Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3430203d3e20323731353836.roa
File:                     323830343a376464383a3a2f33322d3430203d3e20323731353836.roa (raw, json)
Hash identifier:          HdjwFjeppmmp2zVW/DZfhQJz59IcHlYDlA1rlghhi2Y=
Subject key identifier:   FB:D5:0F:9B:C1:62:E8:C1:A4:3E:F2:CB:97:4C:DA:64:B4:CB:BE:1D
Certificate issuer:       /CN=5F33BB65A501B1A095633041CB4544B7CD75764A
Certificate serial:       524AD27B10C12E1835C874ED95758E95A8C08E8D
Authority key identifier: 5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3430203d3e20323731353836.roa
Signing time:             Fri 19 Apr 2024 01:31:32 +0000
ROA not before:           Fri 19 Apr 2024 01:26:32 +0000
ROA not after:            Fri 18 Apr 2025 01:31:32 +0000
asID:                     271586
IP address blocks:        2804:7dd8::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl
                          rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:d2:7b:10:c1:2e:18:35:c8:74:ed:95:75:8e:95:a8:c0:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Validity
            Not Before: Apr 19 01:26:32 2024 GMT
            Not After : Apr 18 01:31:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:c8:dc:1a:8f:af:93:0e:95:d2:01:dc:25:
                    86:d8:55:db:94:0b:9d:f5:29:ce:76:29:5d:cb:b3:
                    7e:df:80:1d:c1:b2:4b:44:f1:5d:00:b8:2a:a6:24:
                    16:cd:50:a5:0d:7f:4f:f0:76:fb:82:59:01:f8:e0:
                    bd:4b:32:ea:b8:1e:11:cb:ef:d1:67:5b:b9:32:24:
                    96:e5:6a:d4:de:b0:49:66:d5:a5:4a:bf:d2:89:1c:
                    cd:50:53:56:51:24:04:04:b4:e9:41:70:14:b4:0d:
                    16:ce:35:30:c4:78:8c:75:ad:22:e5:68:9d:d4:5f:
                    aa:35:62:1e:05:bf:40:35:0c:c4:09:82:f2:24:b0:
                    80:2f:24:cf:38:54:4a:f8:b6:43:0c:aa:a9:21:d0:
                    ff:87:cd:6f:1f:8f:fa:08:38:bc:50:59:dd:cf:04:
                    f1:84:21:b4:08:5d:a6:54:be:8b:60:a4:a1:6e:a8:
                    0c:00:e8:79:c3:4d:df:5a:38:bc:cf:69:7e:51:17:
                    8c:d9:9a:f4:2a:75:47:ee:e8:e5:4c:00:c8:55:f9:
                    1d:d5:4f:50:b8:da:48:5f:e8:09:24:07:b7:b7:8c:
                    77:3e:95:a2:7e:79:91:45:8f:05:59:c8:bd:37:32:
                    35:4f:0d:df:ab:e6:27:f1:77:b4:48:76:a5:da:c0:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D5:0F:9B:C1:62:E8:C1:A4:3E:F2:CB:97:4C:DA:64:B4:CB:BE:1D
            X509v3 Authority Key Identifier:
                keyid:5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a3a2f33322d3430203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ca:2a:2b:54:45:2b:d9:8f:3c:f8:9b:33:29:ae:93:1d:fe:ed:
         46:5a:31:d8:b8:47:c8:56:58:c7:53:a2:bc:e5:7c:c2:f1:e5:
         d8:fd:79:70:70:28:b6:a7:55:32:9b:b2:e3:b8:4f:83:f2:a2:
         aa:e2:48:37:a6:28:23:c7:be:15:cd:8a:2c:9b:a5:d8:b6:1d:
         ba:e1:56:25:12:d6:16:12:17:e5:19:df:ef:df:36:c5:c2:ca:
         33:ad:cf:34:29:2c:0b:a2:d9:5e:16:95:7e:f7:19:1d:2d:cf:
         bc:71:8d:27:15:ec:e1:10:dc:29:50:37:0f:ec:ea:08:0b:be:
         62:75:36:e1:aa:aa:c1:32:36:7e:3a:8d:86:de:16:ef:8b:41:
         47:a9:14:fe:af:e9:49:9f:38:34:5c:03:44:7e:5c:91:21:6c:
         7d:9e:11:0a:5f:49:46:2f:c7:2e:7b:0e:a4:09:4b:67:30:9c:
         2b:67:19:b4:94:cb:ce:37:2c:6d:d9:2a:ef:65:6e:c2:a0:f5:
         79:10:78:03:e5:78:21:c1:ea:63:ea:b2:11:bb:e8:c6:a8:72:
         8c:d4:f7:74:cc:7e:d0:ba:5b:d1:60:6c:44:c9:95:2e:eb:2f:
         00:25:6a:9b:8e:86:c5:89:32:ee:87:a3:b8:a7:13:84:a1:d3:
         ae:f1:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:25 2024 by rpki-client on console-fra.rpki-client.org