Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          797txts6h2oapjBGayAOZGaBf0n4e8IqaT7PIDd6NLU=
Subject key identifier:   70:A7:21:7B:B0:8F:0B:F3:8A:97:63:3E:48:B0:9C:87:57:87:21:FB
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       3BBABB0ADC69477F32C039C3C30958B9A36E89FA
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 21 May 2024 20:06:18 +0000
ROA not before:           Tue 21 May 2024 20:01:18 +0000
ROA not after:            Tue 20 May 2025 20:06:18 +0000
asID:                     262687
IP address blocks:        2804:385c:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ba:bb:0a:dc:69:47:7f:32:c0:39:c3:c3:09:58:b9:a3:6e:89:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: May 21 20:01:18 2024 GMT
            Not After : May 20 20:06:18 2025 GMT
        Subject: CN=3082010A0282010100D38C43A8FD20FB0F7C19A58312B62190334D35CBC2F2A6A3B113991B59F5CD914ECD4A2A65DD3BBDD0D0779611DB293EFDAD1CE1C8C4E3F9634A5044C7D71CCE377AD189FBD0E6FFF4C12391B3B1D77286F938A9596F93C226ED608F498C7D8DC25E600A8FE71467ED18530E4ACD51D798C14B49AFFF8F0756DDA8637511BFFB6E4A4C9C04ACAC0B444F5BF97F270D43196076B8235102FE6D21D8857DC3581C8734FD8518BB258F3C43A3A41BF1C3AB026C1748D62E08535291C583530C9626C36EFCAF4D04A84BB2ECCDBCAF832EDDA1AA27C97FC4872940530182FC7342CBFBF591A7EDEF74572A1002EE0548733BA263F6FE3B13E70F3686578DF719C0370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:43:a8:fd:20:fb:0f:7c:19:a5:83:12:b6:
                    21:90:33:4d:35:cb:c2:f2:a6:a3:b1:13:99:1b:59:
                    f5:cd:91:4e:cd:4a:2a:65:dd:3b:bd:d0:d0:77:96:
                    11:db:29:3e:fd:ad:1c:e1:c8:c4:e3:f9:63:4a:50:
                    44:c7:d7:1c:ce:37:7a:d1:89:fb:d0:e6:ff:f4:c1:
                    23:91:b3:b1:d7:72:86:f9:38:a9:59:6f:93:c2:26:
                    ed:60:8f:49:8c:7d:8d:c2:5e:60:0a:8f:e7:14:67:
                    ed:18:53:0e:4a:cd:51:d7:98:c1:4b:49:af:ff:8f:
                    07:56:dd:a8:63:75:11:bf:fb:6e:4a:4c:9c:04:ac:
                    ac:0b:44:4f:5b:f9:7f:27:0d:43:19:60:76:b8:23:
                    51:02:fe:6d:21:d8:85:7d:c3:58:1c:87:34:fd:85:
                    18:bb:25:8f:3c:43:a3:a4:1b:f1:c3:ab:02:6c:17:
                    48:d6:2e:08:53:52:91:c5:83:53:0c:96:26:c3:6e:
                    fc:af:4d:04:a8:4b:b2:ec:cd:bc:af:83:2e:dd:a1:
                    aa:27:c9:7f:c4:87:29:40:53:01:82:fc:73:42:cb:
                    fb:f5:91:a7:ed:ef:74:57:2a:10:02:ee:05:48:73:
                    3b:a2:63:f6:fe:3b:13:e7:0f:36:86:57:8d:f7:19:
                    c0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A7:21:7B:B0:8F:0B:F3:8A:97:63:3E:48:B0:9C:87:57:87:21:FB
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:59:fa:a5:94:1e:f3:4b:5a:5c:b9:a2:72:54:56:bc:00:
         a8:15:36:62:2d:25:e2:ab:2b:41:0f:b4:36:dc:be:f4:47:7a:
         e6:ea:d1:19:93:17:3e:ff:86:c9:b7:52:d6:c4:7c:5d:ad:e7:
         a2:a4:0a:62:77:b6:38:11:b8:20:e5:a4:87:e5:18:d3:3c:6b:
         3d:ef:a1:18:1c:51:f5:bf:42:eb:e4:75:6f:71:ca:ef:ae:1e:
         b6:c0:02:42:0f:83:5c:e0:87:55:89:95:71:8b:f0:7e:36:c5:
         32:f4:b1:6e:76:f9:14:88:2f:1b:fc:4a:7a:16:80:6c:70:00:
         8f:a4:2f:06:19:07:4b:6d:5c:94:a2:b1:93:8d:c6:35:36:eb:
         cc:bf:ca:c9:51:c5:22:b7:2c:78:7a:6a:b8:4a:20:c4:fe:f6:
         dd:2c:2b:60:ed:22:bc:09:79:f2:83:21:73:eb:f6:06:9a:4c:
         5d:27:ee:70:0f:67:d1:85:fe:87:0e:3f:27:42:b8:5a:9f:33:
         6e:d8:9f:08:bb:8f:66:06:d8:4b:90:58:a2:b7:31:35:e6:ec:
         a8:5c:79:f9:8f:2e:ed:76:2c:f3:32:38:cc:be:7b:ee:e5:4f:
         4d:ce:68:aa:a9:5a:3d:e9:03:07:2b:7d:75:97:82:d6:7a:07:
         37:69:43:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org