Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
File:                     323830343a3538303a3a2f33322d3332203d3e20323632353138.roa (raw, json)
Hash identifier:          tZDlG29IIXCdin63FqbEFWVA2mCAk/uB8iN/fdgmP2A=
Subject key identifier:   CC:E0:29:D8:9E:23:F5:86:51:21:89:CF:7A:BC:CF:E1:B9:C1:6B:D2
Certificate issuer:       /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial:       119087FFDCA8887A6719DC2A26D5AE5316C49F97
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
Signing time:             Thu 04 Apr 2024 04:33:14 +0000
ROA not before:           Thu 04 Apr 2024 04:28:14 +0000
ROA not after:            Thu 03 Apr 2025 04:33:14 +0000
asID:                     262518
IP address blocks:        2804:580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
                          rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:90:87:ff:dc:a8:88:7a:67:19:dc:2a:26:d5:ae:53:16:c4:9f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
        Validity
            Not Before: Apr  4 04:28:14 2024 GMT
            Not After : Apr  3 04:33:14 2025 GMT
        Subject: CN=CCE029D89E23F586512189CF7ABCCFE1B9C16BD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:eb:ab:8f:37:d3:ff:56:30:10:2a:0c:91:
                    e4:8d:22:a3:2f:86:80:6c:c9:67:a5:b4:bf:da:97:
                    c8:f4:89:70:4e:64:c0:0c:55:83:27:52:93:1e:fd:
                    ae:47:c9:3e:32:64:5d:0f:9c:ef:86:67:f7:97:94:
                    dd:2a:24:09:eb:8e:f8:94:f1:41:4a:dc:8b:fc:c1:
                    36:29:81:37:e4:52:e6:d0:62:79:3a:64:b2:de:4e:
                    55:bc:9e:17:47:3f:d1:5d:69:ba:0a:ed:27:74:fb:
                    a9:ed:af:80:1a:f4:0b:44:63:f8:62:5c:6d:e6:05:
                    1d:b3:e7:a8:a0:09:83:79:8d:69:42:92:e8:f8:31:
                    c7:4f:07:8a:b9:67:db:e1:51:c6:76:7e:d0:ac:8f:
                    a5:06:8a:a9:76:54:a7:46:96:08:c1:f2:29:46:30:
                    84:ae:c5:19:24:8e:82:27:89:52:7d:eb:82:f4:0b:
                    7e:e3:e3:01:45:f3:d5:f6:b8:f6:8e:29:03:09:67:
                    cf:34:32:e3:a7:69:41:f9:97:23:b6:39:1b:73:97:
                    8b:64:10:ea:f3:21:ff:1c:cb:8d:c4:4b:73:7b:40:
                    d8:04:12:86:3c:57:b5:da:65:1f:40:fe:99:bf:07:
                    46:da:6e:ec:72:89:f3:12:07:30:cd:c8:ed:cc:3f:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:29:D8:9E:23:F5:86:51:21:89:CF:7A:BC:CF:E1:B9:C1:6B:D2
            X509v3 Authority Key Identifier:
                keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:b9:37:2f:7a:e0:ac:d9:7c:0f:61:bf:d3:c6:e9:14:80:
         b7:52:c3:06:eb:a5:94:33:23:be:8b:a5:48:9e:68:61:63:9f:
         24:14:70:e7:d5:ab:7c:a4:e8:5d:7a:25:56:39:e2:f6:d5:5e:
         cc:a9:58:7e:ce:26:cd:04:87:85:ca:a3:d5:69:51:1b:08:c7:
         fa:79:e2:c6:20:73:8f:d7:a7:88:24:2d:8a:a4:01:12:39:9d:
         34:34:0d:d7:94:3b:60:63:64:85:dd:65:1f:14:19:89:ad:0c:
         69:60:c2:53:79:a4:b4:74:77:2c:1f:e4:53:b2:4c:f1:fc:f6:
         32:76:6b:f1:c0:8f:67:72:fd:63:90:32:b5:c2:8a:83:f5:49:
         d2:5a:ee:ca:78:81:c4:43:3f:55:f2:e9:28:86:78:48:43:c3:
         a2:52:47:c4:9c:0f:72:3f:57:8c:d4:1a:45:be:95:aa:59:db:
         15:4b:2d:82:0f:be:cd:9c:45:ff:61:e1:b3:66:2a:b0:81:27:
         17:be:84:d7:dd:05:79:90:16:01:f9:5e:01:f1:48:9d:12:e4:
         45:eb:37:4f:16:da:eb:a5:f4:13:69:e6:32:3c:bb:fa:96:a7:
         db:c6:86:91:91:73:7f:43:9e:b6:2f:ed:4d:53:ba:db:9f:75:
         66:34:99:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:28:26 2024 by rpki-client on console-fra.rpki-client.org