Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa
File:                     323830343a316434633a3a2f33322d313238203d3e20323634333539.roa (raw, json)
Hash identifier:          uGlXnHhUOT4Esgwx5E4xMAHyd3YQYid6rSlqKt8EL3w=
Subject key identifier:   A7:60:3B:FF:A2:31:A4:8D:AA:F3:C4:9E:D5:ED:28:CE:AF:F1:FA:F3
Certificate issuer:       /CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
Certificate serial:       4B3E2BE5AB66CB9502B53852B287A0B23B6BDAF9
Authority key identifier: 5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa
Signing time:             Mon 23 Sep 2024 18:14:00 +0000
ROA not before:           Mon 23 Sep 2024 18:09:00 +0000
ROA not after:            Mon 22 Sep 2025 18:14:00 +0000
asID:                     264359
IP address blocks:        2804:1d4c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl
                          rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3e:2b:e5:ab:66:cb:95:02:b5:38:52:b2:87:a0:b2:3b:6b:da:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D
        Validity
            Not Before: Sep 23 18:09:00 2024 GMT
            Not After : Sep 22 18:14:00 2025 GMT
        Subject: CN=A7603BFFA231A48DAAF3C49ED5ED28CEAFF1FAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:b6:9a:d1:2f:70:95:25:ff:14:c8:79:a0:
                    cc:15:3d:9b:b7:b9:02:2d:3a:68:d5:86:94:88:dd:
                    af:4a:75:48:d8:75:91:68:68:26:21:f8:0f:81:01:
                    30:d9:cd:61:be:b6:42:7c:28:d8:ab:a6:1b:10:3e:
                    8b:c6:3e:31:cb:ff:bb:2a:b2:95:0b:1e:69:ea:67:
                    06:a0:07:6f:36:96:a2:c7:a2:20:6d:cc:33:6d:8e:
                    f2:77:2a:05:c9:52:86:62:ce:3b:6f:cf:52:0b:be:
                    57:bb:ea:87:00:c9:ba:0a:b2:e2:61:66:0f:2f:6f:
                    16:5f:be:47:68:86:e0:8d:dc:69:90:79:ca:56:6f:
                    e6:46:a2:01:ec:0d:8e:5e:d3:7d:66:d2:1a:b7:11:
                    b6:13:d7:91:22:df:f8:7a:ef:23:05:81:45:e1:d2:
                    b0:cf:2b:bd:e2:ea:1a:17:df:dc:96:25:42:24:09:
                    1d:87:4f:1f:8b:77:1e:0a:2d:2d:be:fa:3b:b9:46:
                    f2:17:ba:84:96:96:d5:c4:ef:97:06:97:dd:79:35:
                    20:ce:bc:25:8d:2d:38:57:5d:9a:c3:a8:68:a5:a7:
                    35:54:a3:1b:bf:ad:7d:d5:e7:88:e0:ce:f4:45:19:
                    55:9f:b7:3c:f4:88:b1:91:4d:16:a6:ea:0c:35:8e:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:60:3B:FF:A2:31:A4:8D:AA:F3:C4:9E:D5:ED:28:CE:AF:F1:FA:F3
            X509v3 Authority Key Identifier:
                keyid:5E:0B:36:61:B1:2F:9E:1B:E8:B6:E4:C6:28:C2:14:AC:69:43:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0B3661B12F9E1BE8B6E4C628C214AC69437C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDmX15BxbZz24Gn7UoNByrgZRwdqqLjN4qMUs4cNsgPa/0/323830343a316434633a3a2f33322d313238203d3e20323634333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:8b:8b:75:42:e4:56:c3:c8:08:b3:64:ab:e7:9a:5c:a9:
         91:52:a8:88:53:1f:b4:75:1b:42:70:e2:8e:e4:9f:01:da:06:
         38:f3:27:0c:a7:8f:08:32:ef:73:88:11:90:53:2e:fb:5b:a8:
         02:d4:d7:8d:15:37:f4:a1:6d:c4:27:58:48:ee:66:df:87:2c:
         5d:19:87:fc:c8:b5:6d:1a:47:9a:26:06:03:06:5a:ac:86:a2:
         21:06:4f:ef:a9:4c:85:a8:32:73:2a:8b:46:8e:36:35:8f:5e:
         d5:eb:d0:83:29:2f:5e:28:88:3a:5a:3b:db:d1:2c:04:8e:9b:
         ff:33:4e:fd:40:2f:b3:0b:c6:f3:58:51:fa:f5:13:19:f3:ab:
         fa:01:dd:7b:65:c2:44:61:e9:4c:81:ae:56:02:bf:ef:45:e3:
         99:6c:46:58:d0:6a:52:71:ca:ac:fd:fa:28:54:b2:09:35:74:
         71:51:52:59:0c:dd:04:38:52:55:93:ba:db:b9:74:5f:28:8c:
         62:f5:38:cd:5a:dd:67:89:ee:79:71:2d:0a:c7:81:80:1e:f6:
         16:68:32:2f:d8:c9:f1:24:18:6b:72:a8:1e:24:33:22:2b:d6:
         dc:db:42:89:09:11:ed:d3:9b:89:6c:f7:be:f1:b2:94:8b:f7:
         32:42:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:38 2024 by rpki-client on console-fra.rpki-client.org