Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa
File:                     323830343a3830343a3a2f33322d3438203d3e20323632333338.roa (raw, json)
Hash identifier:          8h+WURXfq3a+UaTJXQtkM1BefMtEhY7p2+BwX6P84NQ=
Subject key identifier:   6D:B2:0F:DE:4A:29:30:B7:70:64:59:30:25:7B:DF:F9:EE:33:AC:4B
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       32A583ADB8C19A7EB61A41C578FD7987B3C5BE6C
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa
Signing time:             Wed 05 Jun 2024 19:01:33 +0000
ROA not before:           Wed 05 Jun 2024 18:56:33 +0000
ROA not after:            Wed 04 Jun 2025 19:01:33 +0000
asID:                     262338
IP address blocks:        2804:804::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a5:83:ad:b8:c1:9a:7e:b6:1a:41:c5:78:fd:79:87:b3:c5:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Jun  5 18:56:33 2024 GMT
            Not After : Jun  4 19:01:33 2025 GMT
        Subject: CN=6DB20FDE4A2930B770645930257BDFF9EE33AC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:3a:07:35:3a:35:f2:4d:47:b0:3a:1e:b9:
                    ac:c9:4a:c2:b5:51:9c:68:2f:77:84:82:2f:d9:d2:
                    17:5b:79:8f:51:64:50:90:96:2a:ee:66:fb:6d:64:
                    4b:1b:40:db:b9:00:f5:d3:7c:e1:46:83:96:63:bb:
                    24:f4:60:92:aa:0e:47:79:6e:fa:0e:ab:92:b8:c3:
                    33:d9:a9:2c:18:db:75:08:cf:ed:dc:5c:d8:ce:ad:
                    2e:c5:d4:17:7b:db:f3:a5:ac:9a:be:d8:f1:9f:f6:
                    50:54:6c:c4:c8:19:8b:85:4a:15:d5:35:48:9f:b3:
                    85:21:0c:56:1a:00:68:17:c4:df:95:aa:01:a1:eb:
                    a6:fb:e1:21:67:0d:41:18:c3:f2:56:2a:c1:9a:fe:
                    fa:d8:e4:e8:d0:8d:97:5f:fa:ab:35:b3:d0:97:f4:
                    9a:a2:bc:3c:49:23:3a:84:29:84:32:d4:f5:d3:50:
                    6b:07:f0:6a:56:6c:df:9e:55:32:72:83:f8:bb:3f:
                    55:e0:22:79:56:67:d6:5e:73:2d:e2:65:b6:13:f6:
                    d9:8d:d6:9b:13:d0:c9:79:21:0b:d5:c0:1f:1a:1e:
                    15:77:18:48:33:1a:0a:8a:a9:e6:dd:b1:cc:97:a4:
                    e7:23:01:7b:17:0f:05:52:78:7a:66:cd:f4:b1:5d:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B2:0F:DE:4A:29:30:B7:70:64:59:30:25:7B:DF:F9:EE:33:AC:4B
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a3a2f33322d3438203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:da:61:9c:c0:c3:fd:36:ca:b7:2c:8a:2e:a9:d3:32:55:
         d5:9c:5c:0f:eb:24:87:29:9e:99:57:6d:4f:35:87:7b:45:3e:
         88:18:0b:7b:00:9d:24:5b:fa:17:d7:53:36:fa:45:b4:04:69:
         ed:d4:20:32:32:92:17:fb:ba:04:87:77:b3:05:06:3d:ab:e1:
         03:d3:62:e8:01:db:7c:0b:b6:06:63:b1:d8:9b:24:a9:48:12:
         2a:74:7a:ea:5f:df:05:0d:25:71:34:d1:9f:b7:4c:fa:ab:38:
         de:25:65:bc:71:3a:ff:df:f4:34:89:31:21:57:a4:4c:6a:3f:
         9e:b9:2d:d5:4f:7c:c9:39:cc:ac:09:77:c2:53:27:77:d6:8c:
         ea:a2:1b:4f:81:25:c3:2c:c6:dd:63:e9:bf:95:5f:a4:5c:05:
         f2:6d:a5:b6:ce:7d:fe:2c:d5:f3:7f:04:b3:29:87:59:ea:43:
         0f:e9:0b:73:d8:f9:7f:3e:71:da:00:23:f3:87:5e:6e:40:9a:
         dd:d2:79:ec:2a:f0:a3:12:73:fc:ad:39:70:17:48:11:b1:ad:
         db:95:03:79:c3:ab:1b:42:f2:a1:24:83:23:87:00:96:30:e6:
         bf:3a:d5:e0:12:9f:a0:e0:15:65:56:90:9d:ea:de:28:0f:5e:
         f0:8a:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 20:09:46 2024 by rpki-client on console-fra.rpki-client.org