Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
File:                     323830343a356463633a3a2f33322d313238203d3e20323638393933.roa (raw, json)
Hash identifier:          cAFpkWubSvSUcPjgmQ78k9UOBkcGOsOMnL7bZ64XDSg=
Subject key identifier:   03:28:0A:FB:9D:B7:1D:B8:0B:9C:36:92:22:68:BF:A1:07:8B:73:4B
Certificate issuer:       /CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
Certificate serial:       4337D572D0B3724D394A4FE1AF4A88262BB48B3C
Authority key identifier: DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa
Signing time:             Thu 12 Sep 2024 12:07:27 +0000
ROA not before:           Thu 12 Sep 2024 12:02:27 +0000
ROA not after:            Thu 11 Sep 2025 12:07:27 +0000
asID:                     268993
IP address blocks:        2804:5dcc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl
                          rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:37:d5:72:d0:b3:72:4d:39:4a:4f:e1:af:4a:88:26:2b:b4:8b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035
        Validity
            Not Before: Sep 12 12:02:27 2024 GMT
            Not After : Sep 11 12:07:27 2025 GMT
        Subject: CN=03280AFB9DB71DB80B9C36922268BFA1078B734B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:09:0f:f0:04:eb:95:1d:3d:b9:c0:58:c0:
                    09:ce:41:36:9c:29:0f:9c:ab:d9:31:ba:27:52:17:
                    30:25:d1:3a:f6:2c:a3:44:72:00:6f:e1:34:73:f8:
                    fc:96:e4:22:09:21:51:66:e5:c4:75:ca:a1:e0:14:
                    fc:09:12:09:7f:8d:5c:80:e2:17:49:40:47:55:3a:
                    77:a0:1f:1a:d0:e1:41:5f:58:10:dc:bf:b2:f2:3e:
                    e5:96:74:df:3a:c8:b5:76:9f:1f:19:4a:b4:76:30:
                    85:66:b3:d7:c7:d3:1b:bd:b5:c5:ba:3e:43:ff:90:
                    e8:53:d4:a1:e0:b3:4d:1b:ea:1f:63:6a:09:7e:4a:
                    3f:29:01:66:32:da:a2:1e:00:a8:1a:32:02:85:d0:
                    a1:f3:b2:47:39:bd:14:29:3a:e6:61:f7:ce:37:67:
                    b0:a3:05:99:70:ff:e5:6b:e6:8f:58:4c:d3:3a:25:
                    24:d1:9d:d0:d1:61:b2:78:9b:6e:cd:e9:59:38:91:
                    f5:77:67:c8:24:5e:9a:9d:2f:64:34:e5:84:34:e8:
                    28:d7:f3:8d:4a:ba:b4:90:91:03:37:ae:3a:56:11:
                    fe:6f:e3:fd:5f:64:bf:c3:b3:6f:cb:0e:82:f6:20:
                    b0:1d:33:5e:04:a5:3a:aa:72:08:14:1f:ba:a7:c9:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:28:0A:FB:9D:B7:1D:B8:0B:9C:36:92:22:68:BF:A1:07:8B:73:4B
            X509v3 Authority Key Identifier:
                keyid:DE:4E:C8:FB:8E:4B:9C:58:3B:69:BD:B5:0F:52:7D:D6:B5:9E:80:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE4EC8FB8E4B9C583B69BDB50F527DD6B59E8035.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a3a2f33322d313238203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:5d:ff:5e:2f:c3:eb:8b:7a:3b:c4:51:eb:b0:b3:92:b5:ec:
         f2:d7:e5:eb:70:3d:1a:47:d2:74:47:14:de:d1:ac:88:7c:b4:
         06:71:81:d5:db:c8:d6:f5:e2:5f:d1:07:e4:8a:18:30:25:f8:
         7d:ea:ef:e0:c6:c1:d3:b4:9b:ef:3e:eb:5d:60:2a:c1:94:77:
         37:cb:1c:4c:96:3d:da:6f:ec:67:23:f6:0a:22:e0:06:ce:08:
         c2:4d:37:19:d5:20:38:48:54:bf:f2:37:bc:d4:09:47:98:3b:
         30:a9:39:70:ab:39:95:3e:2b:e8:47:1a:8c:08:76:c0:c0:bb:
         7f:f7:61:c4:64:1c:dc:22:76:fc:0b:98:a2:83:09:9d:8e:d3:
         65:e2:0f:93:a1:0b:0c:d4:1c:c9:06:89:c6:03:00:e8:b4:8b:
         a0:3d:17:47:f3:e6:5f:8c:c9:d5:ef:b1:8e:62:33:20:3a:74:
         7d:c2:30:11:e6:27:b4:b5:d2:f4:2a:eb:a0:e0:c1:a1:0f:68:
         24:59:8a:92:d8:14:54:b5:c2:4d:fa:2e:27:18:19:b9:b0:40:
         2d:dc:89:8f:10:d5:c0:bf:b9:bd:cc:37:c5:25:ee:3e:f9:8e:
         07:55:07:22:71:3f:cf:ce:24:b7:ab:db:3f:52:a0:b7:0b:45:
         bd:2e:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:39 2024 by rpki-client on console-ams.rpki-client.org