Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33322d3332203d3e20323636333734.roa
File:                     323830343a333664303a3a2f33322d3332203d3e20323636333734.roa (raw, json)
Hash identifier:          Cd4X12maAgohaW8z5SxP2LPj57UuUJGODShDYkDkhN8=
Subject key identifier:   B5:CF:77:BE:4E:9C:4B:FE:27:B5:27:57:E3:A5:6E:61:29:CF:17:19
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       2DD5ADF20E8F23DEC0A88161B08E6D13E2524E7F
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33322d3332203d3e20323636333734.roa
Signing time:             Wed 03 Apr 2024 21:49:16 +0000
ROA not before:           Wed 03 Apr 2024 21:44:16 +0000
ROA not after:            Wed 02 Apr 2025 21:49:16 +0000
asID:                     266374
IP address blocks:        2804:36d0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d5:ad:f2:0e:8f:23:de:c0:a8:81:61:b0:8e:6d:13:e2:52:4e:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr  3 21:44:16 2024 GMT
            Not After : Apr  2 21:49:16 2025 GMT
        Subject: CN=B5CF77BE4E9C4BFE27B52757E3A56E6129CF1719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:b0:39:a9:43:15:33:36:97:00:84:07:7b:
                    30:a5:ad:e3:e1:f3:56:d1:f6:ed:f0:ef:ef:e2:69:
                    b4:fe:bc:72:d8:72:d4:53:45:b2:d0:3f:77:e5:cf:
                    4c:27:da:8a:29:f8:ec:9f:1b:49:06:65:d9:2e:d6:
                    4f:03:47:7e:57:f0:ad:ff:90:47:13:da:e3:5c:84:
                    62:6f:3b:78:9b:4a:a3:6d:6b:a8:e3:b5:64:cc:54:
                    2b:7e:0f:3f:52:bc:ff:70:f1:1b:e4:2c:ea:2d:67:
                    d9:6b:59:96:02:2b:f6:41:82:b0:6f:a8:72:73:45:
                    2c:5a:dc:4e:e5:22:5a:f9:2d:d4:97:03:f2:4b:d5:
                    57:bc:b1:28:4a:2d:78:f4:73:13:07:d7:7d:f0:1f:
                    aa:6c:6b:28:92:93:4d:0c:70:4c:8a:1d:d8:6f:b7:
                    d4:7f:cd:67:90:ea:cb:af:f3:01:9a:fa:62:0c:11:
                    1c:28:18:d4:da:ef:c2:36:7e:bf:ab:60:cb:5e:f3:
                    a7:b6:16:ac:0c:98:a6:ff:73:47:b1:5f:b6:88:ac:
                    04:c3:d1:2b:ae:b7:30:ff:11:cc:23:82:2b:0a:73:
                    90:9a:c8:c5:17:fc:43:6b:9d:c5:13:9b:36:b9:9b:
                    5c:b1:2c:39:cb:d5:34:4e:fc:f5:15:ce:a8:0a:fd:
                    e1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CF:77:BE:4E:9C:4B:FE:27:B5:27:57:E3:A5:6E:61:29:CF:17:19
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33322d3332203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:15:64:31:c6:65:89:8f:5b:6f:a6:e4:35:7f:02:0b:05:
         d1:f7:b9:53:b5:ac:54:2f:98:90:7d:e4:3f:51:82:60:26:5f:
         d0:7b:a0:95:51:47:31:7f:46:23:28:8a:7a:79:36:d5:b4:23:
         e7:e6:c3:1d:e8:b3:17:ef:85:3e:e4:13:a7:24:50:3e:6d:c5:
         a1:c5:83:ec:de:e4:15:9b:bb:4b:9f:16:e8:4b:f2:12:a0:12:
         2e:32:33:28:d0:91:3e:fe:38:fe:d4:69:e5:d1:33:04:11:e7:
         8a:8c:01:30:40:a1:99:58:ab:6f:68:69:62:9e:4e:6f:e9:c4:
         66:af:ae:e6:4b:cf:71:ce:56:f6:a8:7b:7d:ca:b1:48:fd:e3:
         37:90:98:36:52:5c:18:02:68:0d:88:88:3e:5b:aa:94:96:fa:
         f5:ab:a9:17:82:f2:32:b3:82:a6:80:fd:16:69:0b:94:ad:13:
         69:13:4f:5f:31:0f:37:18:42:ff:ab:01:bf:74:16:75:df:20:
         06:c4:6b:37:5d:66:f0:8c:83:39:44:62:be:61:1a:f0:d2:6f:
         cf:b7:04:1b:9d:d7:55:73:1b:9e:3e:da:24:eb:57:c9:17:f7:
         ce:a0:d9:da:37:28:31:8f:ba:6d:dc:6d:e0:11:6f:7a:d3:b1:
         eb:ff:33:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:51:25 2024 by rpki-client on console-fra.rpki-client.org