Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa
File:                     323830343a313433343a3a2f33322d3438203d3e20323632343932.roa (raw, json)
Hash identifier:          G6qLuJlw6AF3N8nTpHQneDi6hSvc6SNjRvPM2+CvDHY=
Subject key identifier:   62:8E:10:F9:82:87:E7:E5:DD:04:34:E6:C9:FD:34:11:C5:33:DD:67
Certificate issuer:       /CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
Certificate serial:       2BF8C1FEAD9F4E1B8C3D27BCA0B7A50C5AFF92BD
Authority key identifier: 13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa
Signing time:             Thu 04 Apr 2024 03:00:54 +0000
ROA not before:           Thu 04 Apr 2024 02:55:54 +0000
ROA not after:            Thu 03 Apr 2025 03:00:54 +0000
asID:                     262492
IP address blocks:        2804:1434::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl
                          rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f8:c1:fe:ad:9f:4e:1b:8c:3d:27:bc:a0:b7:a5:0c:5a:ff:92:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE
        Validity
            Not Before: Apr  4 02:55:54 2024 GMT
            Not After : Apr  3 03:00:54 2025 GMT
        Subject: CN=628E10F98287E7E5DD0434E6C9FD3411C533DD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:98:aa:01:35:b3:fe:9a:5c:50:5b:80:35:
                    98:eb:75:31:35:24:2a:2e:59:a0:ec:18:8b:0a:04:
                    7d:c6:b4:ee:1c:94:2d:23:be:07:4a:87:59:79:42:
                    6c:65:e6:cd:40:58:6f:ea:4b:4f:75:ae:98:22:c1:
                    23:e3:33:a4:08:89:db:e8:6c:2d:3f:56:e0:0d:32:
                    96:0d:d0:e3:97:c4:fc:60:d7:e1:96:f4:01:a8:ce:
                    86:89:32:fa:13:33:d0:1f:ff:c3:09:62:de:9a:34:
                    75:ba:7a:ca:07:d1:78:df:df:c8:92:28:81:f9:14:
                    47:0f:44:81:e1:a5:51:67:29:c7:5f:0e:4d:8b:3a:
                    54:0c:c2:99:55:f8:dc:8c:81:6b:46:38:b2:13:ba:
                    9f:e3:df:c6:b8:db:bf:2e:09:e9:9a:a2:20:9c:4c:
                    0f:96:a0:cc:59:27:d0:57:39:12:e9:c0:41:86:bb:
                    c8:9f:d7:a5:44:5e:e7:3a:47:43:a4:0a:ab:4a:f4:
                    d4:88:fc:ef:55:ef:30:07:b1:0e:1c:1f:2e:2f:ff:
                    af:f5:62:1f:4e:2d:5e:e2:6a:6e:82:5f:e3:ca:98:
                    9a:8a:5a:7b:de:6c:a9:b4:7f:7a:88:b2:c5:65:89:
                    a0:ec:ae:cf:c0:1a:5a:3e:b4:c6:a7:d1:5c:ea:5f:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8E:10:F9:82:87:E7:E5:DD:04:34:E6:C9:FD:34:11:C5:33:DD:67
            X509v3 Authority Key Identifier:
                keyid:13:A7:F6:C1:A7:DF:9B:0A:1A:93:E5:01:C5:79:1D:83:5F:C2:61:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A7F6C1A7DF9B0A1A93E501C5791D835FC261EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/1/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1434::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:ff:e8:20:4b:76:92:be:93:1d:ea:99:64:71:84:6d:d0:b1:
         94:b4:8a:6d:94:ca:53:6a:8f:aa:18:55:bf:af:86:03:22:8d:
         77:54:71:1a:2d:c0:e8:eb:db:b6:2b:7e:f6:fd:48:63:07:be:
         e7:3e:f4:9d:ff:26:76:be:40:a9:70:26:e2:db:03:13:6e:db:
         91:8a:40:a4:ab:34:e7:64:25:d3:b9:54:4f:12:ff:a8:42:75:
         60:86:bd:bf:2c:33:a3:2b:e5:fe:ab:90:a8:58:71:d3:44:a2:
         3d:2c:cf:83:33:84:29:88:53:3d:b2:33:5a:00:cc:17:ed:67:
         52:e1:c2:b4:fd:1b:67:d5:3e:fd:89:79:50:85:78:1e:70:cf:
         8d:a9:5f:f3:2b:ab:02:c6:88:d9:29:ce:20:c5:1f:9a:4d:a6:
         82:ef:a5:4d:20:88:40:74:39:e3:7a:75:28:6f:f8:5a:69:63:
         dd:0f:8e:3f:38:4e:f8:85:87:8c:39:8c:8f:75:5d:47:73:fa:
         77:97:24:d1:b2:fe:c8:48:33:77:30:46:0b:e4:7e:4c:80:b4:
         84:a8:09:a5:8a:64:dd:63:31:12:8a:a0:60:ec:ec:01:a2:ee:
         35:00:1f:e6:e6:cd:da:25:59:97:93:dd:1f:3b:41:c2:fa:cc:
         3d:66:e2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:03 2024 by rpki-client on console-fra.rpki-client.org