Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa
File:                     323830343a383863343a3a2f33322d3332203d3e20323732373932.roa (raw, json)
Hash identifier:          LT5ieo4XVfHGIw7WttlT2qEJDE7/NK2InbYsvcAYtsw=
Subject key identifier:   9C:C2:0B:40:F4:86:4D:4D:89:07:D7:F4:04:37:A7:E4:A3:41:F5:34
Certificate issuer:       /CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
Certificate serial:       14507388B49745092DEE97430CC0EC1837658FCE
Authority key identifier: 28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa
Signing time:             Thu 04 Apr 2024 21:55:36 +0000
ROA not before:           Thu 04 Apr 2024 21:50:36 +0000
ROA not after:            Thu 03 Apr 2025 21:55:36 +0000
asID:                     272792
IP address blocks:        2804:88c4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl
                          rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:50:73:88:b4:97:45:09:2d:ee:97:43:0c:c0:ec:18:37:65:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9
        Validity
            Not Before: Apr  4 21:50:36 2024 GMT
            Not After : Apr  3 21:55:36 2025 GMT
        Subject: CN=9CC20B40F4864D4D8907D7F40437A7E4A341F534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fb:64:2c:41:37:d5:cc:64:40:a8:47:93:83:
                    75:ca:88:56:0d:88:48:bf:0c:c4:fa:e1:31:bb:62:
                    34:17:76:0b:89:42:33:0e:b1:32:25:41:d4:96:5c:
                    35:80:70:6b:07:f5:41:5b:b1:45:44:64:ab:ac:ec:
                    80:97:57:ea:74:28:96:d2:3e:dd:15:2b:7f:4e:be:
                    8d:c4:51:53:37:5c:39:31:2d:b6:9e:e5:71:0f:69:
                    b6:2f:83:47:c0:82:c7:90:c6:9a:ca:c4:4c:0c:fa:
                    1f:b4:e9:65:37:bd:5f:74:22:2c:98:a1:e7:9b:c4:
                    55:a3:17:27:97:5e:86:96:a7:a2:48:15:48:b1:44:
                    57:6a:b5:69:cf:6b:aa:1c:fd:3e:ad:8f:9b:98:f9:
                    1d:6f:98:cb:52:db:60:3d:99:ae:b5:f1:57:6e:67:
                    4f:64:05:ea:e5:d5:85:7f:93:d8:35:9b:e3:05:53:
                    da:42:80:ff:fe:33:93:66:55:ce:20:cb:03:af:e0:
                    a6:20:a2:51:a4:c3:1c:35:1f:c0:fa:a7:b0:af:b8:
                    fc:a6:64:76:f7:30:34:47:73:99:1e:0b:f0:cb:9b:
                    44:ee:83:66:e1:5f:ec:b2:61:65:52:ba:ba:7b:93:
                    ba:7e:c6:34:31:53:ce:fc:d6:30:50:f2:df:9a:57:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C2:0B:40:F4:86:4D:4D:89:07:D7:F4:04:37:A7:E4:A3:41:F5:34
            X509v3 Authority Key Identifier:
                keyid:28:00:AF:8E:67:2F:64:E0:2C:EC:5D:04:7E:DE:B2:AD:86:B4:7E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2800AF8E672F64E02CEC5D047EDEB2AD86B47ED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/1/323830343a383863343a3a2f33322d3332203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:35:4e:7a:c6:8e:98:36:b8:27:32:e3:dd:7a:8d:a5:4d:58:
         79:78:5f:fc:2b:5f:9f:8a:6b:9c:a8:9b:28:20:98:2e:fe:36:
         0d:da:c5:7f:94:e0:79:bf:67:59:14:b6:f1:64:1c:2a:58:5a:
         7a:6d:01:89:2d:74:c8:2f:08:6e:7e:2e:86:a3:4e:b6:a2:19:
         d7:5c:a5:83:8c:87:9d:38:e8:51:e6:97:1b:43:fb:59:2e:38:
         1d:a3:c4:05:86:13:f6:bb:cf:66:b3:19:3d:27:f2:cd:fe:bb:
         8e:5d:b9:34:86:80:95:02:c6:93:eb:2e:2c:88:a4:5d:77:6d:
         68:e3:0c:92:ae:b3:81:bd:ab:f9:6b:c1:e6:3d:27:a8:4e:f5:
         55:05:2f:fc:08:ba:00:69:a9:9e:d0:0c:c4:b9:4b:11:15:e2:
         ed:db:51:be:94:de:de:ce:4d:86:71:56:25:15:bd:f7:65:1b:
         9b:f8:40:d0:ae:f5:52:39:69:46:ae:fb:a6:93:05:7c:ec:e6:
         34:be:71:38:41:f2:41:4d:81:39:3f:ff:15:60:b9:d4:76:9c:
         2d:82:c3:d0:ae:9a:af:31:e2:2c:95:0c:e4:24:cf:f3:bb:97:
         1e:48:91:0b:a6:0b:3d:6b:0d:1e:f9:44:0b:43:cb:c3:96:f7:
         b6:ad:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:16 2024 by rpki-client on console-ams.rpki-client.org