Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323634343837.roa
File:                     323830343a323035383a3a2f33322d3438203d3e20323634343837.roa (raw, json)
Hash identifier:          Wz7WU3PzebqaBSEYtvODwCV24AW1Us6sJUrVBLysEBU=
Subject key identifier:   EE:97:88:DB:69:4B:0E:9B:C2:90:98:51:DF:4D:36:7B:FB:43:A9:8B
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       56B5513F9EF7C3A130A5D2E6398F771160DB2A58
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323634343837.roa
Signing time:             Wed 29 May 2024 18:27:00 +0000
ROA not before:           Wed 29 May 2024 18:22:00 +0000
ROA not after:            Wed 28 May 2025 18:27:00 +0000
asID:                     264487
IP address blocks:        2804:2058::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b5:51:3f:9e:f7:c3:a1:30:a5:d2:e6:39:8f:77:11:60:db:2a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: May 29 18:22:00 2024 GMT
            Not After : May 28 18:27:00 2025 GMT
        Subject: CN=EE9788DB694B0E9BC2909851DF4D367BFB43A98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:30:ed:88:6a:73:78:5c:84:0c:b9:dc:0c:
                    28:92:39:93:de:9c:2a:a9:36:f9:c3:0e:d3:8e:57:
                    48:61:5d:af:8e:6f:51:ff:79:3d:5e:6e:3f:e5:e1:
                    f5:fc:92:f6:37:25:9f:74:ff:2c:6d:eb:7a:ac:c9:
                    18:5a:50:dd:49:dd:dc:50:ae:19:13:ae:3f:6e:c0:
                    2d:19:6b:4e:67:05:35:59:5b:ae:19:45:fb:33:cf:
                    3e:94:89:e1:0c:36:91:be:36:d0:05:58:0e:a7:4d:
                    09:19:b6:3b:2f:97:82:5f:36:87:93:76:f9:05:2f:
                    21:d8:7e:e5:db:e8:5f:ea:6f:cc:ea:ed:d7:07:28:
                    c0:71:fa:b5:ac:ef:3d:19:0d:eb:2c:d3:83:73:26:
                    8f:ec:3e:e5:c3:3b:2a:19:09:bb:1a:b9:3f:94:4b:
                    76:41:f9:a4:08:70:e5:14:be:01:12:fe:f7:85:20:
                    64:47:f5:fd:12:82:0a:17:31:ba:39:5b:b9:77:dc:
                    f8:3a:b2:00:68:30:08:55:ac:98:a1:9f:20:bf:ea:
                    ee:60:a7:46:c8:b5:aa:6e:dc:dc:44:83:9b:63:75:
                    ef:f6:44:f4:18:f5:e9:b3:e3:98:e6:ec:6c:4c:6d:
                    c2:ab:79:f5:a0:a6:22:48:04:1c:c3:72:de:78:c4:
                    27:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:97:88:DB:69:4B:0E:9B:C2:90:98:51:DF:4D:36:7B:FB:43:A9:8B
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a323035383a3a2f33322d3438203d3e20323634343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2058::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:1a:57:2d:c0:05:0c:f3:36:12:c3:91:97:2e:13:70:8e:c5:
         b1:eb:3b:eb:1f:30:f7:e9:92:94:91:1b:6d:68:1d:59:04:0e:
         2b:65:35:5f:44:90:0f:49:ac:55:c7:99:13:a4:51:32:94:f2:
         3e:ef:70:79:98:3b:aa:ce:9a:54:53:4f:f0:9b:58:ea:c8:09:
         d0:cc:9e:5d:cf:f9:a0:c5:27:b8:f4:f4:24:18:2b:db:8b:e9:
         2f:5b:46:e5:42:16:f9:cc:2c:85:36:46:ba:3d:e0:09:d8:99:
         6a:70:00:a7:ff:61:4f:51:42:27:d2:22:4a:c4:ed:6b:16:ec:
         5e:6a:05:99:9e:30:28:50:4f:95:34:a2:0f:5e:30:a9:73:4e:
         12:5a:a4:ec:53:5c:f0:01:c5:f6:3c:d5:5a:f4:e3:07:f4:8a:
         c9:f0:79:2d:8a:58:f2:4c:25:03:63:ff:c3:bb:a5:f9:dd:e3:
         7e:27:dc:fc:51:46:eb:c9:ed:ab:84:e9:b9:e6:8e:db:9a:bf:
         87:77:07:2f:aa:67:a0:12:ad:81:50:2b:82:b6:a7:b5:50:ca:
         77:e7:5a:2c:87:3c:71:70:83:20:d2:9a:ad:ca:08:5f:37:ce:
         d3:8c:3b:2c:ef:7d:3a:20:c9:82:9c:07:c0:38:3c:94:11:a3:
         22:a5:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 08:28:00 2024 by rpki-client on console-fra.rpki-client.org