Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          TzDLj+uArUQvfjlIooKA8V4DECX7WxfYD6dZXHWcLGc=
Subject key identifier:   48:59:67:B8:85:D2:8B:E4:BE:22:72:4F:FC:DA:9A:50:E8:FA:71:5D
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       1EC945626BB18F4A80DD9304F46A548691C594E9
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        2804:385c:30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c9:45:62:6b:b1:8f:4a:80:dd:93:04:f4:6a:54:86:91:c5:94:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:e4:11:e8:08:af:06:e4:90:67:30:57:f9:
                    e4:05:e3:44:ae:1e:76:ed:a4:32:fe:1c:7d:4a:23:
                    ab:06:0b:28:79:9d:98:9c:51:a8:42:0d:8a:4f:2c:
                    46:93:03:47:16:2b:e6:2b:31:be:1d:6f:06:f0:ef:
                    1b:c3:04:18:1e:b8:ac:89:e9:be:93:bb:06:cf:cf:
                    4e:5b:ef:38:40:69:e0:87:38:b3:74:a3:93:99:46:
                    3c:1c:9d:b6:c6:aa:fc:e8:b2:bf:d7:12:96:52:37:
                    7a:cd:d3:1a:fb:ec:bb:c4:b7:e8:2f:9b:b3:7f:19:
                    7a:47:da:0b:98:ab:c9:8e:1c:04:1b:b4:b0:61:36:
                    6d:4f:48:17:de:ee:39:91:f4:31:55:de:68:43:09:
                    e5:19:11:6e:65:b2:02:30:0a:e2:83:da:38:91:06:
                    46:62:05:a6:a4:f7:81:44:c5:b6:b1:88:91:62:a9:
                    98:21:02:3a:c9:2a:e2:f8:cf:4f:e7:09:31:f6:0d:
                    8c:91:18:bb:46:c7:f3:3e:ef:9e:a3:12:c5:b8:db:
                    1d:44:0b:c2:42:80:0d:06:34:55:90:ee:ee:f1:bf:
                    d1:97:c7:c4:79:fb:34:73:67:68:1e:d5:fe:ce:f4:
                    8c:f2:3f:d7:1f:9a:d5:23:b0:b7:4e:6b:5c:fc:01:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:67:B8:85:D2:8B:E4:BE:22:72:4F:FC:DA:9A:50:E8:FA:71:5D
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a33303a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:ef:e5:72:28:4a:63:e1:72:e7:a6:2d:3e:c6:59:ad:2c:b9:
         c3:ac:b8:8d:a3:77:29:dd:d2:0c:4e:15:f7:30:56:0e:f3:86:
         69:b4:58:ba:e6:e0:1e:c9:d4:44:5f:78:ba:31:d5:41:d8:4c:
         67:93:e1:77:89:20:9d:4f:da:bf:28:e6:0f:7d:38:a6:8c:1a:
         c7:ee:88:3d:da:55:0d:62:8b:7e:18:9c:ab:a5:2c:33:76:5e:
         49:7d:cf:5c:17:7d:b5:64:de:0a:56:60:4c:de:75:2a:99:6d:
         8f:10:e2:36:71:8f:f6:0b:73:24:c1:22:8e:e8:e5:23:6d:a6:
         59:9e:64:8a:98:80:86:73:88:4b:5a:3b:1a:a7:fb:e5:88:84:
         c6:ad:72:6e:7a:ba:1c:fc:f1:32:b7:9b:90:48:cc:9c:4d:6a:
         1f:c5:5c:53:ff:af:d2:39:71:64:30:25:26:15:82:8c:7d:4d:
         18:cd:2a:8c:48:a0:e2:a6:18:70:fd:8e:15:51:75:96:4b:f0:
         0d:41:9d:3f:0b:76:08:41:b7:b3:b2:f0:5f:60:83:72:73:a6:
         64:af:75:d6:e7:12:6c:c2:2a:d9:33:4e:79:e1:4b:be:7a:05:
         16:37:1f:3e:c6:6f:6c:66:d7:5a:c1:df:fd:c3:b2:5d:9c:c2:
         76:32:88:7e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org