Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/323830343a313764633a3a2f33322d3438203d3e20323633323535.roa
File:                     323830343a313764633a3a2f33322d3438203d3e20323633323535.roa (raw, json)
Hash identifier:          Ah8oV+ZNMjtWRET+6DisT8BFqBVsq2H7FCCMEXTbHww=
Subject key identifier:   3B:E4:0B:B7:52:2E:E0:2A:E4:22:91:B5:9D:A9:EB:F9:2B:E4:CF:82
Certificate issuer:       /CN=5B90C3AB894B4089B90719C3140678196A073A0B
Certificate serial:       4B0F2A8E0D29D222457F7FDC20B0635130AD71AE
Authority key identifier: 5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/323830343a313764633a3a2f33322d3438203d3e20323633323535.roa
Signing time:             Thu 04 Apr 2024 19:03:51 +0000
ROA not before:           Thu 04 Apr 2024 18:58:51 +0000
ROA not after:            Thu 03 Apr 2025 19:03:51 +0000
asID:                     263255
IP address blocks:        2804:17dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl
                          rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0f:2a:8e:0d:29:d2:22:45:7f:7f:dc:20:b0:63:51:30:ad:71:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B90C3AB894B4089B90719C3140678196A073A0B
        Validity
            Not Before: Apr  4 18:58:51 2024 GMT
            Not After : Apr  3 19:03:51 2025 GMT
        Subject: CN=3BE40BB7522EE02AE42291B59DA9EBF92BE4CF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:33:c1:d8:66:3e:02:40:9a:4a:5e:03:26:
                    0c:cd:37:7b:b6:26:4c:da:83:01:a2:75:6e:fd:2e:
                    41:29:be:c4:f6:36:93:0e:6e:e4:0e:2a:b4:3c:04:
                    13:dc:49:16:81:23:45:f3:9e:f9:b9:b1:4a:11:3c:
                    b8:9e:f5:15:91:ed:54:18:9b:2c:d7:d8:ad:40:c6:
                    a7:fd:bd:ef:00:e7:6b:42:79:ee:a9:fe:a8:72:6a:
                    c0:9c:c8:56:9c:2e:c4:e6:e8:d6:eb:76:3d:c4:86:
                    d0:b1:ce:d4:c0:76:97:5e:dd:2a:a0:87:c0:95:63:
                    bb:ea:4d:60:00:32:f3:02:aa:4d:b8:14:ee:e7:5d:
                    b3:f1:a2:21:ed:16:5a:8c:58:de:84:46:c8:c6:0d:
                    89:e0:91:70:03:f3:e1:ff:3d:b9:d7:d3:8c:a3:cc:
                    b5:bc:15:d8:61:5c:24:13:71:db:c8:09:6d:66:8e:
                    51:17:6f:4d:24:27:46:d5:5d:e6:bf:c2:ab:89:08:
                    5f:cb:c6:61:a1:47:0a:bb:d1:fb:c6:ea:ec:da:29:
                    7d:b2:64:1d:a4:a3:93:53:04:10:e3:d9:38:6b:04:
                    2c:fe:e0:69:9a:9d:86:41:19:9d:8e:13:4c:e6:b6:
                    de:8e:1e:8b:10:81:62:d8:fa:ab:d5:b5:26:67:bb:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:0B:B7:52:2E:E0:2A:E4:22:91:B5:9D:A9:EB:F9:2B:E4:CF:82
            X509v3 Authority Key Identifier:
                keyid:5B:90:C3:AB:89:4B:40:89:B9:07:19:C3:14:06:78:19:6A:07:3A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/5B90C3AB894B4089B90719C3140678196A073A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B90C3AB894B4089B90719C3140678196A073A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmT71RHLNWSUAmSN8jzRcT6RXdQoZyggwd6bsH2cxhcX/1/323830343a313764633a3a2f33322d3438203d3e20323633323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:46:48:b3:f8:9f:d0:ba:f5:5e:9a:96:9d:81:de:cc:64:34:
         ac:1e:e4:20:26:89:59:e8:f7:0a:c2:bf:a6:2e:51:34:7a:72:
         c2:8d:47:5c:a6:27:50:b0:c0:3f:a0:72:b2:92:d4:2f:27:2d:
         bd:e6:c2:1f:f2:84:78:20:5c:2e:74:b1:73:c7:6e:9c:c8:ca:
         48:fa:0a:81:9e:85:c4:2d:97:bc:b9:7f:b4:56:d3:93:1e:2c:
         fd:df:0f:ab:1c:3d:d0:3c:e8:3a:ce:76:c9:a0:64:9c:bb:76:
         fb:c8:ae:8d:08:3a:66:bd:f3:63:65:fb:5b:bd:9e:01:1e:a5:
         fd:6b:32:88:2b:d3:66:2e:6f:6d:e4:ce:b7:ff:2d:ed:42:fa:
         d8:91:7a:37:58:df:01:e3:df:fb:50:37:eb:4f:d6:7b:d0:d9:
         6a:e8:7f:12:bd:d9:d5:f6:0c:b9:c6:b6:ca:f4:8f:f0:4a:bc:
         15:08:96:aa:84:4e:5d:0a:64:9c:91:a0:e2:e3:d3:11:68:fb:
         77:f6:90:79:f6:2a:79:b4:ee:e7:16:76:1d:59:2c:7f:a1:b8:
         50:76:60:6c:aa:d3:6d:d3:f4:e8:cf:fa:e1:4b:a0:d6:6d:78:
         e5:f9:7b:57:e5:b3:ef:c0:8c:25:29:e4:42:f8:48:99:8d:f8:
         76:6f:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:01 2024 by rpki-client on console-fra.rpki-client.org