Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33322d3332203d3e20323634333131.roa (raw, json)
Hash identifier:          1fbRK90ekFvDy8gdBftG89dpxBBZZfkM7igDksgsG18=
Subject key identifier:   78:8A:92:90:3E:40:15:7F:E2:76:A4:09:0C:F3:1A:29:8E:31:89:5A
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       12BF8922C1F069E90AFFF8C9210406A58A80B55D
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa
Signing time:             Wed 03 Apr 2024 18:30:33 +0000
ROA not before:           Wed 03 Apr 2024 18:25:33 +0000
ROA not after:            Wed 02 Apr 2025 18:30:33 +0000
asID:                     264311
IP address blocks:        2804:25f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bf:89:22:c1:f0:69:e9:0a:ff:f8:c9:21:04:06:a5:8a:80:b5:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Apr  3 18:25:33 2024 GMT
            Not After : Apr  2 18:30:33 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:62:7b:53:80:af:06:bc:c6:05:81:ca:ce:
                    71:7e:4a:96:fa:4a:47:70:86:61:26:c9:24:7d:b5:
                    4b:ca:96:f0:bf:df:78:2f:52:c5:dd:3f:a5:c6:88:
                    d7:6b:f6:7e:5d:5d:b9:13:64:54:e2:8d:b3:8e:c0:
                    f5:d8:17:c9:6b:f9:b6:ac:04:7f:07:bf:a1:23:a7:
                    75:c9:10:50:4d:05:0d:5c:87:bb:2a:28:fb:0f:f0:
                    3e:33:ba:0d:ee:96:ab:31:bd:fe:3c:b0:fd:e5:b3:
                    5b:f1:2b:86:5c:4a:9c:c5:92:33:7c:0a:72:9b:8d:
                    db:a5:04:61:ee:0e:da:0f:43:18:e3:14:48:1f:22:
                    5d:13:68:e0:0c:a7:2e:98:5d:85:91:4c:7b:b4:40:
                    db:18:ab:37:98:34:53:65:49:89:3b:7b:f9:a1:1f:
                    17:f4:09:a3:8b:be:43:a4:40:f2:0a:b6:b5:8c:65:
                    aa:07:b8:b7:5b:88:01:0b:ae:59:fd:fc:8f:3f:a1:
                    e7:35:a5:cf:9f:8a:72:52:4c:30:ab:78:3c:51:06:
                    7a:33:45:e5:ba:78:e0:40:40:ca:a2:0e:46:4a:ee:
                    c3:1d:40:e7:76:d3:f3:6f:e4:82:08:a5:1a:ad:b8:
                    45:74:a6:23:83:6d:fd:ae:b3:56:3e:ce:44:0b:e8:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8A:92:90:3E:40:15:7F:E2:76:A4:09:0C:F3:1A:29:8E:31:89:5A
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a3a2f33322d3332203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:10:67:ce:09:c7:6d:e0:55:92:15:c8:df:a5:c3:ee:58:
         11:48:c6:35:0b:81:39:f8:40:47:f9:01:9b:9b:8e:ee:93:b4:
         2f:b9:ad:f5:06:35:39:3b:59:ff:04:05:b7:af:15:6e:e0:71:
         be:24:8e:69:93:15:2c:ff:19:37:2c:a0:9c:1f:98:3b:71:9c:
         b0:da:94:d1:cc:2a:67:3e:ef:c2:46:f7:3f:aa:95:23:84:1d:
         b0:64:cc:0d:df:39:c3:7c:79:37:d4:df:b5:65:a0:d5:b4:8f:
         ea:f6:4d:1a:6a:8e:36:e3:80:dc:c2:d1:bd:30:41:1f:9a:cd:
         14:3e:fd:7b:97:21:99:0d:6d:fb:a7:39:1b:3a:d3:11:c6:62:
         51:12:e8:35:7e:2b:f4:86:0c:86:b2:f4:c8:5a:c9:72:91:49:
         21:15:e8:dd:aa:81:6f:b9:ff:93:d2:1c:93:db:4b:72:e6:12:
         53:2b:8f:ab:cf:cc:b3:26:d3:25:d3:68:0f:dd:c1:bf:e8:e4:
         74:57:d1:b5:58:87:fa:04:6b:c2:24:4b:bc:c8:b7:3b:58:56:
         c0:7c:6e:ea:9c:f4:08:3d:59:8e:4e:d7:8a:0f:d8:0d:cc:25:
         4c:25:61:3f:ad:be:55:7f:6b:b6:e3:de:7c:b6:06:88:d4:af:
         21:b4:e6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org