Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
File:                     323830343a353530303a3a2f33342d313238203d3e20323638363833.roa (raw, json)
Hash identifier:          J+YoKV+/9zfxBDH5yHc3Wi2q0RAApTnBzTdN53zcdpA=
Subject key identifier:   A9:5D:1A:0F:A0:AD:BC:41:CA:F7:C1:8F:B0:EF:70:9D:BF:1A:48:D7
Certificate issuer:       /CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
Certificate serial:       5C523E8DF4E8228755695886F1B28D558BAEB82A
Authority key identifier: BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa
Signing time:             Thu 04 Apr 2024 09:25:25 +0000
ROA not before:           Thu 04 Apr 2024 09:20:25 +0000
ROA not after:            Thu 03 Apr 2025 09:25:25 +0000
asID:                     268683
IP address blocks:        2804:5500::/34 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl
                          rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:52:3e:8d:f4:e8:22:87:55:69:58:86:f1:b2:8d:55:8b:ae:b8:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE9191F222D36FF7ED940A2B5E491E2A8021DA25
        Validity
            Not Before: Apr  4 09:20:25 2024 GMT
            Not After : Apr  3 09:25:25 2025 GMT
        Subject: CN=A95D1A0FA0ADBC41CAF7C18FB0EF709DBF1A48D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cc:7c:91:99:2a:3c:9f:4f:6b:fc:cf:41:56:
                    15:15:43:5a:4b:fe:3b:d1:a9:01:96:8b:2a:1b:36:
                    75:dd:e5:e0:6a:cf:2d:4c:58:d9:8c:9d:c7:74:b3:
                    b3:73:ed:46:40:b3:c3:77:25:05:4d:ae:c0:c1:43:
                    7b:dd:f7:91:de:34:a9:9f:b3:87:1f:27:69:ba:74:
                    c0:13:12:c5:f2:43:00:ec:90:30:28:4d:c1:a8:d6:
                    ee:7e:75:33:2a:6b:3d:0a:1b:24:7b:db:78:0a:d8:
                    ee:6f:30:a2:4c:bc:f0:ef:ff:af:3e:19:32:92:bf:
                    a5:f8:6f:44:3b:26:8b:92:ff:6e:9e:f7:b1:d4:ff:
                    c2:59:ec:c6:ad:95:59:7c:da:a1:b0:70:40:9e:2a:
                    ff:1a:dc:d2:d0:71:e2:ea:3e:8c:49:75:1f:b9:00:
                    6e:95:3a:88:ce:3c:4e:7a:c5:fa:ce:94:3c:ab:30:
                    18:d5:a0:2b:18:f2:d4:b6:2b:b7:36:f2:49:14:53:
                    d1:eb:57:a4:cd:a5:e9:94:39:ab:a8:91:5f:7c:1a:
                    55:5e:3d:d9:dd:97:6f:99:e4:c6:91:cc:54:d1:67:
                    7a:b0:14:5c:f5:bf:ad:4d:a3:82:f1:16:83:04:cd:
                    ff:37:68:31:49:8d:c5:ec:e2:c5:51:43:60:c4:b4:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5D:1A:0F:A0:AD:BC:41:CA:F7:C1:8F:B0:EF:70:9D:BF:1A:48:D7
            X509v3 Authority Key Identifier:
                keyid:BE:91:91:F2:22:D3:6F:F7:ED:94:0A:2B:5E:49:1E:2A:80:21:DA:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE9191F222D36FF7ED940A2B5E491E2A8021DA25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYLEwwsD8QqwfLTiswQqedvvMRSyerVZrcBdKWBwKvxk/1/323830343a353530303a3a2f33342d313238203d3e20323638363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5500::/34

    Signature Algorithm: sha256WithRSAEncryption
         24:26:cd:c1:c7:50:5a:e8:d5:21:7d:82:99:12:98:72:5e:cc:
         4b:e2:53:6e:a5:18:1f:7e:4a:ae:f3:98:e4:eb:af:26:4a:a7:
         4d:33:6a:3c:17:9a:eb:d9:66:8a:9a:ad:06:8c:8b:5d:19:b3:
         76:74:99:92:4d:3d:d5:ef:07:fe:6b:ee:5e:e5:77:8a:80:95:
         a7:15:a0:db:d5:4f:af:95:dc:00:36:42:b1:39:14:e6:b3:cc:
         d6:e6:de:1c:b1:c7:c9:8b:be:2a:14:17:fa:2e:e2:02:ff:81:
         aa:ad:eb:4e:cf:18:11:2e:58:da:ca:0f:b4:ff:05:5b:f4:29:
         78:04:7d:4c:28:77:86:37:d3:34:b1:41:b1:ce:60:e3:08:37:
         55:c4:5c:1f:5b:3b:38:72:a9:2e:a1:79:c5:38:7e:e4:dc:ed:
         fe:57:79:71:da:75:1f:73:a2:78:2c:6b:37:c2:bb:92:95:8b:
         c6:f6:8d:c8:41:d8:56:e1:b1:b6:b7:03:a7:f1:cf:3e:e0:7b:
         52:06:33:d9:70:dd:c4:23:53:d7:81:c5:2c:13:db:39:0f:44:
         49:88:29:cc:a9:c0:67:87:78:06:8b:85:b6:ca:94:05:10:d8:
         75:3e:67:9b:fa:97:61:9e:59:0e:b1:59:eb:5a:88:63:a0:12:
         09:37:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:03 2024 by rpki-client on console-ams.rpki-client.org