Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa
File:                     323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa (raw, json)
Hash identifier:          z/Pnpu7W5yVZJh9EC8sKxUa3vQ3spD2pnXbfU37yaDU=
Subject key identifier:   5D:03:0F:DE:D9:AF:09:67:60:C8:18:AD:77:21:B1:B4:2F:17:1C:AD
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       40FE0B8A1AF7B82DFAE59F34AB4EE2283EA9399A
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa
Signing time:             Thu 04 Apr 2024 14:07:29 +0000
ROA not before:           Thu 04 Apr 2024 14:02:29 +0000
ROA not after:            Thu 03 Apr 2025 14:07:29 +0000
asID:                     268134
IP address blocks:        2804:5884:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 10:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:fe:0b:8a:1a:f7:b8:2d:fa:e5:9f:34:ab:4e:e2:28:3e:a9:39:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Apr  4 14:02:29 2024 GMT
            Not After : Apr  3 14:07:29 2025 GMT
        Subject: CN=5D030FDED9AF096760C818AD7721B1B42F171CAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:aa:17:bf:6e:7f:10:d3:03:a0:f3:1f:dc:
                    71:5e:9d:b6:07:59:86:25:47:d4:d0:06:0f:9d:90:
                    1d:93:f9:25:13:f9:af:ef:41:f0:47:cc:bf:7e:a0:
                    51:93:e3:27:5e:eb:eb:73:d5:4e:92:4c:2f:f2:df:
                    0e:6c:53:35:91:69:12:52:42:42:64:e3:41:ad:80:
                    9c:18:09:da:58:49:ad:8a:25:c1:e9:50:ca:8d:8c:
                    1c:87:18:d8:dd:44:29:08:34:96:19:db:4c:b0:47:
                    91:f9:3f:a9:a0:c6:4c:a6:81:1d:56:be:b6:97:33:
                    8f:bb:8c:dc:7b:ee:c9:1a:76:2e:fe:61:89:85:a4:
                    a4:88:e6:f4:22:86:86:99:30:20:50:b9:a9:1a:22:
                    a9:f0:e3:b0:54:8c:aa:6b:d6:56:de:50:4c:92:84:
                    e0:b3:53:75:ee:1c:84:0e:07:f0:a7:df:6d:fe:45:
                    18:90:0c:88:72:13:07:9c:2f:ed:4c:b8:f8:62:0a:
                    b9:ba:5e:5d:f4:ac:a2:e6:c6:75:0b:6f:a9:66:5d:
                    02:df:ad:bd:7a:7d:23:e0:3a:12:37:a9:a8:79:8d:
                    a5:2f:96:1b:01:e8:17:b2:7d:41:bc:8b:d4:86:21:
                    b8:ad:00:9a:e2:e4:59:17:d2:c8:4d:f3:95:7b:f6:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:0F:DE:D9:AF:09:67:60:C8:18:AD:77:21:B1:B4:2F:17:1C:AD
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         94:ae:71:7d:83:66:ff:37:b8:9b:5a:1e:6e:fc:a1:5a:a7:76:
         eb:0b:67:95:0d:a1:9a:bf:9f:f4:c9:f3:5c:81:61:41:e8:ad:
         bd:ba:0d:ac:30:4d:d3:e2:2c:f5:89:ff:02:4a:ae:c7:10:76:
         63:9d:94:a6:d5:89:44:75:05:a6:e7:73:13:9c:39:79:e6:b5:
         01:c2:3f:a2:19:6e:a6:ee:e8:3d:8a:0a:e0:8f:87:ff:a8:4a:
         ac:b7:fb:64:d1:fe:99:aa:48:3b:4c:9b:3c:67:d1:7d:b2:67:
         7a:79:5c:58:58:e0:6a:7d:0b:0e:f6:db:98:08:4d:aa:b0:b2:
         97:08:e8:0a:80:db:73:17:5e:e6:e9:57:e1:cf:eb:a1:2a:c5:
         3c:b3:ba:46:20:85:74:4a:3f:ea:61:f6:6f:2f:a5:01:0f:1a:
         6d:53:f4:b2:bb:b2:19:44:54:48:ca:e2:75:40:75:0b:54:8e:
         cf:e4:72:fa:28:cf:3d:21:23:df:60:7c:c9:41:4d:0b:2c:2c:
         93:75:bc:0d:f2:79:5f:e5:02:9c:37:e3:ad:6b:27:68:1f:0c:
         3d:4e:99:98:03:be:5b:0d:ca:e0:6c:ab:2a:c1:37:4f:49:70:
         05:de:e4:62:f4:06:7f:0e:66:11:0c:27:35:ad:3e:e2:e8:ea:
         e7:9a:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:19 2024 by rpki-client on console-fra.rpki-client.org