Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa
File:                     323830343a326163383a3a2f33332d3333203d3e20323635313138.roa (raw, json)
Hash identifier:          vUa4U9sBUfoeNYpVZ72iSpg5bgTtx7FcbsvTzbfpkP8=
Subject key identifier:   D0:6D:9F:62:FC:41:79:0B:AD:8F:86:78:0D:76:C7:CB:8F:C5:C8:48
Certificate issuer:       /CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
Certificate serial:       061510103DCC4376F4CA16485BDAB418DAAAA080
Authority key identifier: 5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa
Signing time:             Thu 04 Apr 2024 07:15:08 +0000
ROA not before:           Thu 04 Apr 2024 07:10:08 +0000
ROA not after:            Thu 03 Apr 2025 07:15:08 +0000
asID:                     265118
IP address blocks:        2804:2ac8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:10:10:3d:cc:43:76:f4:ca:16:48:5b:da:b4:18:da:aa:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FC5F2A5F8624C96369764264B21B8C29BB52394
        Validity
            Not Before: Apr  4 07:10:08 2024 GMT
            Not After : Apr  3 07:15:08 2025 GMT
        Subject: CN=D06D9F62FC41790BAD8F86780D76C7CB8FC5C848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:89:91:fc:48:99:ce:1b:9b:64:18:b0:5f:
                    59:73:42:35:87:72:ac:62:f3:16:e3:fb:43:09:b4:
                    65:5a:a1:2d:e7:71:87:c6:a3:de:b1:d4:e9:ed:80:
                    1b:ba:52:3a:f1:b9:7d:c7:4c:55:00:31:c0:20:0c:
                    e0:26:64:da:fb:71:29:6a:c4:4c:c5:d0:aa:6e:b0:
                    30:82:2d:97:75:fc:2f:25:cb:52:b0:5b:0e:f1:72:
                    95:d5:a1:94:db:05:f6:f6:a1:ec:27:9b:53:3c:d9:
                    47:3e:46:b1:2b:6e:b2:d9:9f:4b:c9:4a:97:9c:c7:
                    d2:4f:f3:d4:c6:4f:93:4d:6e:90:6f:b6:ff:74:f0:
                    1a:78:91:5a:ba:e0:6a:4e:18:9a:0c:1a:de:2a:0d:
                    b5:e1:15:47:f0:30:c5:3e:c3:6c:86:91:66:18:37:
                    77:6e:c1:ec:d5:bd:5d:77:39:df:cf:dd:05:69:e1:
                    74:2e:ca:b0:d7:4c:5f:05:d9:e7:be:e7:6a:2f:7e:
                    60:27:b8:da:d9:04:62:16:ad:47:92:f6:25:23:a4:
                    c2:04:6a:e5:f5:97:67:fd:3b:c4:ba:7a:0b:91:5d:
                    b6:77:c8:f3:31:e2:60:70:17:25:b2:6f:33:26:5b:
                    63:00:74:46:dd:15:8f:03:fc:43:32:5c:a8:80:ac:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6D:9F:62:FC:41:79:0B:AD:8F:86:78:0D:76:C7:CB:8F:C5:C8:48
            X509v3 Authority Key Identifier:
                keyid:5F:C5:F2:A5:F8:62:4C:96:36:97:64:26:4B:21:B8:C2:9B:B5:23:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FC5F2A5F8624C96369764264B21B8C29BB52394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/1/323830343a326163383a3a2f33332d3333203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:ba:fd:1f:9a:a6:d0:f1:0e:7c:61:4e:26:95:d6:d7:16:
         83:dc:5a:d8:a5:35:ea:ef:75:43:8c:71:d4:3a:d7:8d:12:b4:
         39:e8:fc:a0:80:ca:b3:73:4a:ce:d8:49:3a:e1:db:bc:91:99:
         bd:ba:ff:d4:17:3b:30:64:7c:44:80:a1:c4:32:b5:a2:6c:6a:
         ef:23:08:67:57:f9:1a:b9:b6:d8:85:22:64:b5:ff:05:db:dc:
         f4:6c:12:07:a4:0f:a5:53:9b:94:07:c8:5c:96:72:2a:c1:13:
         11:04:3e:01:2b:fa:66:e3:61:b1:3e:cf:ca:02:e2:7a:50:ed:
         28:19:d4:ae:a3:56:5f:76:87:68:19:cb:0f:fe:69:8c:21:f8:
         8b:1d:e8:22:f6:78:a3:86:3f:62:62:07:7f:e8:d5:fd:38:41:
         3d:b2:0b:e7:33:5f:e4:48:c5:5b:21:eb:84:2b:43:6f:60:65:
         5a:67:f2:c6:74:ae:27:e9:98:76:a7:31:42:94:d5:38:8a:b2:
         02:f0:c4:3b:24:6e:98:52:12:98:9c:ef:c1:9b:c5:e7:cd:21:
         05:1c:e8:70:5d:a3:f6:14:5e:9c:c8:72:52:f2:df:6f:63:f2:
         e6:e7:41:5e:f4:77:88:30:26:95:92:ba:e1:b3:3d:f3:4a:6c:
         a7:1d:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org