Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa
File:                     323830343a356332303a3a2f33322d3332203d3e20323638383930.roa (raw, json)
Hash identifier:          wIVdjkSjNjXWP4+UvBepl9mQkX22YdG2PozfkumzyTY=
Subject key identifier:   45:ED:92:3D:E4:6B:8D:24:4A:FD:A7:34:62:60:5A:48:5B:89:AF:48
Certificate issuer:       /CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
Certificate serial:       240F5A7202DD36332CB6826B6FE404BD265FDD32
Authority key identifier: A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:49:50 +0000
ROA not before:           Tue 09 Apr 2024 19:44:50 +0000
ROA not after:            Tue 08 Apr 2025 19:49:50 +0000
asID:                     268890
IP address blocks:        2804:5c20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl
                          rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0f:5a:72:02:dd:36:33:2c:b6:82:6b:6f:e4:04:bd:26:5f:dd:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A566E6406C5B72DC76FB4FAD73B9F103F99D37EE
        Validity
            Not Before: Apr  9 19:44:50 2024 GMT
            Not After : Apr  8 19:49:50 2025 GMT
        Subject: CN=45ED923DE46B8D244AFDA73462605A485B89AF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:27:f2:71:46:e1:bd:95:c5:3c:f5:15:64:
                    4c:8f:33:7c:ee:2a:cf:7d:d4:c5:1f:c1:f3:5a:4d:
                    a8:4e:43:bb:62:f8:43:93:eb:3c:2b:fd:a5:ca:e7:
                    0d:4b:be:1a:91:0e:a9:a6:e3:62:49:d0:b2:f6:a8:
                    00:6f:f5:a2:69:33:4e:85:9c:c5:4c:a7:a0:72:10:
                    98:dc:81:75:59:f4:3d:ad:3b:96:39:e3:5d:6b:86:
                    01:17:ab:6c:14:99:b8:cf:80:51:2e:9f:b2:3f:ab:
                    11:b7:98:0c:9d:be:40:6d:a0:76:d9:58:0b:e2:12:
                    7f:99:ab:40:c6:95:5a:6d:3c:da:df:d7:85:ac:2d:
                    da:26:e7:47:49:67:51:6d:c4:3a:6e:a7:f9:bc:96:
                    db:a1:e5:3a:51:a3:66:d4:a7:a2:28:7c:88:93:9d:
                    a5:66:aa:ed:5c:8a:a1:dd:a4:78:57:52:e4:0f:1e:
                    1e:60:d9:93:7c:fc:8c:61:05:d0:b1:52:05:d6:d6:
                    cc:5c:64:41:1a:25:4c:c7:65:a2:14:76:98:6f:a0:
                    c4:43:36:ee:41:8b:f6:66:55:57:4f:bf:19:d8:df:
                    07:18:cd:8e:bd:a9:bb:09:f1:45:92:ac:99:c1:8f:
                    1e:b0:a5:b4:44:41:01:74:49:2b:8b:e6:f1:dd:b2:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:92:3D:E4:6B:8D:24:4A:FD:A7:34:62:60:5A:48:5B:89:AF:48
            X509v3 Authority Key Identifier:
                keyid:A5:66:E6:40:6C:5B:72:DC:76:FB:4F:AD:73:B9:F1:03:F9:9D:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A566E6406C5B72DC76FB4FAD73B9F103F99D37EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/0/323830343a356332303a3a2f33322d3332203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:78:ff:ee:fe:c0:78:1a:f2:8d:78:02:71:ce:22:59:1a:87:
         09:23:b2:e6:50:98:2f:e9:1f:5a:2a:69:49:4e:1c:22:62:91:
         8d:5f:66:f6:dd:b9:7e:87:39:13:26:1b:50:83:e6:83:68:50:
         75:98:07:33:78:1c:02:ff:ce:ec:81:7a:3b:7a:08:48:90:4e:
         a4:d3:98:c1:71:49:bf:cc:be:8a:ca:7f:21:91:81:74:a1:c5:
         42:44:bb:d2:96:27:15:c8:52:f8:a5:fa:d2:b0:b7:b9:f7:47:
         2d:cd:5f:da:98:da:61:94:5e:47:99:aa:ac:12:24:f2:3e:57:
         d6:ca:77:7a:4c:6c:87:c7:ac:2a:ab:c4:9b:00:73:a3:f7:5c:
         ea:81:8a:82:eb:a0:54:f8:0c:50:85:12:f3:6d:60:73:76:4c:
         ac:06:9e:d8:54:67:43:7c:03:aa:ec:80:6a:06:50:f0:96:6c:
         2a:00:75:08:19:af:5e:69:d9:49:43:51:36:1d:6b:0a:53:44:
         4a:b3:51:fb:19:6b:8e:96:7c:4a:91:68:76:20:70:d7:e0:33:
         8f:27:2a:54:24:9d:ee:79:db:04:06:e1:82:5c:cf:16:09:6a:
         ed:dc:89:85:a2:7e:a9:4f:0c:ec:09:d7:b8:57:8e:d2:3b:81:
         44:82:cf:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:42 2024 by rpki-client on console-ams.rpki-client.org