Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
File:                     323830343a336638303a3a2f33322d3332203d3e20323635383937.roa (raw, json)
Hash identifier:          k5GNjhJnp+fh5SYAaIfYUo42YX1IkklUXcyEtKBAFkQ=
Subject key identifier:   E3:AE:4F:13:D4:22:32:F3:73:4C:0B:3F:9D:39:F6:53:89:79:8E:AF
Certificate issuer:       /CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
Certificate serial:       794BFC20EC2FB938A8DC9798ECA2E73FD511AE5F
Authority key identifier: 5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa
Signing time:             Wed 03 Apr 2024 19:16:17 +0000
ROA not before:           Wed 03 Apr 2024 19:11:17 +0000
ROA not after:            Wed 02 Apr 2025 19:16:17 +0000
asID:                     265897
IP address blocks:        2804:3f80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl
                          rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 04:52:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4b:fc:20:ec:2f:b9:38:a8:dc:97:98:ec:a2:e7:3f:d5:11:ae:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Validity
            Not Before: Apr  3 19:11:17 2024 GMT
            Not After : Apr  2 19:16:17 2025 GMT
        Subject: CN=E3AE4F13D42232F3734C0B3F9D39F65389798EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:3a:14:bd:85:df:59:a5:aa:53:76:3f:b0:
                    97:eb:71:44:58:e5:b8:e4:01:9c:28:ae:fa:de:d5:
                    4c:08:0d:57:59:7d:a0:fa:d0:e5:e9:0c:0d:6e:37:
                    c9:a9:c8:00:0d:e7:0a:ab:94:03:d1:bb:0b:45:28:
                    90:46:9c:d8:ef:52:71:26:ef:e4:98:0f:01:24:d7:
                    be:28:29:bc:65:9d:c8:6b:10:59:53:57:08:c8:f0:
                    9c:53:0d:6f:8e:ab:3a:42:cf:63:ad:59:41:75:c4:
                    92:ba:73:3a:bf:51:e0:88:c6:60:87:c1:b0:5a:7b:
                    1f:81:07:c7:b7:a5:e0:24:00:96:50:1e:f9:e6:4c:
                    6b:29:7b:eb:76:8c:90:df:35:9e:91:f3:44:c7:06:
                    86:fb:d3:74:fe:18:5f:93:c5:60:c4:02:d7:20:83:
                    7c:70:66:47:30:63:47:95:9f:fe:f4:64:4d:c6:89:
                    d6:3a:c4:4f:16:3e:ee:bf:01:e8:43:63:ab:d7:3d:
                    ce:62:f3:09:7a:25:f8:eb:a9:2c:d2:b6:97:d2:43:
                    e3:3f:fa:50:1f:56:3d:75:d3:55:16:d9:1e:6c:66:
                    13:0b:85:b2:5a:02:8e:5d:84:75:9f:9c:13:a1:2a:
                    8f:86:6a:42:54:b2:6a:1b:2f:f3:e6:28:5a:4d:56:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AE:4F:13:D4:22:32:F3:73:4C:0B:3F:9D:39:F6:53:89:79:8E:AF
            X509v3 Authority Key Identifier:
                keyid:5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/323830343a336638303a3a2f33322d3332203d3e20323635383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:3b:1b:b7:bc:fa:1a:b1:71:02:cb:8b:37:fa:ed:bb:b4:f9:
         72:6b:87:d9:61:1d:0b:1f:7e:88:47:43:d4:61:bc:a1:03:70:
         90:fb:88:b7:98:34:5c:bd:99:7d:34:db:84:14:ae:4b:db:4a:
         70:82:23:43:75:dc:d0:59:2a:af:70:1f:00:47:8a:bf:bc:54:
         1f:16:ff:75:75:6a:1f:04:b7:9d:3a:d4:be:c2:0b:03:58:b7:
         60:cb:fc:eb:ad:e1:ab:f2:df:29:31:19:ed:2d:02:0a:96:db:
         a0:22:7e:4a:bb:a7:29:be:56:c8:c0:b4:38:93:d3:de:67:68:
         94:5a:90:5a:6e:37:33:d5:c4:61:d1:a8:07:45:cd:c5:c4:81:
         4d:a0:0e:09:e6:6a:17:94:35:25:3a:ad:ba:11:57:5b:26:dc:
         49:06:d1:3b:5a:10:a5:f0:d4:f7:61:c8:c0:53:0c:55:6e:31:
         b1:57:f9:3f:48:c3:11:da:55:ef:f1:a4:f8:51:16:5a:4c:22:
         7b:3a:72:7c:e0:06:2d:ca:93:53:9f:26:15:4d:b5:47:4d:5f:
         6c:e4:db:c5:53:5f:44:4c:69:d7:a6:4d:67:79:34:b6:91:52:
         1f:d9:b3:0d:1c:a3:e9:88:f5:e3:69:97:e9:ec:29:7a:d5:1d:
         37:e6:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:07 2024 by rpki-client on console-fra.rpki-client.org