Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3332203d3e20323731353836.roa
File:                     323830343a376464383a3a2f33322d3332203d3e20323731353836.roa (raw, json)
Hash identifier:          pwl8dpEadRpQ/Zfs6KAckmtI3VPcjrm6uFGpmAGzoe8=
Subject key identifier:   A8:99:7F:5C:8E:51:6E:1D:A8:E2:C6:57:AF:BB:3B:4B:BE:CA:7B:8C
Certificate issuer:       /CN=5F33BB65A501B1A095633041CB4544B7CD75764A
Certificate serial:       41C0A713A03C00A16BF257A7615859B39D8794D7
Authority key identifier: 5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3332203d3e20323731353836.roa
Signing time:             Wed 03 Apr 2024 18:39:05 +0000
ROA not before:           Wed 03 Apr 2024 18:34:05 +0000
ROA not after:            Wed 02 Apr 2025 18:39:05 +0000
asID:                     271586
IP address blocks:        2804:7dd8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl
                          rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c0:a7:13:a0:3c:00:a1:6b:f2:57:a7:61:58:59:b3:9d:87:94:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Validity
            Not Before: Apr  3 18:34:05 2024 GMT
            Not After : Apr  2 18:39:05 2025 GMT
        Subject: CN=3082010A0282010100CAF95B7A71DC09302E457945C91DAD7C75408365EA22800100C6AFB1DEB2AE0740BAFF605D328F369D02B4B37167E3B6632CC47BB56F72AE1DA770BAD6E679E0DC9B88C7F831E14E33B6A5296EE9219725F9440CB7C27BE742F3A41E9E8A98C41FC8C2FA1428A0B1EC3684FEA5496FA48C7DF5A38A8102FA11C4CA5837E072742CEB768ECBD547EA0D615BEB432A22019EE07805F8E547B24998CED349104EBBE3F89ACF83C66CCAA9AC73EFF505B2B3F3E940C69BD6A664AC595FB34CA9EF1B5A5D7C830E789C3465E941DA882571AF445C8C0699462E83E338B683B903BBDC0E91C7AAE03641F8E01C6534B81FE20CA03A79A6E4C49A931382C5EB41A0AC8D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:5b:7a:71:dc:09:30:2e:45:79:45:c9:1d:
                    ad:7c:75:40:83:65:ea:22:80:01:00:c6:af:b1:de:
                    b2:ae:07:40:ba:ff:60:5d:32:8f:36:9d:02:b4:b3:
                    71:67:e3:b6:63:2c:c4:7b:b5:6f:72:ae:1d:a7:70:
                    ba:d6:e6:79:e0:dc:9b:88:c7:f8:31:e1:4e:33:b6:
                    a5:29:6e:e9:21:97:25:f9:44:0c:b7:c2:7b:e7:42:
                    f3:a4:1e:9e:8a:98:c4:1f:c8:c2:fa:14:28:a0:b1:
                    ec:36:84:fe:a5:49:6f:a4:8c:7d:f5:a3:8a:81:02:
                    fa:11:c4:ca:58:37:e0:72:74:2c:eb:76:8e:cb:d5:
                    47:ea:0d:61:5b:eb:43:2a:22:01:9e:e0:78:05:f8:
                    e5:47:b2:49:98:ce:d3:49:10:4e:bb:e3:f8:9a:cf:
                    83:c6:6c:ca:a9:ac:73:ef:f5:05:b2:b3:f3:e9:40:
                    c6:9b:d6:a6:64:ac:59:5f:b3:4c:a9:ef:1b:5a:5d:
                    7c:83:0e:78:9c:34:65:e9:41:da:88:25:71:af:44:
                    5c:8c:06:99:46:2e:83:e3:38:b6:83:b9:03:bb:dc:
                    0e:91:c7:aa:e0:36:41:f8:e0:1c:65:34:b8:1f:e2:
                    0c:a0:3a:79:a6:e4:c4:9a:93:13:82:c5:eb:41:a0:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:99:7F:5C:8E:51:6E:1D:A8:E2:C6:57:AF:BB:3B:4B:BE:CA:7B:8C
            X509v3 Authority Key Identifier:
                keyid:5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3332203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:7f:72:4e:9d:85:a8:a9:36:be:d4:1a:3f:4a:9f:09:98:
         a5:8a:09:77:18:0e:b9:9a:6e:22:dc:16:ce:76:43:80:bb:d3:
         2f:95:20:58:ec:ce:95:b7:ea:96:de:36:bc:c2:03:04:3a:2f:
         1a:30:89:fc:33:25:65:6a:33:a0:a3:8c:dd:37:df:dd:ab:45:
         65:f4:c8:0c:4f:94:5a:10:05:19:3d:4c:20:ff:4f:4f:8e:bb:
         5f:6b:1c:a3:4e:3d:e0:4b:91:06:53:c7:1e:e3:a3:67:5a:2a:
         22:fb:1c:ce:f2:76:e8:5f:83:f1:18:6e:0b:46:0b:c3:82:f9:
         f0:be:36:7e:3e:49:22:b7:37:23:20:05:b1:bf:77:eb:49:d2:
         6f:97:ad:57:26:52:0d:12:d0:c3:9f:4b:1d:d0:71:cc:3c:47:
         ce:01:aa:e4:8a:49:ce:74:c6:85:73:71:73:fa:ac:37:9d:fd:
         94:7f:04:5f:51:29:31:d1:10:80:f6:79:35:00:f0:68:12:f1:
         88:48:01:60:0d:42:f1:d2:f6:f3:8a:ce:09:d3:20:b8:44:f4:
         c3:70:1d:77:71:ce:e5:3d:96:e8:df:91:e3:fe:12:ad:a2:8b:
         e4:04:be:1a:56:d4:da:a1:bc:5a:2a:23:24:a0:0d:c0:ce:45:
         b2:f6:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:42 2024 by rpki-client on console-fra.rpki-client.org