Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa
File:                     323830343a333362303a3a2f33322d3438203d3e203532363632.roa (raw, json)
Hash identifier:          dKRcdpYQwGN4g/8SNRrmTcSy423QAHcOYImLbXn+XO4=
Subject key identifier:   B2:A7:9B:B4:78:F8:A1:1E:2E:5B:75:D2:4B:E2:96:3A:03:C6:D4:0D
Certificate issuer:       /CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
Certificate serial:       36238C604189B6DEB4D56CE8EEB45EE4F03194F0
Authority key identifier: C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa
Signing time:             Thu 01 Aug 2024 17:26:38 +0000
ROA not before:           Thu 01 Aug 2024 17:21:38 +0000
ROA not after:            Thu 31 Jul 2025 17:26:38 +0000
asID:                     52662
IP address blocks:        2804:33b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:23:8c:60:41:89:b6:de:b4:d5:6c:e8:ee:b4:5e:e4:f0:31:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7
        Validity
            Not Before: Aug  1 17:21:38 2024 GMT
            Not After : Jul 31 17:26:38 2025 GMT
        Subject: CN=B2A79BB478F8A11E2E5B75D24BE2963A03C6D40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:b1:c1:e7:9c:0a:a4:f1:fe:c7:4f:09:b3:
                    c9:6f:60:1f:60:47:d1:65:6b:6b:c3:37:18:f5:f3:
                    47:ee:56:3c:15:11:ab:e9:9e:1e:53:5f:78:9c:75:
                    de:4c:9d:cf:f9:83:82:90:c5:90:62:06:46:bb:de:
                    3f:a5:6b:ea:46:63:5e:a9:f5:ea:fc:01:60:e1:bc:
                    74:ec:41:7b:3b:f1:23:73:ea:a9:ba:b7:f9:9b:4c:
                    32:39:6d:a9:bf:89:88:b3:36:04:6e:9f:ec:5c:df:
                    79:b8:f2:f0:75:7e:99:63:e9:ce:7c:7c:e5:62:21:
                    ff:d5:38:4c:5a:db:2d:d0:0c:4d:04:b2:81:c5:2e:
                    41:06:bd:de:67:30:75:8e:37:dc:90:39:a9:0d:f4:
                    fb:e5:f1:fa:38:04:ea:ce:68:49:9f:48:a0:f5:53:
                    b1:83:58:f1:70:c6:21:54:ec:7f:8b:1e:2d:43:ab:
                    f9:e4:f2:25:2b:d8:3e:94:1a:21:43:2c:48:22:32:
                    d4:c7:0b:31:b2:43:91:ca:3f:76:3a:db:f9:ea:08:
                    b5:70:ef:98:a8:36:5b:27:e2:f6:4e:7c:94:05:c3:
                    21:f7:f1:1c:d7:ab:00:dd:87:2c:72:ad:d4:88:45:
                    6f:ac:cd:3f:d0:81:03:41:50:73:15:9e:63:e5:89:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A7:9B:B4:78:F8:A1:1E:2E:5B:75:D2:4B:E2:96:3A:03:C6:D4:0D
            X509v3 Authority Key Identifier:
                keyid:C5:C2:95:E6:A5:83:EE:5A:FE:D6:88:BF:67:FB:5D:62:DC:E1:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5C295E6A583EE5AFED688BF67FB5D62DCE16FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/323830343a333362303a3a2f33322d3438203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:07:5e:1c:72:15:6e:4b:52:8e:b8:62:04:24:49:25:dc:93:
         3a:8a:30:e7:fa:e2:f9:bc:42:79:26:66:1a:05:41:11:14:ce:
         27:ed:2c:58:fa:1d:c3:bf:96:07:70:40:0c:0f:e8:ca:84:1f:
         ed:a1:28:55:92:c7:ca:19:d6:92:a0:5b:c0:20:5f:b8:bd:cd:
         5b:07:e8:d4:d9:a0:cb:c8:e1:01:95:e4:5c:a5:cc:ca:f7:59:
         00:29:86:66:5f:8b:d8:8b:59:c0:25:4d:75:8d:36:6b:6d:dc:
         6f:2b:38:86:df:56:ee:7a:1f:cd:fc:79:2b:36:d5:8c:51:08:
         f2:61:93:23:f6:6b:32:44:17:e9:99:e5:dc:f2:f4:84:20:d6:
         f4:3e:52:5a:6a:0f:35:11:0d:b7:f8:73:98:8c:ba:6f:18:30:
         b6:db:5f:35:85:2c:e4:0b:ec:db:31:ca:b4:e5:0b:ae:5a:14:
         5a:73:02:c5:96:26:58:ba:9f:c6:b4:2a:fb:bc:63:98:73:e7:
         ac:62:73:2a:14:62:85:ca:1a:fa:53:73:b6:52:be:41:2e:3d:
         4b:39:4f:50:f9:41:8a:bc:8f:80:4c:86:44:c6:f4:54:e5:50:
         75:4c:58:a2:bd:0f:59:5e:4a:c6:0a:58:a5:bb:6c:48:be:76:
         3f:5e:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org