Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a3a2f33342d3334203d3e20323638363834.roa
File:                     323830343a353530343a3a2f33342d3334203d3e20323638363834.roa (raw, json)
Hash identifier:          xpFHiMYvR4lXnJj0diQLg6JG69K1R0UpgMQenFIrCII=
Subject key identifier:   72:12:C3:A6:6A:03:6E:3C:92:B1:F4:5F:2E:21:BB:69:86:D2:BC:AA
Certificate issuer:       /CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
Certificate serial:       423A85463885785A28BC272C9A1C210C050D266B
Authority key identifier: 5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a3a2f33342d3334203d3e20323638363834.roa
Signing time:             Sun 02 Jun 2024 15:58:34 +0000
ROA not before:           Sun 02 Jun 2024 15:53:34 +0000
ROA not after:            Sun 01 Jun 2025 15:58:34 +0000
asID:                     268684
IP address blocks:        2804:5504::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3a:85:46:38:85:78:5a:28:bc:27:2c:9a:1c:21:0c:05:0d:26:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Validity
            Not Before: Jun  2 15:53:34 2024 GMT
            Not After : Jun  1 15:58:34 2025 GMT
        Subject: CN=7212C3A66A036E3C92B1F45F2E21BB6986D2BCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:9a:f1:6a:48:d9:d9:58:a3:38:cd:dc:c6:
                    be:b0:f4:b0:71:8d:9e:be:27:53:f8:3b:ff:a7:dd:
                    71:ef:26:fb:d9:07:2f:0c:01:5e:11:75:06:4e:ef:
                    63:3e:74:7d:0c:ab:2a:a4:3c:11:e4:d3:65:81:8a:
                    d7:0c:4f:6b:bd:93:77:a5:b5:4f:51:1a:1c:99:bb:
                    94:30:5c:24:4b:43:7f:f8:86:8e:b2:6d:75:50:56:
                    54:56:8d:63:16:7b:3f:08:75:c0:fb:09:52:e0:42:
                    32:49:9e:6d:77:09:c2:e4:98:9c:41:96:43:ff:53:
                    98:02:51:cd:e7:1a:57:12:77:48:d5:18:a4:5a:58:
                    f8:d9:16:58:48:91:32:c8:b3:3c:48:f7:31:95:08:
                    b7:c3:0e:55:67:2a:08:41:19:43:cd:a2:a3:80:a1:
                    d8:f8:eb:3a:01:49:19:17:a4:49:fe:fe:22:2f:01:
                    08:ff:46:3c:c3:8c:80:c4:a0:46:d5:f9:06:4b:41:
                    e4:5f:87:54:41:1a:72:cb:de:4b:46:02:27:64:2c:
                    c7:22:00:97:56:2f:d5:ea:7c:77:22:81:bd:de:ef:
                    96:05:6f:f3:cb:fb:b5:a3:ab:06:b0:c7:f0:c5:c4:
                    ca:69:02:c7:d0:04:fe:82:16:58:67:1a:df:ae:aa:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:12:C3:A6:6A:03:6E:3C:92:B1:F4:5F:2E:21:BB:69:86:D2:BC:AA
            X509v3 Authority Key Identifier:
                keyid:5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a3a2f33342d3334203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5504::/34

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:1e:0a:45:54:d6:18:da:5f:96:fd:13:4d:99:f1:ba:ad:
         dc:fa:fb:82:f5:48:50:7d:f6:8d:7e:b3:c3:25:51:d1:af:0f:
         55:12:f1:8e:12:80:78:10:c3:bc:df:ff:64:ab:32:92:60:88:
         d3:f8:48:33:eb:46:11:30:c8:28:70:6d:0c:1a:1d:0d:28:db:
         35:29:a0:c5:8b:35:f2:e5:46:0c:5c:32:6c:2c:73:55:2e:35:
         8f:08:9a:96:3a:8d:0c:ac:33:9e:0f:9c:25:6f:e4:ea:7f:fe:
         19:a7:55:fa:a7:da:35:b2:99:b5:d9:70:20:12:0f:c5:27:32:
         48:b3:b9:4b:55:00:0a:e5:20:46:11:81:eb:46:fa:8e:cd:45:
         34:b2:f2:e2:ac:3b:16:10:b3:9e:90:52:42:99:99:e5:5e:05:
         00:91:93:f7:96:b6:15:01:b8:07:5b:94:49:6c:7f:b5:f7:b2:
         85:01:b4:62:fe:57:4f:4a:98:b1:98:2a:60:6d:50:b2:4a:de:
         12:81:6e:a2:7f:54:4f:78:7d:9f:7e:1e:51:75:7f:ad:3a:de:
         ab:33:f0:9b:06:3f:0d:be:48:71:cf:ad:c5:b8:12:7b:01:89:
         3a:56:c0:d9:c8:a1:95:c6:a2:4f:09:18:19:c8:f7:67:ed:cd:
         45:e5:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:47 2024 by rpki-client on console-ams.rpki-client.org