Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          qXLEvY4wurtGF8uaSJzJax19Of8d8Vvq/h4tz7VoCP4=
Subject key identifier:   7C:28:CD:79:4D:E5:C9:F3:DF:8F:04:7F:9A:86:D4:26:25:A1:B7:C4
Certificate issuer:       /CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
Certificate serial:       058DC2C3FAC53D7FB8D5FAB69584CB5C0DA71E75
Authority key identifier: 52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Thu 04 Apr 2024 17:46:27 +0000
ROA not before:           Thu 04 Apr 2024 17:41:27 +0000
ROA not after:            Thu 03 Apr 2025 17:46:27 +0000
asID:                     266375
IP address blocks:        2804:36d4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:c2:c3:fa:c5:3d:7f:b8:d5:fa:b6:95:84:cb:5c:0d:a7:1e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F
        Validity
            Not Before: Apr  4 17:41:27 2024 GMT
            Not After : Apr  3 17:46:27 2025 GMT
        Subject: CN=7C28CD794DE5C9F3DF8F047F9A86D42625A1B7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:06:4b:b7:d7:48:31:f5:fd:70:dc:4f:65:
                    5a:5d:50:ff:c0:e0:c8:fd:e7:d2:7d:2f:91:df:d3:
                    0e:9a:91:39:b6:d9:60:4b:49:48:b2:2c:8f:73:e1:
                    58:22:1f:33:28:42:b2:a6:7b:03:19:f5:8b:03:32:
                    9b:17:f1:31:3f:09:6f:f0:06:b5:5f:8d:91:13:bd:
                    35:08:d8:4e:c5:e0:6f:0d:eb:ce:46:2f:9f:fd:b2:
                    71:26:8d:de:ed:c1:37:13:b2:69:2f:ed:4c:14:d1:
                    b2:60:7b:ed:98:fa:05:04:f3:6f:65:ec:1f:40:3b:
                    b6:49:2d:ee:26:b3:16:f8:15:65:2c:85:05:3e:9f:
                    ce:c8:bc:a7:67:04:5c:73:bb:6a:69:7a:51:a6:f9:
                    31:b4:0d:b0:ad:a5:84:f0:d7:54:61:6b:c7:e7:04:
                    9b:e9:cc:84:3c:38:8c:93:bb:16:3c:49:68:ed:9b:
                    1f:e2:42:62:46:e9:4d:f9:0a:2b:14:90:98:e1:db:
                    e4:45:7b:62:86:bd:eb:5f:40:b5:db:65:25:c8:c8:
                    30:db:65:99:cc:c6:b5:f1:db:24:30:8d:cc:83:e7:
                    a4:fc:40:24:fe:60:f2:af:95:b1:63:d8:48:5a:f5:
                    a5:5a:4b:bb:90:07:20:bb:7e:6a:bf:91:38:fb:38:
                    95:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:CD:79:4D:E5:C9:F3:DF:8F:04:7F:9A:86:D4:26:25:A1:B7:C4
            X509v3 Authority Key Identifier:
                keyid:52:DC:1D:0D:4D:A2:70:64:6A:5C:C0:BE:56:4D:D3:E2:ED:69:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52DC1D0D4DA270646A5CC0BE564DD3E2ED696E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/1/323830343a333664343a633030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:da:14:6b:73:6b:d0:c4:4c:1a:d2:94:51:0d:69:45:bf:
         d7:0f:2d:d8:a0:10:df:f7:19:3e:29:35:9d:15:11:b8:45:7f:
         60:f0:24:e3:81:00:0a:21:25:18:23:d4:a6:9f:9f:73:a2:6f:
         fe:e3:d4:71:00:07:53:f2:96:37:fe:8b:1d:55:8b:96:43:4b:
         ee:92:6f:06:9f:6d:17:bc:82:e1:6e:ab:1f:72:45:51:2e:bc:
         bd:87:bc:23:2f:73:bc:44:82:7e:04:1d:bc:e8:bc:78:bf:5a:
         ca:3a:bb:6a:74:71:11:94:cf:b9:6a:55:87:a2:49:47:a7:a3:
         66:5d:2e:5e:fd:25:40:39:ac:84:c3:2a:d2:82:e6:17:82:7b:
         c8:1c:ad:81:75:a1:68:02:d0:73:82:78:b3:c1:40:42:c2:01:
         12:d4:27:2e:8a:83:26:8f:52:04:a5:e2:6d:b5:f5:76:6c:02:
         88:e8:fd:3a:87:7a:b9:e7:bf:04:32:b6:b4:2c:b1:d4:5e:aa:
         42:4d:a6:35:22:a7:a9:1d:d9:35:64:a6:3f:9b:d1:1d:88:38:
         60:2c:03:ae:74:92:3b:bb:fa:83:1d:b0:fd:cc:9b:c9:71:bf:
         df:0d:14:d8:db:03:4b:df:52:86:72:af:8b:a4:6a:a1:05:d8:
         67:ea:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 12:52:27 2024 by rpki-client on console-ams.rpki-client.org