Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
File:                     323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa (raw, json)
Hash identifier:          Wf5JNPeD7I8lro7Jc29PgIZB0LjFw1J43N/vgGX8I8s=
Subject key identifier:   30:C8:D9:50:57:95:4D:75:06:80:58:DA:5A:08:7F:2E:11:8D:AF:DF
Certificate issuer:       /CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
Certificate serial:       48675EE32CD2BE3D3E759F1D288BAA3B5C61F841
Authority key identifier: DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     269074
IP address blocks:        2804:5f10:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl
                          rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:67:5e:e3:2c:d2:be:3d:3e:75:9f:1d:28:8b:aa:3b:5c:61:f8:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEB3E64BDD427B030E2E130619A5C32699317FA8
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100BC3CE79384972AB9A966CA8392BF8C182A22AC5788F3DECA5CF92266F235A5B486B0D7DE1773405E9B5C388DF9097911BF619C5524DDD13C92E7E32F85E57541AA766B36C45104219D833CAE661DCDFF6B849FC9B15B12AF7528B871501DF9F3438FF93E14450448B7CF57C71C64437D66BF6AD3E86CC2591C5DEB7BB88049A2D2B8E6C385BAC2709262AA9280BF3A36E13A7BCDAE99E91A46B24E02192C4DAB2EA33B172119C448E714DDE4A80E4F9AD70C10B6187873EEF546F94D433A944DC4EA174E997FAF74348D5602C7C750610974B9D1FBB001C9BFC1388FB01C64F003304A2C98B8CEAD25C1FAF5C99CA41AB73A16056E05AA598B08C5847A4C63AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3c:e7:93:84:97:2a:b9:a9:66:ca:83:92:bf:
                    8c:18:2a:22:ac:57:88:f3:de:ca:5c:f9:22:66:f2:
                    35:a5:b4:86:b0:d7:de:17:73:40:5e:9b:5c:38:8d:
                    f9:09:79:11:bf:61:9c:55:24:dd:d1:3c:92:e7:e3:
                    2f:85:e5:75:41:aa:76:6b:36:c4:51:04:21:9d:83:
                    3c:ae:66:1d:cd:ff:6b:84:9f:c9:b1:5b:12:af:75:
                    28:b8:71:50:1d:f9:f3:43:8f:f9:3e:14:45:04:48:
                    b7:cf:57:c7:1c:64:43:7d:66:bf:6a:d3:e8:6c:c2:
                    59:1c:5d:eb:7b:b8:80:49:a2:d2:b8:e6:c3:85:ba:
                    c2:70:92:62:aa:92:80:bf:3a:36:e1:3a:7b:cd:ae:
                    99:e9:1a:46:b2:4e:02:19:2c:4d:ab:2e:a3:3b:17:
                    21:19:c4:48:e7:14:dd:e4:a8:0e:4f:9a:d7:0c:10:
                    b6:18:78:73:ee:f5:46:f9:4d:43:3a:94:4d:c4:ea:
                    17:4e:99:7f:af:74:34:8d:56:02:c7:c7:50:61:09:
                    74:b9:d1:fb:b0:01:c9:bf:c1:38:8f:b0:1c:64:f0:
                    03:30:4a:2c:98:b8:ce:ad:25:c1:fa:f5:c9:9c:a4:
                    1a:b7:3a:16:05:6e:05:aa:59:8b:08:c5:84:7a:4c:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:D9:50:57:95:4D:75:06:80:58:DA:5A:08:7F:2E:11:8D:AF:DF
            X509v3 Authority Key Identifier:
                keyid:DE:B3:E6:4B:DD:42:7B:03:0E:2E:13:06:19:A5:C3:26:99:31:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEB3E64BDD427B030E2E130619A5C32699317FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/1/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:09:30:77:e7:bf:40:52:93:84:e4:36:25:42:07:a5:84:dd:
         9c:2a:65:34:91:83:e7:48:c4:a4:00:ae:0b:c0:33:0e:ce:d4:
         bc:41:c2:4a:b7:4b:d6:c9:43:99:dd:b2:6a:a7:10:fe:e4:96:
         fb:53:d8:08:d1:f4:69:1a:01:5d:23:5e:61:60:98:a0:77:d8:
         23:82:b3:65:58:be:45:dc:0b:7a:92:46:19:79:33:89:32:b2:
         ce:28:b5:5a:90:2c:81:5b:4b:9f:eb:14:69:22:16:1e:d7:f2:
         a3:4d:4f:f1:24:bb:3e:27:8b:cd:50:6c:bb:7a:2f:ca:ac:47:
         ad:53:52:3d:c6:90:b3:10:09:c7:19:30:85:bb:9e:31:de:9b:
         4a:e1:8b:1d:92:e7:52:40:ca:58:84:6d:70:6f:fe:cb:64:53:
         75:69:08:6e:c5:cd:0e:f2:dc:a3:54:98:3f:05:f5:21:cb:05:
         da:04:d1:9d:07:01:79:07:5f:db:9a:6d:2a:d4:f6:0b:47:fc:
         fd:1c:f3:43:79:76:98:e9:96:64:c7:ca:e4:0a:1f:c2:2c:25:
         46:c7:12:56:c3:ed:39:19:41:32:2d:40:e6:6f:c0:f5:df:c9:
         9f:6d:73:d6:2f:18:f6:99:15:75:5a:63:0f:f0:95:da:38:f2:
         a9:65:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:37 2024 by rpki-client on console-ams.rpki-client.org