Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa
File:                     323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa (raw, json)
Hash identifier:          TnWpyVieR2uzfUwMp7vMVbX6Iz7lNiIOaY7XolQ4NWw=
Subject key identifier:   70:97:E2:6E:E4:EE:35:5D:F3:34:63:2D:A2:EB:6F:AE:4E:9F:7D:4E
Certificate issuer:       /CN=5F33BB65A501B1A095633041CB4544B7CD75764A
Certificate serial:       3E8B903F201ACFC3D2B726404A3EE4FD05730C10
Authority key identifier: 5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa
Signing time:             Fri 19 Apr 2024 02:19:57 +0000
ROA not before:           Fri 19 Apr 2024 02:14:57 +0000
ROA not after:            Fri 18 Apr 2025 02:19:57 +0000
asID:                     271586
IP address blocks:        2804:7dd8:c000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl
                          rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 08:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8b:90:3f:20:1a:cf:c3:d2:b7:26:40:4a:3e:e4:fd:05:73:0c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F33BB65A501B1A095633041CB4544B7CD75764A
        Validity
            Not Before: Apr 19 02:14:57 2024 GMT
            Not After : Apr 18 02:19:57 2025 GMT
        Subject: CN=3082010A0282010100C87F5E794B39625B91220FF5C0705B9071DDABFD551B4ECFFF0025638FDBCB3C41153DC56A9BC084D522497F3B658BE3D7BDD08081B720392DAFCA56FBAE048BFD0290269BAEBF7C7F8B1073CC9CB68553A76B5E6E289CC83B83530249779286BBE92E7E67F9625D96EB06CBFA2A417749AC6419C0FE28D12C2FEFD0687EC199859C26A82434FEAEF39816601FEB914A1129B242D858777FE41EFA1E94633127487815197FC515CDA4E6DA13375EBC69B8F82E6F69773D6A91F356A17C188A8B72596CE22C6E5F770FA8103ADDE4F52C10F86DB9E01C829934DA2FC36FC2E8B3D0631C03A36B662004D9262B2A3BC9FDAA00D09D80D00C156C8E8FE61619D45F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7f:5e:79:4b:39:62:5b:91:22:0f:f5:c0:70:
                    5b:90:71:dd:ab:fd:55:1b:4e:cf:ff:00:25:63:8f:
                    db:cb:3c:41:15:3d:c5:6a:9b:c0:84:d5:22:49:7f:
                    3b:65:8b:e3:d7:bd:d0:80:81:b7:20:39:2d:af:ca:
                    56:fb:ae:04:8b:fd:02:90:26:9b:ae:bf:7c:7f:8b:
                    10:73:cc:9c:b6:85:53:a7:6b:5e:6e:28:9c:c8:3b:
                    83:53:02:49:77:92:86:bb:e9:2e:7e:67:f9:62:5d:
                    96:eb:06:cb:fa:2a:41:77:49:ac:64:19:c0:fe:28:
                    d1:2c:2f:ef:d0:68:7e:c1:99:85:9c:26:a8:24:34:
                    fe:ae:f3:98:16:60:1f:eb:91:4a:11:29:b2:42:d8:
                    58:77:7f:e4:1e:fa:1e:94:63:31:27:48:78:15:19:
                    7f:c5:15:cd:a4:e6:da:13:37:5e:bc:69:b8:f8:2e:
                    6f:69:77:3d:6a:91:f3:56:a1:7c:18:8a:8b:72:59:
                    6c:e2:2c:6e:5f:77:0f:a8:10:3a:dd:e4:f5:2c:10:
                    f8:6d:b9:e0:1c:82:99:34:da:2f:c3:6f:c2:e8:b3:
                    d0:63:1c:03:a3:6b:66:20:04:d9:26:2b:2a:3b:c9:
                    fd:aa:00:d0:9d:80:d0:0c:15:6c:8e:8f:e6:16:19:
                    d4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:97:E2:6E:E4:EE:35:5D:F3:34:63:2D:A2:EB:6F:AE:4E:9F:7D:4E
            X509v3 Authority Key Identifier:
                keyid:5F:33:BB:65:A5:01:B1:A0:95:63:30:41:CB:45:44:B7:CD:75:76:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/5F33BB65A501B1A095633041CB4544B7CD75764A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F33BB65A501B1A095633041CB4544B7CD75764A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdfLxBgUytwA7ytqtktFB7Hqk73jXspWwYEkRW7mwuVa/1/323830343a376464383a633030303a3a2f33352d3335203d3e20323731353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dd8:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         e5:78:8c:41:12:e4:ac:de:1a:f9:bc:13:30:a6:da:82:97:6a:
         6c:ab:dc:fc:2e:49:8e:40:2a:f4:62:e7:f0:c3:c5:f0:65:a7:
         d9:9b:9f:de:fc:eb:0f:69:8d:6b:55:cf:56:1f:76:ba:0f:7e:
         65:35:e3:aa:cb:49:84:fa:b5:ae:dd:d1:1c:b1:d0:e4:70:c6:
         d2:35:f4:ba:af:e6:03:99:05:a1:50:40:c8:0d:b9:ec:6f:8d:
         75:41:22:94:d6:7f:c3:f6:d7:a4:9f:6a:c7:83:14:3a:a0:1f:
         4b:b3:fa:c2:63:26:55:24:b8:57:17:93:5e:fe:da:2b:e5:0a:
         49:6d:f7:3c:ef:d5:97:44:d9:f0:21:0c:99:07:b4:ee:12:f8:
         61:7f:1b:08:74:f0:29:66:5d:82:c1:82:21:84:85:67:04:6c:
         a2:15:e7:93:b1:bb:01:08:ec:54:47:f9:18:38:6d:54:b2:b4:
         1a:2a:43:c5:5f:c6:90:58:1d:4d:c5:74:98:bf:65:50:11:42:
         46:5a:d4:56:c8:61:71:b8:d1:59:50:05:7b:4f:9e:dc:5b:57:
         cb:6b:ba:2e:08:9a:31:3d:2e:47:14:b7:2c:96:21:82:f1:12:
         00:9f:36:17:df:36:50:50:fd:06:31:30:d5:aa:1c:83:88:99:
         dd:32:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:35 2024 by rpki-client on console-ams.rpki-client.org