Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa
File:                     323830343a326537383a3a2f33322d3438203d3e203238323133.roa (raw, json)
Hash identifier:          2n+7EvnAEb/KzWqBl2zzPAQ3lC5t7np0pE2hHuYL+RA=
Subject key identifier:   E0:37:45:6B:48:B8:DC:7E:F0:93:CB:B9:EF:8E:8E:BB:4D:2C:10:5C
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       52AFF57147927F2C6751115DF0A604934C48ED79
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa
Signing time:             Thu 18 Jul 2024 12:58:24 +0000
ROA not before:           Thu 18 Jul 2024 12:53:24 +0000
ROA not after:            Thu 17 Jul 2025 12:58:24 +0000
asID:                     28213
IP address blocks:        2804:2e78::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:af:f5:71:47:92:7f:2c:67:51:11:5d:f0:a6:04:93:4c:48:ed:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jul 18 12:53:24 2024 GMT
            Not After : Jul 17 12:58:24 2025 GMT
        Subject: CN=E037456B48B8DC7EF093CBB9EF8E8EBB4D2C105C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:ee:6e:ff:3b:8d:73:6c:1d:0e:1d:e6:fc:
                    43:90:94:bb:49:f7:f3:ec:5b:da:25:4d:7e:53:6b:
                    80:e1:32:f0:4e:88:a0:72:da:d8:e2:5e:4e:e4:54:
                    bc:23:b8:5b:bf:05:66:7c:c0:3a:8e:40:a9:c0:1a:
                    07:12:c7:e2:d1:bd:e2:36:1c:3c:d7:bc:c4:5b:57:
                    a7:6f:0d:8a:6b:bf:10:50:47:2f:4f:bc:9e:2e:22:
                    81:21:e8:e7:66:f5:84:19:9e:c8:9b:af:1e:b4:d9:
                    54:07:4e:a6:d6:7c:ba:15:2f:d3:ed:28:7b:d0:9e:
                    28:85:b3:fa:c9:2b:f2:3e:70:4a:a2:67:c2:c7:4c:
                    67:61:96:20:99:61:74:94:d5:b5:92:61:48:79:11:
                    a5:b3:a7:bb:c0:9f:9a:1a:d7:b7:f9:ac:9e:5e:04:
                    b1:4f:3e:b5:09:c5:db:5c:82:29:23:b9:16:ab:5c:
                    f5:56:00:8b:b5:cf:29:78:59:ab:f3:ff:63:5c:7e:
                    99:e5:63:f9:b9:1f:0f:8f:6c:49:8c:53:d8:6f:e8:
                    be:cc:cd:78:be:10:10:0f:b7:17:39:95:87:58:e7:
                    7b:0c:59:85:f9:a5:64:cc:ec:34:c6:4e:b9:91:21:
                    2b:f5:6d:20:99:ee:56:79:76:ef:1f:72:6f:f7:2d:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:37:45:6B:48:B8:DC:7E:F0:93:CB:B9:EF:8E:8E:BB:4D:2C:10:5C
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33322d3438203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:68:47:10:d0:ee:c2:be:1b:43:2e:0b:32:29:a7:5e:96:7b:
         e5:ff:15:f8:51:22:03:a3:12:8c:d9:30:bc:90:9e:97:53:5d:
         59:62:82:0d:d5:20:da:c1:71:23:b4:8d:b0:23:72:73:6e:c6:
         6e:55:d8:39:61:05:df:bc:05:1f:18:7c:0e:d4:7c:33:2c:31:
         a7:c3:5f:66:b4:d2:18:9b:98:fa:94:a9:55:58:92:29:1d:95:
         fc:4e:d2:27:eb:86:df:97:97:72:e0:fd:a2:36:9a:cb:10:a2:
         a7:a0:56:dd:c1:92:0a:84:f4:c9:6e:1f:9f:8b:f6:6e:dc:2b:
         12:81:4b:84:5c:a8:38:7b:e4:97:a3:b4:dd:28:f6:98:b3:7e:
         11:21:60:fd:31:30:cf:17:04:79:f5:d0:b4:53:5d:40:f6:63:
         e5:63:f5:04:fe:23:d8:2c:27:c2:3b:f6:8e:c9:12:9e:61:33:
         68:70:d3:b0:d1:4f:92:7b:36:d7:5e:95:31:64:04:90:00:1d:
         d4:bb:7a:e6:2d:84:25:54:e4:4c:fb:a9:01:c3:06:3b:91:34:
         a5:8e:0d:19:0f:b5:32:d1:ad:a8:99:bd:e7:29:31:e6:bd:00:
         5b:9a:cc:21:d2:a1:af:e7:43:87:3c:f3:e5:ed:0e:c4:e4:9d:
         18:64:a1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:57 2024 by rpki-client on console-fra.rpki-client.org