Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3438203d3e20323636353238.roa
File:                     323830343a336436343a3a2f33322d3438203d3e20323636353238.roa (raw, json)
Hash identifier:          dPDRZUuyCNAERLEW1uzp1kTsm2RpRcwRO5Ac4u15fIk=
Subject key identifier:   29:FD:D1:3F:16:57:DE:13:EC:A0:63:AE:5D:C1:17:8F:4A:6C:06:DE
Certificate issuer:       /CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
Certificate serial:       665B235474E6FB5EED194601C5A2D60D67047871
Authority key identifier: CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3438203d3e20323636353238.roa
Signing time:             Tue 21 May 2024 01:41:41 +0000
ROA not before:           Tue 21 May 2024 01:36:41 +0000
ROA not after:            Tue 20 May 2025 01:41:41 +0000
asID:                     266528
IP address blocks:        2804:3d64::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl
                          rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5b:23:54:74:e6:fb:5e:ed:19:46:01:c5:a2:d6:0d:67:04:78:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB5195089186F45B7DB6BF0AFE46DFC5AFB47709
        Validity
            Not Before: May 21 01:36:41 2024 GMT
            Not After : May 20 01:41:41 2025 GMT
        Subject: CN=29FDD13F1657DE13ECA063AE5DC1178F4A6C06DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:c7:7f:d9:9b:b7:01:3f:bb:a1:89:50:cd:
                    33:99:93:43:5f:61:ff:64:4b:7e:75:99:09:02:1c:
                    a7:0b:91:e1:69:76:60:9d:c3:09:74:33:49:80:08:
                    ea:b8:b4:bc:6b:18:2d:a8:63:02:56:f1:3d:3d:f2:
                    19:00:0f:e0:2a:82:fc:30:6d:24:85:c0:06:ac:02:
                    95:c5:6a:17:9e:10:54:36:9f:40:50:91:12:47:f3:
                    9d:35:f9:76:dd:34:a9:91:de:76:94:cc:c7:12:17:
                    74:75:39:91:61:ae:03:39:b1:ce:3f:33:0a:07:32:
                    78:af:6e:3a:3b:d8:d6:e5:70:85:96:7e:8d:1a:ff:
                    c0:f3:6d:e8:20:1d:a9:9d:60:35:ac:db:18:51:3e:
                    6c:78:00:b0:9c:c9:0f:90:a9:56:20:7e:95:41:2e:
                    b3:6b:4a:a3:11:c7:20:e9:35:09:e2:c5:6d:f1:59:
                    2b:34:eb:a6:8a:5f:5a:e4:9c:1f:66:30:d6:ed:62:
                    30:5b:ac:d9:61:1b:52:b9:7d:35:61:5b:f8:3f:57:
                    51:0a:d4:d7:e5:41:e9:a9:f0:e1:0f:03:5a:7c:44:
                    78:10:dc:d7:1c:82:23:76:1d:d9:16:86:cd:27:9b:
                    c0:13:4f:ce:dc:a2:63:a7:bd:f4:ab:8a:91:93:9b:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FD:D1:3F:16:57:DE:13:EC:A0:63:AE:5D:C1:17:8F:4A:6C:06:DE
            X509v3 Authority Key Identifier:
                keyid:CB:51:95:08:91:86:F4:5B:7D:B6:BF:0A:FE:46:DF:C5:AF:B4:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB5195089186F45B7DB6BF0AFE46DFC5AFB47709.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/1/323830343a336436343a3a2f33322d3438203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:ef:9a:1b:78:f5:be:42:fc:f3:a3:7a:eb:65:7e:fb:5b:92:
         c6:b0:74:e3:5f:2a:7d:5a:00:f2:af:31:b2:8c:5b:4b:de:44:
         19:90:e6:87:de:29:62:ec:d3:8f:a9:b9:12:1f:95:f9:0d:10:
         4b:43:e5:95:b2:6b:8c:e9:f4:a2:2b:b0:1b:f1:5b:6f:49:24:
         6c:f4:2e:4f:ac:ae:22:53:1d:a9:57:e4:d6:10:1f:25:f7:c7:
         3f:03:69:42:38:04:9c:ce:60:e8:3b:17:2f:6b:a0:b4:ce:43:
         4e:91:85:a6:55:7e:fb:b1:4b:e8:3e:5b:b5:22:6e:9b:8f:da:
         62:6c:8c:2c:1c:79:fb:eb:ab:20:f9:41:81:5f:44:67:40:0a:
         70:f4:7f:81:39:7b:07:c0:14:75:49:40:b4:ad:17:28:1a:a8:
         ee:40:f0:b1:5c:9e:c6:f3:76:c0:84:32:d0:8b:e0:44:4a:92:
         72:de:3b:e0:44:2f:f3:01:31:72:43:d3:7f:3a:5a:a6:f9:2f:
         3b:de:24:95:ff:b2:5c:32:6c:37:47:a2:2b:88:85:e3:81:02:
         4b:2a:ca:35:b3:d4:89:54:c9:70:a2:5c:b4:67:d1:41:c1:49:
         c7:09:3b:35:3f:0e:b6:2c:c5:61:5c:32:33:2b:69:0a:94:d7:
         2e:a6:3f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:58 2024 by rpki-client on console-fra.rpki-client.org