Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          Vkm+v/dhSQRvqhR6LNGheuy1XV1Gqpd0kgGKyK7XQyk=
Subject key identifier:   34:2C:2F:AF:C2:98:B6:12:A9:D9:B8:D5:2E:9F:2D:16:84:D3:8C:B2
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       56BF08E4312B894679C715E6C2CE7FD240D8065A
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:19 +0000
ROA not before:           Tue 21 May 2024 20:01:19 +0000
ROA not after:            Tue 20 May 2025 20:06:19 +0000
asID:                     262687
IP address blocks:        2804:385c:8c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:08:e4:31:2b:89:46:79:c7:15:e6:c2:ce:7f:d2:40:d8:06:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:19 2024 GMT
            Not After : May 20 20:06:19 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:61:c5:98:6f:fd:1c:7d:eb:d1:ca:ab:b0:35:
                    3a:e8:6b:c4:d2:70:46:5e:74:c3:97:d2:b0:61:c1:
                    26:9c:fe:23:4e:66:ed:2b:a5:69:52:13:ff:f5:53:
                    bb:d1:d4:bf:30:a0:75:41:f0:11:11:af:00:22:5b:
                    85:fd:da:81:6c:aa:ad:84:91:76:cd:67:a4:a9:48:
                    20:da:c2:19:7d:cc:83:cd:b1:79:4c:b0:29:f5:ce:
                    79:c4:02:94:20:42:9e:1f:17:8d:de:81:6e:de:42:
                    79:e5:80:31:26:b3:a5:17:dc:2e:d6:8d:38:65:e9:
                    28:05:15:46:a2:cb:36:b4:75:eb:35:34:17:ad:78:
                    12:30:95:7a:d8:0b:72:be:18:23:e2:c1:f2:91:9e:
                    f3:f2:80:27:21:67:d8:7e:7c:9d:18:d3:60:8b:43:
                    4e:f7:93:bb:0a:38:07:18:35:1f:86:6b:d4:30:5f:
                    ce:2f:b2:cc:53:bf:73:9c:d8:e5:cb:d9:80:45:2f:
                    cc:d7:38:3d:ec:b9:ff:9b:98:5a:11:58:3e:c1:8d:
                    9a:7e:0c:13:31:38:d7:e7:45:9f:57:4e:e4:38:46:
                    8a:6e:e5:30:3b:57:93:51:dd:c5:c4:86:50:04:86:
                    71:7b:63:95:67:95:8e:63:eb:31:29:80:ab:b9:f9:
                    c6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2C:2F:AF:C2:98:B6:12:A9:D9:B8:D5:2E:9F:2D:16:84:D3:8C:B2
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:3a:75:cc:c3:cc:1d:1f:e0:74:70:d6:c4:35:71:f6:a5:54:
         09:60:bb:30:ab:65:b6:9d:48:f5:ef:98:18:31:d4:69:df:61:
         a4:4a:97:93:9d:c4:1b:94:0e:16:ce:6f:8d:b7:36:6d:d4:13:
         67:bc:8a:70:e1:54:11:83:f0:65:07:5b:90:5b:fa:f0:ec:9d:
         ab:8d:41:58:da:54:67:fa:0b:46:18:56:90:ef:5a:d0:f0:98:
         0f:e7:76:0d:cf:52:fb:0d:3d:a3:ef:8c:a1:4b:be:91:68:1f:
         7f:42:e9:0d:67:98:c7:88:83:3f:3c:13:55:58:73:d0:66:05:
         0c:dd:dc:29:8f:73:e3:a3:95:b3:00:66:b8:6e:86:c4:23:29:
         9f:5d:f3:e0:8c:d9:1f:a6:48:2d:7d:f5:8e:ab:93:52:c7:19:
         98:67:35:54:45:0a:be:18:4c:e4:a7:72:9c:f6:fc:b4:25:58:
         ed:f4:a6:38:38:15:5b:9b:01:ac:86:cd:2f:50:b7:3f:54:8a:
         6b:99:a3:51:7a:61:bb:1c:d6:ec:55:63:4b:f1:b1:ea:7f:be:
         48:75:9b:cd:24:c5:16:bc:11:b3:44:df:ae:3a:08:d8:fd:5f:
         3e:17:ee:c6:fc:46:f7:d0:c6:dd:0a:69:17:0e:31:0b:f9:9a:
         07:f8:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org