Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          MjHTJoH/FT+WMKmI9S9qYFF0BRP6/ywhmC91TAqvU8o=
Subject key identifier:   1A:F8:88:C3:9D:75:AE:90:EB:9F:D5:2B:62:FE:16:13:3C:11:5C:B5
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       76165BEE05F992B13502DD9806502F084FCF57B1
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:16 +0000
ROA not before:           Tue 21 May 2024 20:01:16 +0000
ROA not after:            Tue 20 May 2025 20:06:16 +0000
asID:                     262687
IP address blocks:        2804:385c:800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:16:5b:ee:05:f9:92:b1:35:02:dd:98:06:50:2f:08:4f:cf:57:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:16 2024 GMT
            Not After : May 20 20:06:16 2025 GMT
        Subject: CN=3082010A0282010100A5CC0D0706E13EE6A32CFDD6DF40D512B183A8A4288C30F43977803FA05EBDE71CBE8FB3565D69B413D9A2BAFA30A8647B064270EF6F5B24693F4443355A3699265E1391DB61AFD4C6FD44BF0DBDBDF4518E3329FDC2CEE9CF052527A532ED6D57E330136DF87E023EA310C6556A1AC8D09831936AEABC85075E2E22E0B0D77A49972E6E7F5E757BF381BD131A123DE15A490BD5FD86BB9F57B3F0113C809F717C83B6063F6B9E76EC4E5FEFC806B8E6CF43F5293103D4FED7443C316902830671FB11A37ED49F93876E3373B4EA0573E908CF641262C12672163CAA67A1177F3CDED094ABEDAAFD844F8A0297E55B1E2D1A35F0547A2588EA1EEBD10D61566F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:0d:07:06:e1:3e:e6:a3:2c:fd:d6:df:40:
                    d5:12:b1:83:a8:a4:28:8c:30:f4:39:77:80:3f:a0:
                    5e:bd:e7:1c:be:8f:b3:56:5d:69:b4:13:d9:a2:ba:
                    fa:30:a8:64:7b:06:42:70:ef:6f:5b:24:69:3f:44:
                    43:35:5a:36:99:26:5e:13:91:db:61:af:d4:c6:fd:
                    44:bf:0d:bd:bd:f4:51:8e:33:29:fd:c2:ce:e9:cf:
                    05:25:27:a5:32:ed:6d:57:e3:30:13:6d:f8:7e:02:
                    3e:a3:10:c6:55:6a:1a:c8:d0:98:31:93:6a:ea:bc:
                    85:07:5e:2e:22:e0:b0:d7:7a:49:97:2e:6e:7f:5e:
                    75:7b:f3:81:bd:13:1a:12:3d:e1:5a:49:0b:d5:fd:
                    86:bb:9f:57:b3:f0:11:3c:80:9f:71:7c:83:b6:06:
                    3f:6b:9e:76:ec:4e:5f:ef:c8:06:b8:e6:cf:43:f5:
                    29:31:03:d4:fe:d7:44:3c:31:69:02:83:06:71:fb:
                    11:a3:7e:d4:9f:93:87:6e:33:73:b4:ea:05:73:e9:
                    08:cf:64:12:62:c1:26:72:16:3c:aa:67:a1:17:7f:
                    3c:de:d0:94:ab:ed:aa:fd:84:4f:8a:02:97:e5:5b:
                    1e:2d:1a:35:f0:54:7a:25:88:ea:1e:eb:d1:0d:61:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F8:88:C3:9D:75:AE:90:EB:9F:D5:2B:62:FE:16:13:3C:11:5C:B5
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:56:60:a0:78:0e:2c:ac:ec:56:69:c1:1a:5e:0c:d2:09:dc:
         5a:3f:d5:c5:89:16:b7:9b:e5:7b:2d:86:a8:b0:8b:2b:c1:33:
         12:f4:9b:d8:1c:b6:a6:10:8b:60:9d:e2:8a:7b:c5:3b:d6:72:
         75:04:f9:e9:a7:1a:4c:34:8e:a0:f4:d9:7c:d3:29:27:99:04:
         70:65:12:56:6e:d1:fe:d8:20:e8:7a:8c:83:1f:71:32:7d:07:
         8d:1e:e9:0d:3b:76:bc:62:a0:46:36:d9:0d:19:77:64:26:39:
         22:6b:fb:00:d4:24:f8:a2:a1:08:f9:12:00:7f:ce:2a:3f:0a:
         6f:0d:93:71:77:68:1b:f3:fd:4e:db:fc:c8:b9:24:81:40:4d:
         a8:66:64:01:f3:06:46:b1:28:e1:7a:a6:ee:0f:22:76:93:df:
         2a:9c:e1:13:07:e0:f9:3c:86:ff:81:3d:cf:1d:5d:05:8e:5f:
         36:56:60:b8:c1:b4:74:e1:61:4e:77:9d:ec:96:c0:11:7e:20:
         57:8a:73:b5:d8:dd:2d:7f:d1:a5:e9:03:ca:72:c9:80:73:4e:
         f7:d9:fb:1d:cd:17:0a:aa:63:a6:2d:57:93:16:f0:f6:e6:6c:
         2f:78:63:9e:eb:12:c3:ef:79:3d:b8:f2:42:40:b6:80:f1:86:
         57:9b:2c:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org