Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a343030303a3a2f33342d3334203d3e20323635313138.roa
File:                     323830343a326163383a343030303a3a2f33342d3334203d3e20323635313138.roa (raw, json)
Hash identifier:          sJaGAHvWZoyvcLbYthD9DzRm3wJtEh6f+m0M1kR+9RI=
Subject key identifier:   55:68:F7:E2:C9:CE:18:81:9B:06:CF:2A:B2:5A:A8:E7:11:D4:6B:EB
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       6F6ABA4406FD7E2F983FA36F9FEB5FA9B93D95D9
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a343030303a3a2f33342d3334203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:09 +0000
ROA not before:           Thu 04 Apr 2024 07:10:09 +0000
ROA not after:            Thu 03 Apr 2025 07:15:09 +0000
asID:                     265118
IP address blocks:        2804:2ac8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6a:ba:44:06:fd:7e:2f:98:3f:a3:6f:9f:eb:5f:a9:b9:3d:95:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:09 2024 GMT
            Not After : Apr  3 07:15:09 2025 GMT
        Subject: CN=5568F7E2C9CE18819B06CF2AB25AA8E711D46BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:ea:67:06:db:3f:47:b1:c3:3f:28:b8:97:
                    d5:b8:df:54:df:0b:d3:33:d7:d8:cc:d0:77:44:e4:
                    10:1c:de:16:56:50:5b:e3:dd:f1:73:2a:39:71:76:
                    36:60:03:a2:1c:96:72:8d:02:3a:c9:fc:0c:af:1f:
                    da:7b:87:4d:6b:a5:ac:5d:dc:0d:5e:ed:0e:ad:a3:
                    5b:de:ef:cd:3e:bd:8f:37:c7:57:f5:10:03:40:f0:
                    6d:3c:47:c1:6d:92:ee:5b:c9:f0:de:6b:7b:62:ba:
                    1f:df:8e:c9:72:8a:9a:35:a9:0f:03:f2:45:39:23:
                    48:3d:24:ab:96:e1:6a:be:ec:5a:ed:43:b0:39:3a:
                    d9:1d:86:36:6a:84:4d:7f:1f:b9:2f:5e:6c:91:b7:
                    f4:75:ff:1a:4a:a2:12:d1:75:f7:d8:8c:82:5f:56:
                    c1:4b:f8:09:b2:29:6b:b9:02:b3:ca:b7:a9:2b:69:
                    ff:65:5c:da:38:32:a0:b1:c1:36:02:91:7d:47:2c:
                    52:b6:39:32:17:03:76:38:93:e7:c7:ee:c3:d6:2f:
                    de:e3:8d:3d:02:83:b9:11:00:8e:87:57:cd:d6:97:
                    b5:fd:28:02:d7:ca:1a:31:9e:d9:99:79:ee:4e:30:
                    21:62:8b:99:c8:2a:cc:f8:6c:44:b1:e1:be:de:8a:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:68:F7:E2:C9:CE:18:81:9B:06:CF:2A:B2:5A:A8:E7:11:D4:6B:EB
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a343030303a3a2f33342d3334203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a1:e4:44:14:04:0f:09:fb:5c:49:9e:a8:82:54:9c:70:00:e7:
         9e:09:b7:5b:be:92:3f:62:e3:71:5a:e7:89:0e:8a:b0:5f:77:
         44:12:7e:5e:c9:33:22:a9:bc:f0:c6:a0:d8:46:b4:cd:b0:03:
         42:ed:bd:ce:fb:1d:46:27:d6:d6:a1:05:90:7b:5b:0e:e9:6d:
         9d:a3:e4:a7:f9:11:91:d2:3e:eb:16:4c:a6:69:39:bc:f3:fa:
         3c:36:7c:c4:db:a9:7b:61:b2:42:81:1e:84:75:c5:58:0f:c9:
         31:f8:97:a4:92:62:ef:c1:7a:b9:aa:07:9b:bc:67:50:62:25:
         35:0c:aa:a7:32:a8:0c:59:34:5b:00:9c:46:19:0f:f6:54:b5:
         92:4e:1d:21:9e:d2:9a:f6:f0:ed:b2:e2:59:86:59:10:42:de:
         26:e1:1e:46:56:bf:e2:a1:57:11:c1:55:91:a7:7e:86:93:a5:
         75:e7:3e:17:21:15:2d:3a:fa:a2:03:5e:86:da:0a:09:2f:87:
         44:60:12:93:e5:f3:51:c2:5d:2e:14:29:f9:ec:55:52:0c:21:
         16:1f:34:e2:9c:c8:7c:3e:d2:dd:92:1a:71:23:7f:f9:50:08:
         a1:fd:34:86:13:7d:9e:81:42:2c:e1:c6:8b:21:e6:21:bc:6a:
         72:84:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org