Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a3a2f33342d3334203d3e203631373238.roa
File:                     323830343a316237303a3a2f33342d3334203d3e203631373238.roa (raw, json)
Hash identifier:          7+u1t+7nqUdePOiRjDjcK3b7xtUZJ5HEEZ+OMMZzXBw=
Subject key identifier:   5B:50:18:B5:A0:BD:7D:1A:2A:5D:7B:62:64:5C:CB:1F:F7:05:53:1A
Certificate issuer:       /CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
Certificate serial:       524A17079167380F11641DB50D90C37CF746DF81
Authority key identifier: DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a3a2f33342d3334203d3e203631373238.roa
Signing time:             Thu 16 May 2024 21:09:50 +0000
ROA not before:           Thu 16 May 2024 21:04:50 +0000
ROA not after:            Thu 15 May 2025 21:09:50 +0000
asID:                     61728
IP address blocks:        2804:1b70::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl
                          rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4a:17:07:91:67:38:0f:11:64:1d:b5:0d:90:c3:7c:f7:46:df:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Validity
            Not Before: May 16 21:04:50 2024 GMT
            Not After : May 15 21:09:50 2025 GMT
        Subject: CN=5B5018B5A0BD7D1A2A5D7B62645CCB1FF705531A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:0e:c3:5d:c0:11:3c:7f:85:3a:fb:2d:ac:
                    08:71:51:d9:9f:cd:c8:2b:32:74:c4:81:8f:b8:d5:
                    87:61:91:0b:a8:bb:99:91:49:f5:07:cf:57:42:d8:
                    fd:41:56:33:d3:35:71:1e:9f:8f:36:a8:32:6e:8b:
                    8f:ef:30:99:9c:b6:d9:1b:60:ab:4f:0b:8c:ff:20:
                    79:92:25:02:82:df:2a:b5:6b:43:79:3d:5d:c5:d6:
                    28:c6:bd:38:e1:e6:5e:3e:d5:b0:7a:66:12:9e:e6:
                    b0:63:38:43:6e:69:df:c4:a1:06:15:39:1d:cb:89:
                    f9:da:46:1d:fa:7f:fd:ca:c2:67:f4:3f:57:b3:33:
                    6f:d1:13:14:f4:30:72:99:68:fa:06:d5:25:bd:a7:
                    4b:e2:eb:25:2b:8b:65:9f:12:ee:74:9c:cf:fe:f9:
                    07:94:5c:ba:07:b5:4a:b4:8b:31:f8:d6:3f:ec:e2:
                    d1:95:0f:37:a5:0a:36:b7:d9:26:40:9d:cf:15:47:
                    d5:ad:30:99:5f:cb:f0:01:5e:9c:2d:af:30:f7:f4:
                    2e:d7:a1:1a:ea:94:98:14:4d:c7:8e:66:20:80:c1:
                    b6:64:4e:3b:e5:42:93:4f:e3:f2:85:a0:88:3d:78:
                    27:43:f9:06:ca:d7:f2:47:12:ef:f6:86:29:a6:b8:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:50:18:B5:A0:BD:7D:1A:2A:5D:7B:62:64:5C:CB:1F:F7:05:53:1A
            X509v3 Authority Key Identifier:
                keyid:DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/323830343a316237303a3a2f33342d3334203d3e203631373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b70::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:6d:f4:ef:8f:0c:9c:fe:1d:e2:a6:33:3f:0e:79:e9:de:a5:
         71:22:cb:79:3b:3d:0e:f2:f8:db:63:e1:b6:0a:78:d6:2b:08:
         d1:fd:5a:d6:f5:b4:4f:28:c2:0f:d6:a3:e1:9e:79:c6:8b:8a:
         fd:69:d5:e7:e2:b6:c0:08:a4:a9:6f:1a:a6:08:76:67:98:ad:
         f7:9c:9e:2c:d5:77:4c:26:14:71:e5:2a:29:5f:19:fd:54:60:
         55:ed:82:e4:49:43:ba:a3:9c:9d:8f:d4:35:3a:34:ab:a3:28:
         be:70:aa:2c:c6:e4:38:b8:58:12:69:b0:47:f7:0c:fc:15:49:
         21:fd:37:f4:34:1b:84:8a:a0:b9:6e:37:9e:b4:93:b8:e2:e0:
         89:3f:b8:85:40:b3:21:9a:c8:8b:64:04:e7:bb:e2:bc:3a:07:
         b7:a3:b5:ef:01:e5:ef:da:22:c9:97:23:99:05:27:6d:5a:d1:
         51:62:7b:cb:62:b0:06:8b:0a:bd:b8:fd:14:3f:93:b4:35:86:
         7e:26:8a:53:c7:97:c1:3f:5c:41:1f:fb:70:74:00:d8:3e:92:
         a5:2b:e6:93:ec:9f:32:21:16:39:15:eb:89:cd:97:5e:2a:00:
         f3:7c:06:05:37:ea:ea:1e:f4:4e:5b:b9:1a:ed:b2:06:3f:75:
         a9:fd:92:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:32:52 2024 by rpki-client on console-fra.rpki-client.org