Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
File:                     323830343a356335303a3a2f33322d313238203d3e20323638393031.roa (raw, json)
Hash identifier:          rlezHbTaVR+G4IEu3ua/wqRubWtmmRc+Ej9kIKQwVXE=
Subject key identifier:   CA:DF:F8:A6:F5:70:EE:D1:B8:DF:C6:C5:54:D4:9E:DB:2C:3A:58:72
Certificate issuer:       /CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
Certificate serial:       26A99251C7020CEA83FD509AD4399BD0DAA55EB3
Authority key identifier: 35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa
Signing time:             Thu 04 Apr 2024 04:50:45 +0000
ROA not before:           Thu 04 Apr 2024 04:45:45 +0000
ROA not after:            Thu 03 Apr 2025 04:50:45 +0000
asID:                     268901
IP address blocks:        2804:5c50::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl
                          rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:07:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a9:92:51:c7:02:0c:ea:83:fd:50:9a:d4:39:9b:d0:da:a5:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51
        Validity
            Not Before: Apr  4 04:45:45 2024 GMT
            Not After : Apr  3 04:50:45 2025 GMT
        Subject: CN=CADFF8A6F570EED1B8DFC6C554D49EDB2C3A5872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:02:90:f2:70:87:a8:56:95:a4:c2:8c:01:
                    fb:78:d1:ba:20:b1:0a:30:ea:d7:26:b1:52:80:ff:
                    a7:0f:55:83:1d:11:63:3c:b0:e9:94:d6:95:ce:13:
                    52:87:8a:c9:44:49:bc:1a:21:12:72:f6:92:80:0a:
                    fd:2f:9d:26:45:f1:8f:01:b9:8d:d9:6e:eb:34:21:
                    73:7a:11:ec:6b:ab:71:46:6a:2d:29:5d:68:05:5c:
                    72:95:cf:42:3e:7c:72:50:32:c3:32:4d:7c:77:67:
                    29:a1:d4:6c:f9:d8:df:48:d5:3a:8f:0f:46:3e:d5:
                    0c:56:f6:83:7c:05:62:bb:3b:4f:e9:86:6c:c2:97:
                    02:55:1c:c8:e5:09:1d:5d:0a:9e:0b:55:2d:a0:64:
                    0e:79:a5:f2:51:a8:79:fa:f7:d8:43:53:fa:68:2f:
                    2b:51:41:a9:82:4d:58:3c:20:0c:4f:fb:80:e3:26:
                    5e:0a:12:64:50:24:e1:6e:ca:5d:62:8f:39:f8:0d:
                    0e:6d:91:4d:74:04:46:be:33:0f:97:2b:d3:fa:6d:
                    d6:c2:d3:3a:14:de:6f:8b:c5:40:04:30:45:13:aa:
                    1d:ba:0c:03:b9:20:dd:17:85:b0:cd:dd:ff:a1:10:
                    f6:86:60:d3:e6:78:89:3f:0b:e3:60:5d:55:20:e1:
                    30:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DF:F8:A6:F5:70:EE:D1:B8:DF:C6:C5:54:D4:9E:DB:2C:3A:58:72
            X509v3 Authority Key Identifier:
                keyid:35:8D:0C:BA:1A:BA:22:62:A3:AF:D5:F8:2C:60:EF:92:BD:58:7C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/358D0CBA1ABA2262A3AFD5F82C60EF92BD587C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CzPwTFd5rupeoL6rR4uKmY2BbudTyhehF3im6UkqVCGn/1/323830343a356335303a3a2f33322d313238203d3e20323638393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c50::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:cc:16:f1:1e:23:c9:52:f9:63:43:07:83:2f:29:ec:82:
         bc:53:2d:ac:23:6c:b5:85:5d:98:89:c5:ba:b1:67:6c:0c:ef:
         3d:74:25:d8:b1:c5:e2:7b:b4:b5:2a:e9:8a:95:ab:72:1b:a8:
         74:16:54:53:34:21:78:03:86:2e:ba:64:1c:bf:78:bf:61:b7:
         56:ea:88:39:aa:50:dd:4d:ea:e3:f9:97:6d:d4:ed:61:6a:b8:
         dd:78:97:4e:57:45:d0:a6:db:7e:2f:8e:88:1a:75:86:3e:1d:
         54:63:33:92:50:8b:cd:09:c2:8c:61:3a:bb:5f:db:3a:4f:9a:
         21:38:12:05:97:d3:e8:97:6d:3c:b9:50:da:85:e2:ac:3f:b8:
         25:4c:1b:b6:cc:bd:77:41:48:5b:57:81:ff:d4:67:c3:23:44:
         c3:e4:4e:47:52:14:0c:d4:b3:a6:c1:18:4d:ef:ed:d0:83:aa:
         73:59:4d:c8:0a:7c:f2:24:3f:94:b1:7b:dd:c3:99:f5:f2:da:
         ee:a7:b6:d6:c2:e1:4f:bf:00:ad:0d:88:9a:0a:aa:87:df:62:
         26:44:1c:1a:53:33:d4:ed:06:42:47:8e:f2:0f:38:56:2b:60:
         a0:8f:9c:c6:fc:6a:8f:56:20:8c:8b:a1:a0:cc:85:b1:b6:b9:
         c3:b1:cc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:11 2024 by rpki-client on console-fra.rpki-client.org