Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa
File:                     323830343a313037303a3a2f33322d3438203d3e203238323039.roa (raw, json)
Hash identifier:          dtCcPG3/k6O365vu7XT+NizepZXwtWXxuoLt7cRCaEA=
Subject key identifier:   81:0B:DB:17:03:BE:20:8F:0F:11:8E:E1:6B:4F:B7:36:4C:66:F9:88
Certificate issuer:       /CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
Certificate serial:       6B035D431ECA47E1E686CD4CA01166EF7AA215E2
Authority key identifier: 5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa
Signing time:             Fri 11 Oct 2024 20:33:09 +0000
ROA not before:           Fri 11 Oct 2024 20:28:09 +0000
ROA not after:            Fri 10 Oct 2025 20:33:09 +0000
asID:                     28209
IP address blocks:        2804:1070::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl
                          rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:03:5d:43:1e:ca:47:e1:e6:86:cd:4c:a0:11:66:ef:7a:a2:15:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D9682CFAC3878AC534AF7900583447A4423AF5E
        Validity
            Not Before: Oct 11 20:28:09 2024 GMT
            Not After : Oct 10 20:33:09 2025 GMT
        Subject: CN=810BDB1703BE208F0F118EE16B4FB7364C66F988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:2e:ce:1a:a8:fa:13:38:20:43:da:97:0c:
                    d5:50:00:d0:f1:71:9a:f4:14:40:48:da:a3:8b:e8:
                    e0:a4:13:e1:d5:d8:1e:2a:6d:e3:84:90:d2:e7:de:
                    1d:ed:82:2b:cf:20:cd:2f:fe:3f:b6:7f:2d:09:57:
                    70:fd:9a:9b:49:c0:8f:d6:e6:49:0c:6e:10:87:f8:
                    05:ec:f9:46:7f:bc:9f:14:ee:cd:1d:78:2f:41:5c:
                    1b:19:d2:93:66:91:a5:e0:e6:0d:9f:be:f2:1f:00:
                    7c:15:01:34:b5:6e:f1:ec:8e:97:e7:69:5d:96:f0:
                    f3:38:09:8e:48:dd:b8:ca:aa:09:e8:df:f0:44:44:
                    bc:c4:3f:d3:c9:98:42:a7:17:6d:00:07:e7:db:82:
                    6b:e7:38:39:fd:81:66:06:fd:3c:5c:08:8b:b0:ce:
                    01:f9:a5:27:21:a9:00:54:b9:6e:f8:11:87:be:b3:
                    4d:5d:ad:52:1a:c0:45:44:25:be:f5:50:b6:e3:68:
                    29:8c:43:69:32:ce:39:fe:ae:ef:52:7f:ae:d8:98:
                    c6:1d:79:34:13:df:80:77:37:5f:22:36:93:a3:de:
                    68:7e:21:98:53:42:6b:57:31:60:5a:d6:90:0a:58:
                    9a:45:5c:d8:3f:4a:af:f2:89:4f:ab:86:43:dc:16:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:DB:17:03:BE:20:8F:0F:11:8E:E1:6B:4F:B7:36:4C:66:F9:88
            X509v3 Authority Key Identifier:
                keyid:5D:96:82:CF:AC:38:78:AC:53:4A:F7:90:05:83:44:7A:44:23:AF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/5D9682CFAC3878AC534AF7900583447A4423AF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D9682CFAC3878AC534AF7900583447A4423AF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PAFXyDbchE3SxFgWDhynZrDEivn4P8AJ5dWHf5YRUvJ/0/323830343a313037303a3a2f33322d3438203d3e203238323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1070::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:37:d0:41:9d:98:98:57:a8:6b:03:d6:03:ac:54:43:4a:37:
         4a:96:c1:7e:55:25:6d:48:af:6f:71:41:ed:ab:3c:02:3c:1f:
         f6:ea:4e:20:1d:a7:e5:93:79:78:d0:22:e0:5c:db:af:6d:6b:
         53:e1:26:90:41:3d:a9:2a:b7:7d:e7:b1:40:74:05:df:4b:2c:
         d2:5a:5c:b0:d3:48:26:f6:8d:3a:99:19:85:79:0f:76:48:c5:
         64:c0:f9:d2:10:9d:98:6b:37:e4:7f:a5:21:fd:0c:8f:d1:88:
         95:97:8f:8e:c9:0a:77:fe:9f:ca:64:41:18:a4:81:24:00:51:
         71:f0:58:7b:c8:eb:0d:15:c9:1b:58:90:01:08:93:ee:b4:db:
         8b:d5:ef:8a:e2:1d:bc:c0:ae:96:2e:90:32:8c:ca:e2:0d:63:
         d3:b9:97:38:eb:da:ea:68:93:d6:62:6c:6b:f8:c2:12:2c:65:
         36:40:4d:9b:48:9e:39:51:0c:6d:fd:24:c2:9c:02:a7:d4:a4:
         ad:4e:69:0e:df:bd:e6:e2:b7:d4:6b:57:c4:1f:a2:29:da:e5:
         8a:d0:b8:3e:4f:49:ed:2d:31:3b:69:0c:cb:91:54:ec:c1:d3:
         17:57:e1:63:74:7a:45:bb:cb:75:51:e4:a1:2d:46:83:7f:61:
         fa:52:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:06 2024 by rpki-client on console-ams.rpki-client.org