Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d313238203d3e203631383331.roa
File:                     323830343a316130303a3a2f33322d313238203d3e203631383331.roa (raw, json)
Hash identifier:          fIZyV+iHbeK/HWyX5PX8cbd8b6G0xvala462bayfqH8=
Subject key identifier:   AF:AE:66:FA:78:3A:34:7E:C1:64:A4:C5:CC:FD:36:B3:53:62:F8:6F
Certificate issuer:       /CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
Certificate serial:       6615300102EE2C05F2E88BAB9272C03151DDBE8C
Authority key identifier: 5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d313238203d3e203631383331.roa
Signing time:             Tue 19 Nov 2024 20:02:34 +0000
ROA not before:           Tue 19 Nov 2024 19:57:34 +0000
ROA not after:            Tue 18 Nov 2025 20:02:34 +0000
asID:                     61831
IP address blocks:        2804:1a00::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl
                          rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:15:30:01:02:ee:2c:05:f2:e8:8b:ab:92:72:c0:31:51:dd:be:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A2848029237EDE072BF0D27156F239E1FEBEF52
        Validity
            Not Before: Nov 19 19:57:34 2024 GMT
            Not After : Nov 18 20:02:34 2025 GMT
        Subject: CN=AFAE66FA783A347EC164A4C5CCFD36B35362F86F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:da:cf:85:f0:d9:71:fe:a9:e6:74:82:be:
                    40:3c:08:d0:4e:26:67:53:d0:ec:18:1d:65:ca:fd:
                    e6:62:9e:89:f4:77:17:7c:73:e2:90:b9:97:05:96:
                    2c:d9:3f:27:28:ff:3a:05:af:a5:ea:8c:17:1b:0a:
                    5d:65:2b:78:cb:4b:b7:e4:67:a3:df:b3:26:cd:7e:
                    45:a4:84:1e:af:27:51:90:6c:b3:97:2a:a4:92:ad:
                    e7:f5:7e:d2:7a:2a:fb:81:d4:d4:c7:a8:98:90:ba:
                    11:8e:72:8f:de:7b:db:f4:db:8c:00:85:51:30:87:
                    a0:a8:c9:44:9b:4e:62:cd:81:88:d1:20:1f:06:15:
                    d1:7f:07:9f:5f:62:c6:4c:45:1b:05:e0:59:25:2d:
                    7a:76:c4:e8:33:c7:b5:0a:2d:64:db:f9:40:16:ad:
                    40:b5:ab:87:f2:32:a2:60:74:ff:c7:e5:39:09:60:
                    54:c1:69:98:3c:b3:2b:f4:9c:f7:7d:06:04:9c:98:
                    74:94:8a:35:9f:c5:de:f6:76:cc:b9:65:fc:42:b8:
                    d3:d6:5f:9d:4e:81:e7:34:b7:40:1c:26:8c:53:6e:
                    d4:90:f9:bb:e1:65:98:53:91:14:3f:2c:8c:8d:76:
                    9f:de:d0:72:df:f7:df:1a:f4:6d:14:7c:42:0c:99:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:66:FA:78:3A:34:7E:C1:64:A4:C5:CC:FD:36:B3:53:62:F8:6F
            X509v3 Authority Key Identifier:
                keyid:5A:28:48:02:92:37:ED:E0:72:BF:0D:27:15:6F:23:9E:1F:EB:EF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/5A2848029237EDE072BF0D27156F239E1FEBEF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A2848029237EDE072BF0D27156F239E1FEBEF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D6U2kjjrugBhesWJevV2cpkik8XCRhtvtri38riAieLU/0/323830343a316130303a3a2f33322d313238203d3e203631383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:d8:c3:4d:66:fc:47:d5:99:9c:6e:56:01:a4:92:6e:a4:1a:
         be:a5:44:fd:0d:1d:c3:87:52:17:a2:c3:70:52:85:1c:2f:9f:
         93:10:36:fb:42:37:d6:3b:f9:cc:33:5a:23:28:e6:91:8e:e9:
         0c:83:4b:9d:9f:79:25:a3:df:7c:7b:9d:57:7b:0d:ec:e1:69:
         e4:1b:33:b8:96:01:11:67:74:4a:5a:be:68:7a:5a:87:4f:05:
         99:8a:02:9f:8d:f4:39:d8:1c:d6:4b:21:34:e4:6b:be:8b:f5:
         81:3d:75:ac:b4:56:af:56:51:3d:a3:28:2e:3b:ca:08:af:02:
         cf:e1:14:dc:6d:86:88:9d:b4:c5:9f:d7:e9:b1:db:be:79:e5:
         c1:25:82:19:ac:eb:de:1a:de:a7:d3:08:1a:4d:59:7b:c0:c6:
         95:85:88:70:ce:44:5a:f6:44:a3:24:f1:d8:b8:28:b2:21:29:
         e2:1a:93:05:64:90:3e:7f:b0:c4:57:86:30:5c:7c:77:9f:bb:
         00:b7:a2:36:bc:13:c2:6c:91:a7:4d:55:67:e1:ff:1e:b6:31:
         be:0d:fe:f7:23:9f:7b:9b:4d:1d:1d:93:6d:11:08:b9:58:0a:
         27:59:12:af:a3:b4:40:d7:57:86:d9:fc:3e:0d:04:69:07:09:
         8b:4b:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:40 2024 by rpki-client on console-ams.rpki-client.org