Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
File:                     323830343a6436343a3a2f33322d313238203d3e203532363137.roa (raw, json)
Hash identifier:          UjZLzXB1UPDOrpA8yV+H8Q06Apai8Ieq4L+8cQNKaLI=
Subject key identifier:   0D:3A:7A:D5:55:43:8E:0D:F4:45:F8:EB:40:2B:14:ED:35:86:9B:CC
Certificate issuer:       /CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
Certificate serial:       5E76BC0E96AD2EAED869F9A9421F641718E4849F
Authority key identifier: D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa
Signing time:             Thu 04 Apr 2024 12:40:27 +0000
ROA not before:           Thu 04 Apr 2024 12:35:27 +0000
ROA not after:            Thu 03 Apr 2025 12:40:27 +0000
asID:                     52617
IP address blocks:        2804:d64::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl
                          rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 15:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:76:bc:0e:96:ad:2e:ae:d8:69:f9:a9:42:1f:64:17:18:e4:84:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D52EA87CB6ED7499343693851F4F93C4D28AAD65
        Validity
            Not Before: Apr  4 12:35:27 2024 GMT
            Not After : Apr  3 12:40:27 2025 GMT
        Subject: CN=0D3A7AD555438E0DF445F8EB402B14ED35869BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:87:17:2a:11:5f:e4:9b:77:a8:21:9c:1c:0d:
                    8e:90:e1:63:fc:a1:78:ae:27:93:40:8c:35:25:c3:
                    7d:49:ca:3b:78:72:6d:d1:da:65:70:68:29:40:07:
                    c2:7b:d1:2f:9a:6f:94:16:65:c2:63:a8:98:8f:d6:
                    d6:15:ed:86:59:4d:2a:37:f4:6a:b7:7f:2f:91:de:
                    e1:78:7d:80:83:5b:29:ac:ad:cd:3a:4f:29:3e:7a:
                    2f:4b:08:94:f5:b2:af:98:8a:b3:cd:68:46:88:19:
                    06:14:98:66:a3:65:0f:76:ff:94:3f:1d:e5:d4:8c:
                    af:7e:ae:68:30:e0:70:6b:10:15:54:5b:3d:95:d4:
                    6d:c6:79:50:4e:c9:34:99:37:8d:bc:87:60:0d:44:
                    5f:72:3c:e9:7f:e1:68:14:38:f2:b6:fa:0c:4e:d0:
                    bc:4d:3e:ad:59:88:6f:7d:2a:29:91:92:82:dd:cd:
                    cc:c8:eb:18:6b:16:6d:74:3e:a9:b4:e8:8e:b8:e9:
                    b9:aa:ff:03:f7:5f:1c:d4:2f:76:04:7e:87:e1:ac:
                    c6:64:99:07:5d:18:8e:5b:8b:25:23:5d:32:59:04:
                    c3:3d:fa:50:f5:5f:79:c2:f8:5d:3a:e0:06:e4:9e:
                    ce:a6:74:7c:15:49:ea:3f:8e:91:6b:40:92:f9:0a:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:7A:D5:55:43:8E:0D:F4:45:F8:EB:40:2B:14:ED:35:86:9B:CC
            X509v3 Authority Key Identifier:
                keyid:D5:2E:A8:7C:B6:ED:74:99:34:36:93:85:1F:4F:93:C4:D2:8A:AD:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D52EA87CB6ED7499343693851F4F93C4D28AAD65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/1/323830343a6436343a3a2f33322d313238203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:50:92:47:f3:5a:a5:d0:32:42:9c:71:82:1b:e7:f4:af:
         3c:16:a0:ba:f3:83:eb:aa:a1:04:05:4f:ba:64:cf:b1:de:88:
         32:bb:9b:a7:be:62:d4:86:c5:5a:4b:fa:c4:b4:27:dd:34:01:
         1d:57:5d:66:a4:e4:a3:5f:8e:1c:af:de:45:c6:a6:02:61:50:
         fc:dc:fd:3b:79:a0:8e:82:5d:ff:ce:b7:0b:1a:24:c2:52:58:
         5b:ee:99:01:f8:8b:06:90:a2:f7:cc:a8:4a:14:86:41:85:ba:
         cd:09:45:3c:71:d8:70:07:4b:e0:ad:f8:ff:f0:f7:ac:0e:24:
         63:16:58:96:e1:b3:f4:26:85:6f:19:41:74:ac:ad:f9:94:72:
         bf:2b:9d:c6:9b:c5:df:cd:04:b4:4e:61:09:ed:8c:d3:f6:d7:
         52:11:70:41:5b:9b:54:87:49:e9:20:0c:e5:31:88:c2:d0:a0:
         4a:88:ed:96:ee:a8:c7:f4:36:5b:7e:9d:86:e2:71:37:70:00:
         7c:02:cd:67:93:a7:e9:a8:c8:d5:1b:e9:58:6a:f6:d9:e5:7f:
         a4:7d:a8:49:e0:02:cd:53:68:02:b0:36:a7:64:ad:9c:0e:99:
         90:a5:e8:a2:fc:79:1a:82:bb:23:a5:ad:11:61:98:5c:d2:7e:
         65:11:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 16:31:14 2024 by rpki-client on console-fra.rpki-client.org