Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33362d3336203d3e203238323133.roa
File:                     323830343a326537383a3a2f33362d3336203d3e203238323133.roa (raw, json)
Hash identifier:          POUGFDb+1Rd7qwGomC7NNviMSuJscjlcfBtcmewT9rE=
Subject key identifier:   89:19:6B:62:CB:BC:2B:5F:8F:3B:9C:19:8D:D3:88:12:04:8E:C8:F7
Certificate issuer:       /CN=5EF817C4D35ABBC698DD971253BD6455131E483B
Certificate serial:       73B2AC9888988AD06557835C816B73586128A407
Authority key identifier: 5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33362d3336203d3e203238323133.roa
Signing time:             Thu 13 Jun 2024 13:47:02 +0000
ROA not before:           Thu 13 Jun 2024 13:42:02 +0000
ROA not after:            Thu 12 Jun 2025 13:47:02 +0000
asID:                     28213
IP address blocks:        2804:2e78::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl
                          rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b2:ac:98:88:98:8a:d0:65:57:83:5c:81:6b:73:58:61:28:a4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EF817C4D35ABBC698DD971253BD6455131E483B
        Validity
            Not Before: Jun 13 13:42:02 2024 GMT
            Not After : Jun 12 13:47:02 2025 GMT
        Subject: CN=89196B62CBBC2B5F8F3B9C198DD38812048EC8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:02:d8:ad:41:20:3d:c9:de:b3:77:6d:07:
                    32:fe:6e:7e:98:b0:8b:3b:8d:e5:52:51:aa:70:c8:
                    58:3a:af:49:87:fc:fd:ed:c5:7b:cd:fa:6b:bb:d5:
                    9d:f8:19:d3:94:c3:71:b7:55:ad:8c:7e:77:f8:98:
                    9a:90:ce:52:41:03:d0:0f:1b:8f:86:d4:53:b8:6a:
                    b5:67:99:41:f0:c9:71:68:4f:ba:8d:4a:4c:a8:e6:
                    9c:0f:26:2a:7f:e2:14:0d:41:1a:9c:2a:e9:19:d1:
                    3b:8b:1e:59:c3:a1:4b:6f:db:98:e1:a3:eb:e4:73:
                    8a:17:d4:d1:54:6b:7c:7f:93:55:7b:dc:8f:85:e8:
                    66:90:6a:fe:df:6f:49:97:0e:63:29:cc:e8:4e:06:
                    3f:60:d2:5c:bc:da:1e:cd:b3:ed:e6:82:fe:c7:74:
                    77:61:f0:fa:c3:ce:88:fd:12:a3:92:1e:28:23:2a:
                    bb:93:97:2b:01:99:ce:69:20:4a:c8:ee:56:25:b5:
                    7e:5f:d4:b9:6f:b8:66:a0:e5:9c:9f:cb:30:37:fd:
                    e0:68:e4:9c:fa:57:01:fc:38:09:c2:cc:7c:a2:83:
                    18:9b:fd:71:4c:d1:84:b4:ef:31:8d:41:82:15:ce:
                    fd:e9:ed:7a:f0:35:ad:4f:68:e8:93:e1:b6:0a:83:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:6B:62:CB:BC:2B:5F:8F:3B:9C:19:8D:D3:88:12:04:8E:C8:F7
            X509v3 Authority Key Identifier:
                keyid:5E:F8:17:C4:D3:5A:BB:C6:98:DD:97:12:53:BD:64:55:13:1E:48:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/5EF817C4D35ABBC698DD971253BD6455131E483B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EF817C4D35ABBC698DD971253BD6455131E483B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CL158zUnGCBCNitoQYaZGjDrw2jqnsqD7NySx9TgeLRu/1/323830343a326537383a3a2f33362d3336203d3e203238323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e78::/36

    Signature Algorithm: sha256WithRSAEncryption
         54:24:5b:af:fc:9d:3f:85:03:5b:67:4f:c7:e2:be:be:40:cd:
         b2:14:b1:2e:91:2d:4a:c3:19:7f:4d:0a:8e:00:74:11:4b:29:
         49:89:9a:48:a1:2d:79:da:84:60:ac:91:ff:89:1f:1d:94:f0:
         62:6d:9d:b7:fa:d4:d1:9d:2a:c7:b5:ce:23:43:52:98:1b:6d:
         6c:93:6c:c8:0e:b8:c3:0b:82:79:d8:ce:6d:86:9e:16:4d:20:
         2a:3f:7a:07:11:5c:e0:16:1f:4a:d5:55:7a:94:7b:df:55:4d:
         87:f5:08:a5:2f:cf:63:3e:79:4a:dc:df:4f:ad:a1:9b:67:06:
         12:cc:5a:36:cf:d4:a3:9d:96:75:c1:ce:44:13:18:56:f9:56:
         1b:92:23:c3:9a:18:8a:e0:e4:04:a0:68:6a:04:1d:63:86:a7:
         dd:67:06:c0:50:21:61:f1:19:85:50:94:58:b8:55:29:ac:30:
         29:a0:fa:cc:e2:b8:81:13:56:9b:73:71:55:2d:19:1a:40:70:
         86:fb:7d:81:8d:06:03:ff:65:aa:b5:fd:e4:ea:e0:71:dc:8b:
         e4:98:75:18:8b:19:f0:a5:98:ac:cf:cc:06:64:c4:ab:e2:84:
         3b:27:f7:78:59:73:44:55:ff:31:f1:fa:2f:cd:71:65:70:b4:
         2b:ed:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:23 2024 by rpki-client on console-fra.rpki-client.org