Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa
File:                     323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (raw, json)
Hash identifier:          hs8DoEmgShjKPe+w3EPSE6ZVH3XX9naM608ccuzyNOw=
Subject key identifier:   B6:62:96:10:C7:D9:3F:11:12:03:0A:D1:45:F7:CE:9D:0C:00:EA:09
Certificate issuer:       /CN=731E05587A515DC8E182AA61A430D26BD051E940
Certificate serial:       5181BF88AFAD7A2331236672A3EC99CBA550D931
Authority key identifier: 73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa
Signing time:             Tue 16 Jul 2024 17:05:08 +0000
ROA not before:           Tue 16 Jul 2024 17:00:08 +0000
ROA not after:            Tue 15 Jul 2025 17:05:08 +0000
asID:                     269109
IP address blocks:        2804:5f90::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.crl
                          rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 03:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:bf:88:af:ad:7a:23:31:23:66:72:a3:ec:99:cb:a5:50:d9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731E05587A515DC8E182AA61A430D26BD051E940
        Validity
            Not Before: Jul 16 17:00:08 2024 GMT
            Not After : Jul 15 17:05:08 2025 GMT
        Subject: CN=B6629610C7D93F1112030AD145F7CE9D0C00EA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:a5:9c:6e:cd:6e:7a:9e:ea:9f:cf:ba:59:
                    88:3e:29:c4:c3:94:96:6d:4f:3a:5e:99:f7:94:a6:
                    97:45:79:68:fd:d0:f7:4a:30:f3:49:2f:57:a0:09:
                    83:6e:d2:0a:93:ee:c7:0b:31:98:ff:fc:f7:18:1d:
                    e4:39:f1:a1:7c:7d:ef:4d:f2:ca:05:6d:b6:f8:b9:
                    72:80:75:80:bf:c6:43:43:e1:0e:f1:7a:5e:38:73:
                    00:00:bd:59:cd:7c:be:9b:2e:b3:cf:0c:f6:08:05:
                    aa:5d:d2:e4:e8:91:a9:52:2f:58:f6:5c:cf:35:54:
                    ab:51:23:1b:ef:e6:d7:9d:3f:b5:77:56:85:d1:11:
                    d5:2a:db:58:86:25:75:fc:58:51:ef:31:b3:32:b5:
                    73:09:b8:64:2d:db:83:75:b8:25:57:a1:04:62:de:
                    15:63:17:d6:ea:ff:4e:43:c8:c9:21:ea:fd:b2:35:
                    9c:d2:2b:f4:4c:37:f3:9e:b0:2e:c3:7b:e5:ba:8f:
                    e4:7e:df:97:d4:2a:20:1b:99:09:64:e3:e9:ae:91:
                    59:e3:fc:a6:28:eb:ac:48:f7:1a:b3:22:e8:6e:f7:
                    0a:e3:ca:dc:86:0b:f7:cf:64:66:c8:64:ce:7c:d6:
                    23:39:47:99:3f:af:58:7b:9b:c5:5f:cc:e5:a4:3b:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:96:10:C7:D9:3F:11:12:03:0A:D1:45:F7:CE:9D:0C:00:EA:09
            X509v3 Authority Key Identifier:
                keyid:73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f90::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:a9:64:d2:be:03:cb:6e:4a:5b:3a:85:28:61:45:80:1b:
         b8:6b:90:8f:7c:74:81:a1:49:82:2c:b2:92:9b:b3:28:6e:ad:
         ee:77:d6:ca:d8:2f:5a:fc:b4:3e:a9:09:b2:d9:7d:ec:52:99:
         30:78:8b:05:dc:c6:74:78:23:09:5d:0d:e4:ef:11:f8:45:0e:
         89:ec:6b:fc:02:8e:ae:18:c5:1a:be:16:e2:4e:f3:67:94:1d:
         2f:2e:d8:c8:71:9c:2d:71:98:7b:42:81:cc:5a:35:7f:a9:80:
         e2:fa:94:e0:57:70:54:fd:16:18:ed:0e:65:a2:c3:38:73:6f:
         88:ea:85:ef:33:35:2d:72:76:a1:af:83:61:de:5c:e5:0b:ad:
         26:74:1d:50:a4:c6:6f:35:14:d2:5e:4d:91:81:af:f7:20:fc:
         4d:91:3b:a5:c9:d5:af:b1:ee:b8:27:91:15:2b:2d:b8:31:ec:
         f0:30:7f:f5:9c:5c:7b:c5:d7:56:93:db:b0:61:cc:c3:14:f4:
         b8:c0:3c:e4:be:5b:86:94:a6:f5:52:96:25:a5:4c:50:01:bb:
         21:42:1a:0e:33:2e:75:72:39:96:e2:2d:13:e4:47:59:e6:f9:
         81:5d:39:7f:56:5d:f4:f6:ec:99:2e:4d:07:5b:e3:8f:e9:38:
         4e:24:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:01 2024 by rpki-client on console-fra.rpki-client.org