Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3333203d3e20323634353339.roa
File:                     323830343a323132383a3a2f33322d3333203d3e20323634353339.roa (raw, json)
Hash identifier:          Ng0a8zsp9VqV0ihUlRbfMWnyunQhnWJN6JINd6NOWmA=
Subject key identifier:   5C:94:6C:DB:DB:9A:44:7C:D9:79:00:36:19:80:B5:92:F8:C9:62:4C
Certificate issuer:       /CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
Certificate serial:       0C9D7E377026DE64859A1BE6037DA809D7FEE291
Authority key identifier: D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3333203d3e20323634353339.roa
Signing time:             Wed 19 Jun 2024 21:20:59 +0000
ROA not before:           Wed 19 Jun 2024 21:15:59 +0000
ROA not after:            Wed 18 Jun 2025 21:20:59 +0000
asID:                     264539
IP address blocks:        2804:2128::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl
                          rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:45:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9d:7e:37:70:26:de:64:85:9a:1b:e6:03:7d:a8:09:d7:fe:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D56F5D5D003FE373DB99F5814A096011E33A10BF
        Validity
            Not Before: Jun 19 21:15:59 2024 GMT
            Not After : Jun 18 21:20:59 2025 GMT
        Subject: CN=5C946CDBDB9A447CD97900361980B592F8C9624C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:c0:0e:93:2f:62:24:09:0f:26:f7:b1:c4:
                    49:97:07:de:55:c6:69:f7:60:66:1b:39:25:3c:93:
                    9e:00:7e:34:1a:43:e1:18:8a:76:78:f9:8f:49:d4:
                    22:67:ab:d3:72:92:09:19:a2:54:bf:14:9d:ce:8f:
                    a9:78:e4:cb:66:62:c7:7d:7f:8c:78:b3:54:26:f8:
                    3a:02:8a:d8:b7:47:09:19:47:1c:74:ef:01:e0:f8:
                    31:ac:72:1c:9c:eb:fa:30:6a:0b:f3:83:7c:40:70:
                    1e:c2:58:48:eb:7b:e9:b9:e0:cd:7b:a8:ca:4e:7e:
                    8e:09:74:d0:42:5e:3c:8d:9f:b9:08:11:d1:ee:51:
                    bc:90:75:04:6d:f0:b7:7d:da:36:aa:d2:ac:31:02:
                    f0:fc:d2:23:59:03:5f:23:32:ec:eb:f9:40:f0:6a:
                    01:d2:4a:8f:47:ad:f4:eb:03:12:d8:50:c0:6f:bc:
                    eb:95:24:71:b7:7a:1b:7d:1f:13:19:40:73:17:2e:
                    70:27:21:a5:ba:08:ab:8b:ff:f4:41:10:98:14:e4:
                    93:18:79:48:42:81:f7:44:6c:f9:2a:fe:6c:0b:19:
                    f8:0f:4e:3e:e1:23:83:63:ed:50:3e:53:94:f2:11:
                    ab:28:94:d3:67:ee:04:21:ff:bf:65:62:90:97:ee:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:94:6C:DB:DB:9A:44:7C:D9:79:00:36:19:80:B5:92:F8:C9:62:4C
            X509v3 Authority Key Identifier:
                keyid:D5:6F:5D:5D:00:3F:E3:73:DB:99:F5:81:4A:09:60:11:E3:3A:10:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/D56F5D5D003FE373DB99F5814A096011E33A10BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D56F5D5D003FE373DB99F5814A096011E33A10BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/0/323830343a323132383a3a2f33322d3333203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2128::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:21:55:d5:58:7c:3e:9f:f7:e9:d6:89:42:a1:d0:20:e5:
         0c:1b:a0:ce:73:5f:2b:3a:93:bb:f7:81:9b:9e:95:02:f6:dc:
         97:4f:d5:86:55:45:22:f2:b2:4a:fc:f5:45:fe:84:12:99:12:
         31:af:ab:4e:77:d8:f1:6b:a4:64:60:20:93:f8:c2:f1:cb:73:
         90:4d:14:c4:37:8c:8c:aa:1d:ba:df:33:9f:49:74:58:8b:af:
         ea:a3:1c:26:d0:d1:28:04:df:28:04:cc:13:31:8f:26:a2:c7:
         35:c3:3b:17:c9:45:d3:13:e9:16:ad:43:73:7c:a8:7a:29:06:
         60:5b:d5:3b:f6:a4:34:5a:af:6e:a4:ef:d3:17:55:81:5d:1a:
         30:82:57:fb:a7:56:94:21:5e:6a:0e:8a:8f:fc:4c:a9:b0:26:
         a6:3a:e6:8f:e7:9a:07:f7:74:3e:fd:48:f3:a1:5a:89:f4:43:
         29:2d:e2:88:d1:00:e6:34:35:d1:fb:b7:35:3b:7e:de:dd:c6:
         66:b7:d8:6c:6d:56:b2:25:77:50:b0:a3:84:e9:f5:91:d0:4d:
         36:19:1b:0b:48:f5:c5:c5:63:a4:d3:4d:85:68:31:6b:fb:4a:
         46:bd:be:ae:fb:ce:ab:ab:df:62:7b:c2:9e:f8:44:36:31:8b:
         90:3c:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:56 2024 by rpki-client on console-ams.rpki-client.org