Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          Ifly7VjgGxFolaxl6ndKp6p2xYhMdJwGzDq5xJ9NvmY=
Subject key identifier:   F3:D8:1D:3F:32:2F:5E:1A:45:2E:4A:B7:A8:E6:66:37:53:37:F1:D3
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       6DA9E0EEBEDEF81D28FF7221278488142307A1C9
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:17 +0000
ROA not before:           Tue 21 May 2024 20:01:17 +0000
ROA not after:            Tue 20 May 2025 20:06:17 +0000
asID:                     262687
IP address blocks:        2804:385c:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a9:e0:ee:be:de:f8:1d:28:ff:72:21:27:84:88:14:23:07:a1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:17 2024 GMT
            Not After : May 20 20:06:17 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:bc:7a:a7:29:a1:cf:c4:fd:1f:05:97:2e:
                    58:3c:ce:19:9d:e9:8a:80:81:cd:1a:af:0c:5b:1e:
                    87:24:4f:d7:bc:f7:02:b1:51:90:07:3b:bc:8a:6e:
                    55:d0:ea:58:03:5a:5c:0d:e6:e5:7b:5a:8e:35:2a:
                    d8:3b:57:3c:9c:01:1a:61:32:11:f2:e9:65:05:a0:
                    b2:b1:20:ba:ab:bf:fb:37:ec:66:fe:bb:4f:56:fc:
                    c1:d6:dc:f1:87:89:3b:bb:97:dd:5f:74:12:10:81:
                    52:73:63:e1:11:eb:71:6c:19:cc:6a:07:14:ee:39:
                    37:bf:e9:39:b4:3e:66:92:22:be:29:d2:64:89:71:
                    d1:18:da:7b:e1:0c:08:5a:b8:40:13:7c:01:8b:cc:
                    4e:7d:4e:23:ee:57:8f:d1:dd:ba:c2:7e:8c:6d:5d:
                    e6:96:d5:ba:52:0c:c4:e5:01:40:3f:b3:57:d7:df:
                    a3:50:b1:31:df:0e:d4:85:fe:62:1d:da:1f:2b:12:
                    15:be:ab:0e:44:c6:06:de:13:e9:f8:77:25:34:7c:
                    20:a6:f3:d2:6a:69:22:7c:1b:78:2a:49:26:73:53:
                    39:45:bc:a1:61:ba:fe:f8:a9:9f:f2:4e:34:77:e6:
                    b6:a0:60:96:b2:82:8d:d0:1f:02:d2:3f:bf:eb:fb:
                    db:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:1D:3F:32:2F:5E:1A:45:2E:4A:B7:A8:E6:66:37:53:37:F1:D3
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3130303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:22:0a:00:49:95:33:26:ee:03:cf:d6:02:2a:1c:84:d6:
         55:ca:05:11:dc:31:ad:6a:30:bb:b9:52:1e:f6:a2:96:c6:07:
         20:6f:45:2f:d2:0b:1e:96:1d:ca:43:42:14:e6:93:f5:4e:f9:
         54:bd:3c:d5:0a:fc:82:3e:e6:db:01:98:8c:36:d0:ca:c8:66:
         b7:ad:57:2a:19:20:fb:d0:b8:88:30:d3:dc:7b:53:37:72:37:
         f3:1b:1e:28:61:bf:4a:f0:cd:84:ce:08:55:a7:eb:d3:48:04:
         64:26:7c:ae:f2:b0:f3:02:2d:20:ee:bf:4f:35:92:31:25:b4:
         41:b7:01:d3:14:92:9b:fb:fa:53:3f:17:bb:a9:56:4c:1d:20:
         42:d7:f6:7c:5d:c1:73:a4:40:5f:cf:54:7d:ce:b2:0e:55:2a:
         19:8a:94:25:e9:92:24:04:c8:ff:0d:27:9d:38:6d:04:6d:7f:
         64:84:03:e2:27:83:63:5d:89:72:6b:d9:17:81:da:16:48:54:
         6c:05:e4:dd:8e:4f:4e:8e:f5:5d:49:77:2e:84:64:28:a3:63:
         b4:ae:5a:9a:fa:42:e8:9c:71:8f:77:60:c1:41:00:9e:05:6c:
         fc:1f:4d:7a:3c:98:0c:d9:f4:a6:61:0a:25:0b:2c:db:16:d0:
         59:e6:69:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org