Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a663030303a3a2f33362d3336203d3e20323632333338.roa
File:                     323830343a3830343a663030303a3a2f33362d3336203d3e20323632333338.roa (raw, json)
Hash identifier:          DYYlY7CNJPeC5OnDKE9JX5a7QqOr2PBRi6fgYlIQNS8=
Subject key identifier:   0A:27:B7:3C:2E:EB:C3:33:35:AC:80:BB:39:10:52:E9:F5:25:EA:59
Certificate issuer:       /CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
Certificate serial:       6665D56612A7A9B78BB62D312512C281023BD4AF
Authority key identifier: 5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a663030303a3a2f33362d3336203d3e20323632333338.roa
Signing time:             Wed 24 Apr 2024 12:45:16 +0000
ROA not before:           Wed 24 Apr 2024 12:40:16 +0000
ROA not after:            Wed 23 Apr 2025 12:45:16 +0000
asID:                     262338
IP address blocks:        2804:804:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl
                          rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:65:d5:66:12:a7:a9:b7:8b:b6:2d:31:25:12:c2:81:02:3b:d4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03
        Validity
            Not Before: Apr 24 12:40:16 2024 GMT
            Not After : Apr 23 12:45:16 2025 GMT
        Subject: CN=0A27B73C2EEBC33335AC80BB391052E9F525EA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:e6:1f:60:16:06:fa:7f:21:6f:8d:7b:e2:
                    a7:ac:95:55:08:e4:c5:e8:dc:42:d0:6c:a9:9a:bd:
                    b2:70:16:eb:34:e4:18:bd:a6:57:97:ca:e2:53:71:
                    54:9f:b8:83:56:89:67:63:22:97:79:05:3b:c5:29:
                    f5:1a:42:23:fe:40:e5:95:10:eb:4c:d7:58:0e:84:
                    59:f9:3b:83:ca:f9:59:3f:8a:30:9c:78:23:77:e8:
                    39:35:86:a5:02:f3:19:d6:3f:3b:0f:8b:24:e5:6f:
                    c0:8f:4b:a5:c5:9e:b7:e5:e7:87:d5:c6:e0:4b:26:
                    5f:49:ed:10:20:9b:c3:9b:90:59:c0:f9:bf:5d:8e:
                    02:72:52:c1:4a:a2:7c:84:1b:c4:26:62:57:50:f0:
                    a8:13:b7:29:ef:b8:93:4b:bc:78:03:41:6c:9c:46:
                    b7:d3:c3:b9:2d:0e:5b:3d:5e:90:fc:59:b8:76:95:
                    55:e1:06:9d:ed:a8:2d:99:c9:ad:6b:1b:8c:8f:29:
                    d4:16:e6:ec:e2:c9:ed:88:cb:54:c5:97:ef:7d:73:
                    6a:19:4d:56:ce:9f:c4:f0:37:f7:0e:b4:3b:1e:60:
                    9d:f4:a2:e5:36:02:04:8f:d0:df:2c:61:a6:f6:fb:
                    0b:3b:9e:26:f1:fc:bb:83:9a:11:cc:af:47:f6:16:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:27:B7:3C:2E:EB:C3:33:35:AC:80:BB:39:10:52:E9:F5:25:EA:59
            X509v3 Authority Key Identifier:
                keyid:5D:1A:12:0D:72:81:25:F6:0F:F4:DC:BF:1E:C7:DA:54:F0:DB:ED:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D1A120D728125F60FF4DCBF1EC7DA54F0DBED03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oksf3sLxnbqgxPeCPhCMas9t7jRAkV82vn8TkLRxGsv/0/323830343a3830343a663030303a3a2f33362d3336203d3e20323632333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:804:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:27:c7:62:50:eb:6d:06:48:77:a1:b0:8e:c8:f8:7c:f5:f6:
         3e:fe:cd:46:13:80:56:42:01:8c:00:03:f3:f7:19:0c:cb:c0:
         29:e5:06:93:e4:bb:8a:4f:19:49:bc:1c:43:7d:88:7a:2c:60:
         88:9e:aa:40:f2:80:1e:80:5e:f3:8d:64:ef:3a:ce:e0:83:e2:
         1d:96:6c:94:ea:f7:86:c9:f4:c7:2b:14:4c:af:54:ef:97:d8:
         d7:62:5a:cb:b9:c7:b6:fd:49:49:74:f2:6b:1b:f2:9b:24:28:
         49:71:d5:d3:b7:3d:a5:6b:76:71:2c:98:e8:01:e3:ad:89:1b:
         5b:15:05:c4:89:38:3f:d9:5d:67:56:88:41:70:6c:bd:e0:3c:
         7e:d3:94:3f:90:40:5e:73:d4:db:58:cd:35:a9:47:a7:ce:f2:
         d7:ca:af:c5:35:41:25:b0:86:0f:9c:1c:93:ee:11:74:10:1a:
         e9:8e:33:1a:79:98:8a:cc:e0:18:32:78:4d:89:cf:fa:30:05:
         aa:21:55:e1:ec:13:c3:7e:42:25:eb:09:44:f9:66:31:a6:3d:
         3f:32:0f:12:cc:bc:ec:98:7a:68:94:3e:92:69:8e:3e:65:be:
         be:03:c9:73:6e:4f:f8:a4:bb:af:a2:27:ac:0a:bd:ab:5a:67:
         61:4d:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:22:06 2024 by rpki-client on console-fra.rpki-client.org