Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa
File:                     323830343a333539343a3a2f33322d3438203d3e203238323430.roa (raw, json)
Hash identifier:          DXJFs/cJ1nzEUvi/+9Crd7keA8fzyg/I8BisM0k95xs=
Subject key identifier:   81:0B:06:30:B9:51:38:6D:88:AC:37:AB:BB:8E:7C:D8:CB:9E:39:2E
Certificate issuer:       /CN=5B97AFF236F65B7267ED145B798C19E124850546
Certificate serial:       321F39A3D26C14EBD1FF9F20EE8130D630BB40E4
Authority key identifier: 5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa
Signing time:             Thu 04 Apr 2024 08:54:32 +0000
ROA not before:           Thu 04 Apr 2024 08:49:32 +0000
ROA not after:            Thu 03 Apr 2025 08:54:32 +0000
asID:                     28240
IP address blocks:        2804:3594::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl
                          rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1f:39:a3:d2:6c:14:eb:d1:ff:9f:20:ee:81:30:d6:30:bb:40:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B97AFF236F65B7267ED145B798C19E124850546
        Validity
            Not Before: Apr  4 08:49:32 2024 GMT
            Not After : Apr  3 08:54:32 2025 GMT
        Subject: CN=810B0630B951386D88AC37ABBB8E7CD8CB9E392E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:29:29:38:52:1c:b0:0e:3d:dc:bd:60:87:86:
                    2e:b3:b1:e7:f0:8d:90:3e:53:82:a1:ef:e7:a1:a5:
                    1c:87:ce:52:cc:06:39:e9:dd:1f:bf:b6:64:0b:60:
                    61:20:fd:a1:a5:dd:c6:a4:6e:ad:b7:76:64:bd:c4:
                    ad:22:6b:72:59:8f:d5:1c:c8:b1:da:f8:ab:89:1b:
                    35:8b:9e:fd:71:6f:74:88:88:4c:bc:1b:30:b0:67:
                    94:d2:a2:68:99:58:e9:d2:14:b1:3a:3f:54:da:d5:
                    66:b1:bf:ce:71:a4:62:e8:00:5d:9c:45:37:57:0a:
                    61:4b:de:f6:8f:2b:a2:d9:f6:d8:9f:5e:5f:ea:cd:
                    76:d1:5d:b7:38:68:b6:16:c4:7b:8f:b9:95:5c:fb:
                    ca:77:12:56:31:2a:09:70:eb:73:77:ae:b0:89:61:
                    96:e5:20:8e:47:ad:0c:b6:94:02:46:72:ad:80:a6:
                    4d:7e:9b:65:41:f8:71:12:70:46:89:02:65:23:35:
                    e9:c2:9c:5f:32:1e:19:c7:34:92:78:3c:26:35:20:
                    1f:a2:29:03:66:70:7e:e5:2e:9a:92:cc:c9:ca:6b:
                    f4:56:e3:68:12:f3:72:3f:01:34:9b:c5:f8:cb:7f:
                    5e:87:58:0a:d7:a3:58:30:b8:b5:f0:80:d6:3f:a8:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:06:30:B9:51:38:6D:88:AC:37:AB:BB:8E:7C:D8:CB:9E:39:2E
            X509v3 Authority Key Identifier:
                keyid:5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3594::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:af:2b:d0:60:d9:b0:e5:04:b1:21:4c:2c:69:d9:5d:b2:
         c1:c1:fb:15:ef:77:16:4e:a8:43:85:8b:1b:7a:cf:b9:c7:23:
         e3:8e:63:6b:e1:de:c5:1b:ec:d4:bc:b0:4a:5f:63:4d:53:fa:
         88:4f:89:b3:79:39:e2:1f:ab:c4:5f:ab:53:68:7a:14:bb:fa:
         79:9a:6a:19:6f:17:18:a9:29:c1:82:f2:71:77:84:99:2e:20:
         e2:d4:75:03:67:aa:42:89:cc:f1:22:c0:9b:72:e5:8d:36:dc:
         d0:0b:23:eb:7b:97:f5:e6:70:a4:b6:78:f6:08:a5:a4:be:99:
         ac:de:e0:b2:f7:a6:80:ef:7f:d9:ed:74:6e:7b:5d:1e:29:97:
         4f:08:fa:75:bf:9e:ae:3c:9d:d5:3c:6b:82:85:2d:38:bb:f8:
         13:4c:d8:d0:b1:6e:69:be:49:3b:32:7b:59:2e:48:27:6b:33:
         67:f8:cf:da:95:b5:38:e8:56:c6:0b:00:be:d2:1b:e1:58:89:
         71:09:bb:d4:37:5a:1c:ed:4a:44:f1:a5:d0:1f:ac:85:fe:9d:
         2c:45:c3:32:a9:1a:20:55:a8:43:1d:dc:85:86:f9:22:c6:66:
         34:f3:d0:0e:a0:85:3e:b3:7c:c1:4b:04:ce:5e:05:43:04:72:
         4d:7b:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:19 2024 by rpki-client on console-ams.rpki-client.org