Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa
File:                     323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa (raw, json)
Hash identifier:          IOaYVeSDSoa2tOZQqCvZgCm7NxxQqd69vSLPa9zGSbg=
Subject key identifier:   C8:CB:6B:51:43:EB:DC:6F:24:8E:5F:DA:4E:28:05:95:84:9A:5F:DC
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       7AB6090E27BCEA78A02FED547008EA07060CC888
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa
Signing time:             Thu 04 Apr 2024 06:10:41 +0000
ROA not before:           Thu 04 Apr 2024 06:05:41 +0000
ROA not after:            Thu 03 Apr 2025 06:10:41 +0000
asID:                     268879
IP address blocks:        2804:5bf4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:09:0e:27:bc:ea:78:a0:2f:ed:54:70:08:ea:07:06:0c:c8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Apr  4 06:05:41 2024 GMT
            Not After : Apr  3 06:10:41 2025 GMT
        Subject: CN=C8CB6B5143EBDC6F248E5FDA4E280595849A5FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:3a:a0:4b:1c:28:e9:47:0e:8c:bb:44:56:
                    9f:49:5f:54:a0:a9:fc:d5:1f:67:8c:a6:3f:55:7d:
                    79:ed:6a:d2:0c:e4:1a:37:45:ef:57:8b:fa:94:ed:
                    7f:33:bb:45:ad:b2:2f:96:82:04:26:13:e8:fc:21:
                    05:a4:b7:d2:67:ec:53:45:d6:c5:db:df:c1:38:bf:
                    9c:a6:d8:42:34:96:de:2a:dc:f6:83:6a:77:33:e3:
                    e1:24:bd:d3:d8:14:07:f6:3e:42:b6:0a:d0:34:1c:
                    89:aa:25:20:18:9c:de:04:9e:d0:1e:67:8d:5f:e7:
                    f9:fc:a2:d8:21:88:ba:40:18:6e:9b:e4:3d:fd:84:
                    bf:68:a0:da:89:27:87:00:d7:bd:75:77:3b:da:f5:
                    78:f5:2c:fe:88:90:6b:7b:66:31:66:7d:c3:a4:2e:
                    75:32:a0:47:a4:c6:93:6f:2e:0a:67:df:65:60:67:
                    a3:cd:4a:eb:5d:56:61:18:62:6b:23:f7:6d:c8:e0:
                    1e:d5:92:b0:c1:b7:5f:00:c9:a0:38:a9:36:1f:3e:
                    da:8a:b5:43:50:c2:57:b5:49:fc:75:2a:bd:79:51:
                    ca:84:1a:ea:f6:6c:ed:66:94:a2:66:52:5d:ff:a6:
                    40:14:ec:9c:51:47:22:4b:e9:aa:98:3a:da:d3:21:
                    51:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CB:6B:51:43:EB:DC:6F:24:8E:5F:DA:4E:28:05:95:84:9A:5F:DC
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33332d3333203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:32:1e:5e:cc:03:e1:30:9d:17:b5:9a:24:61:cb:ad:59:4d:
         21:75:a3:7b:1d:20:ca:71:e5:e7:8e:d1:f4:a8:9b:e5:90:e1:
         d2:e3:b0:a2:58:73:e7:32:ba:b2:91:eb:d0:46:6b:ee:d8:7d:
         59:c6:82:34:72:ce:fd:3a:bc:a3:4c:44:e6:9e:2a:ee:d7:ab:
         f7:eb:75:31:e3:54:46:69:cd:fc:70:13:c6:27:97:a5:7a:87:
         28:8d:9f:a8:b2:51:fe:b3:0f:23:df:f2:ab:ef:1e:32:cf:54:
         6c:20:65:45:8e:cf:fa:8a:f3:2a:ed:9c:bb:37:13:5a:3f:ed:
         ab:bd:e5:ba:2d:9b:77:b8:66:6c:7d:3a:30:15:94:ce:e7:98:
         7b:99:89:47:c6:ae:96:c6:04:e1:c9:de:62:61:1f:5b:5b:cc:
         1a:e6:ac:53:06:a3:c0:f0:d3:7b:34:14:64:ba:ef:b3:3a:fb:
         3f:fd:79:8e:5f:9a:25:79:d9:df:d0:f7:77:e7:0d:da:42:5d:
         19:f2:4e:2e:ad:e9:74:e0:f6:1e:f2:0d:ea:3f:75:5c:c2:0f:
         1d:33:15:f6:58:b5:16:35:f1:c9:c4:f3:55:be:46:7a:78:3a:
         e5:f3:db:2a:6e:4f:0f:a4:cc:e5:71:0e:08:5f:ec:28:58:03:
         dc:66:72:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org