Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
File:                     323830343a353434343a3a2f33322d3332203d3e20323638363338.roa (raw, json)
Hash identifier:          jaIY3EB9FM4E9e47Ib1NyXeK8nBlPCXdBPLvam3H300=
Subject key identifier:   CD:7E:9D:15:6A:BA:1E:F5:F3:84:C4:02:94:D0:3B:E3:44:68:6D:E3
Certificate issuer:       /CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
Certificate serial:       11955E6CF1DF3E80C6CECCEA2FEC3CC88C9443DE
Authority key identifier: F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa
Signing time:             Thu 04 Apr 2024 14:01:13 +0000
ROA not before:           Thu 04 Apr 2024 13:56:13 +0000
ROA not after:            Thu 03 Apr 2025 14:01:13 +0000
asID:                     268638
IP address blocks:        2804:5444::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl
                          rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:95:5e:6c:f1:df:3e:80:c6:ce:cc:ea:2f:ec:3c:c8:8c:94:43:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F06C066D74E657CF6914B5961E1CF64DD57EFAB1
        Validity
            Not Before: Apr  4 13:56:13 2024 GMT
            Not After : Apr  3 14:01:13 2025 GMT
        Subject: CN=CD7E9D156ABA1EF5F384C40294D03BE344686DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e5:82:f7:cd:0c:fa:43:28:bb:36:c5:f5:63:
                    00:c1:9a:f3:ec:56:83:ec:e6:a5:79:41:85:70:df:
                    46:9b:1d:e9:79:7a:13:df:ba:21:35:b3:00:f9:f9:
                    71:d0:2e:35:a5:a1:34:7f:fd:56:88:a7:98:f8:97:
                    7e:a2:42:d4:6c:39:58:ba:97:5b:a0:85:a4:4a:05:
                    b3:57:c9:4b:69:5a:d4:92:a8:4f:4d:36:4d:71:9d:
                    37:7b:28:11:12:87:09:8a:e7:7a:1e:4f:3e:63:f8:
                    da:7d:99:d3:75:1f:ea:24:af:01:76:08:1b:65:42:
                    bd:36:d3:0f:84:bc:a7:41:70:bd:4b:b6:d4:f4:ba:
                    c1:db:f5:8d:ca:a5:96:7b:24:2f:3d:6c:ff:84:fd:
                    d2:9c:a3:6c:02:8f:17:bb:b4:2c:bc:f3:a7:23:f6:
                    e3:70:8d:16:99:3a:8a:13:90:a5:94:dd:cb:be:94:
                    bb:ca:19:07:e9:b8:7b:47:29:87:49:29:9f:cc:97:
                    c5:96:15:d8:a7:39:be:d9:00:da:a8:00:df:56:08:
                    aa:66:17:b3:99:7e:3a:5b:ad:0d:b4:75:f5:d5:0a:
                    b8:4e:2c:a8:e9:10:61:36:e9:a7:24:fc:04:4a:9c:
                    d4:07:b1:2d:38:56:b8:29:e8:d0:a8:95:f5:07:c5:
                    0b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7E:9D:15:6A:BA:1E:F5:F3:84:C4:02:94:D0:3B:E3:44:68:6D:E3
            X509v3 Authority Key Identifier:
                keyid:F0:6C:06:6D:74:E6:57:CF:69:14:B5:96:1E:1C:F6:4D:D5:7E:FA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F06C066D74E657CF6914B5961E1CF64DD57EFAB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/1/323830343a353434343a3a2f33322d3332203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:a1:cc:0f:c9:91:61:b8:20:a3:ea:c2:00:29:43:6b:dd:14:
         3e:0b:dd:5b:db:7a:5e:8b:f8:d1:ee:8d:98:3f:ce:e3:bc:83:
         d3:b4:d3:c5:6d:ff:ad:6e:f9:b1:b5:dd:6a:9f:54:9e:52:b3:
         47:3f:b6:4a:6b:64:a7:ef:a1:f1:47:85:b2:84:32:ca:cd:fd:
         19:95:81:2e:9c:1d:73:6b:f9:45:f6:4a:2e:27:c2:7f:37:2b:
         ad:f7:72:77:e6:39:ba:66:82:9a:84:29:84:5c:5d:12:20:18:
         e2:91:34:c8:52:88:8d:30:1c:f1:47:fe:df:f1:1a:ae:51:c4:
         e7:e8:79:89:21:95:e5:f1:79:28:e5:ff:9e:63:f4:3e:db:2f:
         3b:ac:be:ac:8e:37:22:72:fd:4f:f1:d4:a3:bb:f4:9c:23:fb:
         3c:07:73:57:2c:87:ae:52:6e:b0:db:01:79:29:e5:aa:4d:d5:
         e2:b5:52:da:82:73:34:bc:08:1f:47:bb:7c:40:9e:71:c9:93:
         da:b7:b7:40:ff:18:86:68:ed:90:f5:12:7c:01:3a:48:a3:e6:
         55:7e:a4:4e:24:83:fe:f9:79:fc:05:e8:b4:29:a9:b2:1b:07:
         62:83:ae:f9:c8:08:5c:97:08:85:13:a5:53:78:47:1e:f5:88:
         2f:9e:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:11 2024 by rpki-client on console-fra.rpki-client.org