Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
File:                     323830343a356338383a3a2f33322d3332203d3e20323638393134.roa (raw, json)
Hash identifier:          rwWq32LJIm/qXtwukiELliS2dWjP2bxnTkEBzJEcmgQ=
Subject key identifier:   E5:D9:1A:C6:F6:C9:9B:CB:76:02:E8:EA:1F:F0:8B:62:77:7A:38:BB
Certificate issuer:       /CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
Certificate serial:       4ED00C6B68EBB0D637DF4A12DD4C1DBDD0FC27F9
Authority key identifier: B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa
Signing time:             Wed 03 Apr 2024 20:33:36 +0000
ROA not before:           Wed 03 Apr 2024 20:28:36 +0000
ROA not after:            Wed 02 Apr 2025 20:33:36 +0000
asID:                     268914
IP address blocks:        2804:5c88::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.crl
                          rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d0:0c:6b:68:eb:b0:d6:37:df:4a:12:dd:4c:1d:bd:d0:fc:27:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D6C7836C5FEB5B964A7E5974566454FBAF0867
        Validity
            Not Before: Apr  3 20:28:36 2024 GMT
            Not After : Apr  2 20:33:36 2025 GMT
        Subject: CN=E5D91AC6F6C99BCB7602E8EA1FF08B62777A38BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:29:7c:f8:b1:e1:f4:10:5a:61:bb:5a:f4:
                    6a:f4:92:21:c9:85:f1:10:f9:7e:bf:ce:7c:fc:c7:
                    f4:ea:92:c2:c6:69:2b:c7:6d:60:97:d8:35:92:05:
                    06:27:cb:50:1d:d4:17:82:e0:bd:8e:ca:4c:ed:23:
                    cb:7b:d5:18:7d:79:09:dd:0c:8d:3c:6d:54:b7:1d:
                    a6:a5:11:0f:e4:39:85:58:61:15:6a:24:93:db:d2:
                    5b:e2:66:83:43:24:00:c2:01:96:5e:3d:59:c3:7b:
                    ad:c5:88:16:ea:2f:e2:95:90:59:67:93:30:e2:17:
                    e9:7d:0b:8d:68:3d:56:fa:fc:65:61:16:5b:77:ff:
                    34:b5:a8:ce:1f:0d:8c:dd:84:4d:f1:4b:1e:16:3f:
                    16:63:8c:f6:27:1a:c7:0a:53:7a:e4:89:35:e2:af:
                    e8:7d:61:e1:0b:ff:1e:26:b0:77:09:08:39:7b:ca:
                    00:e8:48:a0:c7:25:bb:11:fb:d1:df:b1:04:91:f1:
                    11:05:fd:33:85:55:ce:d8:a1:53:34:58:60:98:77:
                    60:26:03:44:f1:7e:b1:b1:6c:aa:7c:56:07:44:80:
                    1c:b9:bb:98:a9:4e:80:c0:7d:ee:cf:a7:24:4a:4c:
                    4f:fc:18:34:7d:b7:93:fe:73:12:0b:e0:d8:c0:38:
                    92:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:1A:C6:F6:C9:9B:CB:76:02:E8:EA:1F:F0:8B:62:77:7A:38:BB
            X509v3 Authority Key Identifier:
                keyid:B0:D6:C7:83:6C:5F:EB:5B:96:4A:7E:59:74:56:64:54:FB:AF:08:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0D6C7836C5FEB5B964A7E5974566454FBAF0867.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/2/323830343a356338383a3a2f33322d3332203d3e20323638393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c88::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:a0:53:41:4d:cb:c5:f0:8f:3f:a4:f6:98:e2:11:0f:5e:76:
         46:7b:40:48:e8:6e:67:7c:a5:86:46:9a:45:c3:93:9a:43:21:
         31:66:43:62:d4:fa:6d:49:56:6a:ad:6e:6b:26:6c:21:b7:5a:
         e4:aa:24:ab:0f:ef:55:f2:d9:96:54:18:9c:a1:e3:2a:be:1d:
         53:65:7b:95:06:52:d0:2e:09:69:b9:86:2b:b6:46:cb:b0:c7:
         56:5e:4b:c5:45:14:99:41:83:73:6b:76:4d:a3:3d:85:37:00:
         31:4b:40:c2:7c:75:92:9c:b9:63:7f:65:d4:4e:65:3a:37:1d:
         17:a8:87:c3:72:02:80:b1:a5:08:f0:0c:81:7d:ac:b1:d6:48:
         00:e2:c4:9f:35:7b:ba:c9:11:71:17:8f:a3:29:20:b1:fd:ff:
         dc:d7:01:17:28:08:b8:11:b1:b8:32:6d:d2:56:2e:e1:0b:ad:
         c7:ee:0c:df:31:dc:f4:d7:35:81:03:f0:96:09:3c:36:4b:8b:
         4f:4c:7d:46:1c:e7:d5:03:38:6d:aa:24:ce:58:d2:37:36:39:
         b6:d0:2c:32:9d:30:1f:bc:2a:e0:3d:93:a2:54:79:97:d6:73:
         b7:eb:6b:a8:91:8c:9c:0e:7c:b0:45:bd:c2:4d:83:c5:f5:6e:
         ee:17:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:34 2024 by rpki-client on console-fra.rpki-client.org