Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          R7eQ0kYVnPQMsYSwJRfjJK1IkjEp/4yxcCry7FCULHI=
Subject key identifier:   13:0C:7C:04:46:B8:24:8A:5D:B5:49:D0:E6:47:89:FB:13:51:FA:44
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       174AC03A7A8155F1B1322A2E7B2889706DFB14D5
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:19 +0000
ROA not before:           Tue 21 May 2024 20:01:19 +0000
ROA not after:            Tue 20 May 2025 20:06:19 +0000
asID:                     262687
IP address blocks:        2804:385c:8023::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4a:c0:3a:7a:81:55:f1:b1:32:2a:2e:7b:28:89:70:6d:fb:14:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:19 2024 GMT
            Not After : May 20 20:06:19 2025 GMT
        Subject: CN=3082010A0282010100B16C61C13071383C2480D5585E129D1D4CA746D82E5C3C2BDEDDC49BEC4AD1A402B73757E69ED0DE19A0A0CDFF07551DFD0D381F61D70056809AD85A6823FDD604F2D1DFC7E9F8345699FAC49F9FA6F884EDACFE9A780D8AE47CA8E9FF513AE905EF3F1ACC8F2348AD73F19CC00F655BCD95A683B67E57B6B4E917AA7689EE5828455CA5567F8FC7361C326BAF32C247E46B551DA38E373C502234630025520F1971659DD11AE2527C683E90936E962633F2FB91BA57550958A31239718E601AF6776C6965F905F37519C308715FAEFED0A39B5EFB42D6218D73909693A46D4173DF4CE32D90CD4BC3AB5D2B4F226AAC84F6FAF0C1C03F4A52FE1A64DAF87BA70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:61:c1:30:71:38:3c:24:80:d5:58:5e:12:
                    9d:1d:4c:a7:46:d8:2e:5c:3c:2b:de:dd:c4:9b:ec:
                    4a:d1:a4:02:b7:37:57:e6:9e:d0:de:19:a0:a0:cd:
                    ff:07:55:1d:fd:0d:38:1f:61:d7:00:56:80:9a:d8:
                    5a:68:23:fd:d6:04:f2:d1:df:c7:e9:f8:34:56:99:
                    fa:c4:9f:9f:a6:f8:84:ed:ac:fe:9a:78:0d:8a:e4:
                    7c:a8:e9:ff:51:3a:e9:05:ef:3f:1a:cc:8f:23:48:
                    ad:73:f1:9c:c0:0f:65:5b:cd:95:a6:83:b6:7e:57:
                    b6:b4:e9:17:aa:76:89:ee:58:28:45:5c:a5:56:7f:
                    8f:c7:36:1c:32:6b:af:32:c2:47:e4:6b:55:1d:a3:
                    8e:37:3c:50:22:34:63:00:25:52:0f:19:71:65:9d:
                    d1:1a:e2:52:7c:68:3e:90:93:6e:96:26:33:f2:fb:
                    91:ba:57:55:09:58:a3:12:39:71:8e:60:1a:f6:77:
                    6c:69:65:f9:05:f3:75:19:c3:08:71:5f:ae:fe:d0:
                    a3:9b:5e:fb:42:d6:21:8d:73:90:96:93:a4:6d:41:
                    73:df:4c:e3:2d:90:cd:4b:c3:ab:5d:2b:4f:22:6a:
                    ac:84:f6:fa:f0:c1:c0:3f:4a:52:fe:1a:64:da:f8:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0C:7C:04:46:B8:24:8A:5D:B5:49:D0:E6:47:89:FB:13:51:FA:44
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8023::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:29:bd:a8:cd:93:52:20:3f:b3:98:14:ad:24:94:0f:0b:86:
         38:6b:6e:5b:18:29:fd:eb:e9:12:30:71:91:29:27:74:fb:a2:
         8e:d2:cb:b4:d6:fb:e4:50:99:bc:57:52:ff:0b:40:b3:f8:5c:
         69:dd:a4:bc:52:12:ec:9c:97:d4:34:91:92:14:bc:39:d9:58:
         3c:1e:de:90:13:66:e8:5a:0b:fc:17:8e:ac:3d:9f:38:80:40:
         7b:ad:61:70:21:e4:cd:2d:4f:13:7b:9d:da:f4:e0:c7:f9:46:
         b9:df:60:bd:fa:73:36:13:35:2b:b7:70:cf:44:f1:7e:63:a5:
         3d:65:17:82:68:59:d3:50:49:c5:09:25:cb:b3:a5:79:47:fd:
         a1:39:bf:6d:99:99:86:6a:99:f6:87:9f:7f:84:5e:e0:38:ae:
         57:d9:b1:ef:b9:40:19:07:82:78:4d:2f:81:c6:80:0c:d2:c6:
         22:e0:b1:bf:fd:c8:57:48:b2:13:a1:10:4a:36:5f:87:23:a7:
         c3:df:8a:32:59:ca:53:35:b2:0d:8f:08:bd:8d:18:b0:eb:09:
         03:95:3e:8f:ff:ae:d3:2e:2c:41:3f:0f:fd:0d:84:9e:9a:fe:
         db:53:6b:0d:a3:cb:e4:28:f9:a9:d4:88:82:7e:71:6f:52:c6:
         91:7c:0e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org