Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa
File:                     323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa (raw, json)
Hash identifier:          HJ4aBvA/XQQm28S6Eh94Ec9rzVwt6VIxvKfNgSpoCZI=
Subject key identifier:   FF:86:F2:3C:10:70:71:04:66:9A:CA:15:92:2D:A6:55:6C:0D:E2:C6
Certificate issuer:       /CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
Certificate serial:       71687EAE41378839F060A67A33FBF533D1F622BC
Authority key identifier: 5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa
Signing time:             Sun 02 Jun 2024 14:28:14 +0000
ROA not before:           Sun 02 Jun 2024 14:23:14 +0000
ROA not after:            Sun 01 Jun 2025 14:28:14 +0000
asID:                     268684
IP address blocks:        2804:5504:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl
                          rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:68:7e:ae:41:37:88:39:f0:60:a6:7a:33:fb:f5:33:d1:f6:22:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C
        Validity
            Not Before: Jun  2 14:23:14 2024 GMT
            Not After : Jun  1 14:28:14 2025 GMT
        Subject: CN=FF86F23C10707104669ACA15922DA6556C0DE2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:16:df:bb:ea:80:6e:b8:ca:b5:de:fb:81:f8:
                    ba:3d:cd:41:1e:9b:6b:f7:f7:5d:75:2d:21:5b:12:
                    24:33:1c:7b:54:a1:b3:7b:cb:f7:05:88:82:50:8b:
                    ea:35:3e:06:29:78:a1:b0:55:30:b5:d3:51:c1:88:
                    71:31:1c:44:b3:04:9d:37:e0:2b:dd:30:d7:22:2b:
                    73:56:f8:1e:48:e2:ad:98:f7:00:13:fc:d5:d1:23:
                    0a:3a:30:11:cc:b4:27:fa:25:01:f7:12:8d:4e:e4:
                    31:16:99:57:2f:3d:1a:fb:8b:d7:b5:66:0b:36:96:
                    54:cd:f0:8b:8f:f3:c4:74:0e:58:b0:52:6c:7a:14:
                    4c:33:2d:53:11:4f:0c:55:53:07:0b:37:d8:69:92:
                    2c:47:11:d0:34:1e:35:a2:21:5f:db:d7:b6:15:98:
                    fd:71:ba:df:a8:21:fc:1a:20:0a:82:17:b3:cd:e8:
                    3e:08:75:1e:95:75:00:00:77:9c:2c:df:cd:cd:9f:
                    60:be:2b:0e:8a:71:31:69:05:ae:b6:e2:8e:c3:28:
                    c6:6f:d9:16:b1:91:75:84:a6:60:e9:86:46:b7:39:
                    28:55:a6:85:c3:4c:25:25:70:ed:52:71:2f:f8:24:
                    9e:06:8e:29:b9:d7:83:ab:48:a7:b2:a4:86:d2:f8:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:86:F2:3C:10:70:71:04:66:9A:CA:15:92:2D:A6:55:6C:0D:E2:C6
            X509v3 Authority Key Identifier:
                keyid:5C:B9:A3:9B:2C:0F:8B:2B:32:F8:33:DC:D5:B5:F5:90:0A:99:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5CB9A39B2C0F8B2B32F833DCD5B5F5900A999C8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fLau9xGa3xMEMNwJPBtcVdfx7yC16LewRmZ6NSYHRGZ/0/323830343a353530343a633030303a3a2f33342d3334203d3e20323638363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5504:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:24:b9:99:91:43:8f:99:6d:9f:f4:d9:fe:bb:f5:be:fc:d0:
         ee:ac:b0:14:52:fb:79:6c:80:53:9a:fb:07:8f:24:56:8c:d3:
         0b:c7:d9:8c:dd:31:a5:1b:ce:d2:75:09:53:b5:e3:fb:ab:d6:
         db:33:f2:73:bd:eb:6e:3e:b9:ea:32:09:b5:d9:9e:57:e6:cb:
         99:44:38:c5:36:e8:dc:2e:16:45:d1:df:13:65:3c:dd:a7:0e:
         09:b4:14:75:65:61:7c:93:58:3b:48:97:2a:cd:0f:74:56:c4:
         ac:66:0c:79:2b:f5:bc:2c:a6:70:6e:0a:93:86:46:37:3b:99:
         7c:93:92:3c:e8:ed:02:bc:c4:c0:e2:c4:48:d0:fb:69:ba:a3:
         40:00:4e:8c:a7:95:cc:f9:57:54:fb:d2:86:56:97:36:c2:97:
         7f:39:4a:ff:bf:3c:75:92:fd:59:92:26:d1:5a:f3:f1:51:00:
         d0:1f:28:6e:a2:1b:65:fa:4c:50:f6:cf:de:7a:e0:58:76:d0:
         75:1f:a5:cd:60:46:8f:a3:e2:a8:96:78:84:28:b4:61:c2:02:
         fa:7a:29:37:bb:e3:1b:98:ab:49:49:9b:c0:28:64:cb:62:e5:
         db:91:10:07:74:dd:e9:97:7b:ce:7c:d5:63:3a:b6:2b:60:20:
         1e:01:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:13 2024 by rpki-client on console-fra.rpki-client.org