4e:ce:ca:f6:4c:24:2a:11:
         07:0e:51:03:9c:3a:6b:39:48:df:47:94:3a:8b:6f:9a:ae:5c:
         97:df:d7:11:80:29:93:3b:24:87:0c:5c:3f:86:08:a0:e8:f1:
         7c:32:89:41:a2:6b:d6:0e:6e:c5:d1:0f:cb:f9:f1:30:96:4e:
         96:6e:b3:17:f9:78:61:3e:c2:2f:4f:3b:d7:ed:90:43:30:d0:
         2a:25:86:ba:67:5a:82:fe:d8:aa:f8:dd:dd:c2:5b:33:67:ae:
         dc:78:c3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:08 2024 by rpki-client on console-fra.rpki-client.org