Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a3a2f33342d3334203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33342d3334203d3e20323638343633.roa (raw, json)
Hash identifier:          oiOQTGgTAqylOuPX5f4pnsZ9eHigamZcIljdyqFgDAY=
Subject key identifier:   BF:BF:B1:13:64:FB:87:75:83:DE:CE:41:38:81:4F:D5:70:FD:A4:DE
Certificate issuer:       /CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
Certificate serial:       09AB57B5595276511C5FDC679FC3EE49AE407DD9
Authority key identifier: B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a3a2f33342d3334203d3e20323638343633.roa
Signing time:             Wed 08 May 2024 17:23:15 +0000
ROA not before:           Wed 08 May 2024 17:18:15 +0000
ROA not after:            Wed 07 May 2025 17:23:15 +0000
asID:                     268463
IP address blocks:        2804:5194::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ab:57:b5:59:52:76:51:1c:5f:dc:67:9f:c3:ee:49:ae:40:7d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
        Validity
            Not Before: May  8 17:18:15 2024 GMT
            Not After : May  7 17:23:15 2025 GMT
        Subject: CN=BFBFB11364FB877583DECE4138814FD570FDA4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:9f:07:e5:94:57:8a:1e:03:df:8d:45:96:
                    75:be:94:2a:3d:de:39:36:8a:52:ae:24:6c:03:65:
                    55:60:a1:d8:01:49:d0:23:e4:f6:60:b0:69:28:43:
                    a7:d7:1b:fd:8f:c8:ed:95:d6:f1:0b:97:3a:e8:71:
                    8b:d6:e6:0b:ce:3b:26:eb:b9:fb:e0:4c:c6:4f:35:
                    85:d5:d7:34:98:53:7e:a9:9b:80:13:0d:fb:ff:2b:
                    f9:3f:4b:b7:92:35:a7:80:0b:70:2b:01:73:ca:4f:
                    17:6d:4d:d8:11:36:ec:65:1c:ae:37:3c:bb:c1:4b:
                    7d:e1:02:29:fe:ef:bf:6a:9a:d2:2e:04:5d:71:69:
                    4a:25:ee:ba:0f:97:4e:c6:39:55:25:86:0f:37:73:
                    d7:4a:73:8d:d2:6c:8d:b3:64:62:81:6c:a0:51:c3:
                    74:25:06:c8:f0:e9:70:b9:72:ca:1d:08:b6:37:e5:
                    33:dd:ce:4f:29:7a:ce:47:65:1f:22:bc:25:b5:02:
                    1b:43:ed:1d:5f:56:6e:b6:7f:88:8d:a3:a7:36:e4:
                    64:a1:fd:e5:3a:30:b5:7b:31:57:e4:3a:69:14:e7:
                    c0:3b:cb:1a:9b:c0:00:e3:55:c0:39:dc:f0:d7:5b:
                    dc:7a:63:00:ba:b0:7b:4a:b6:0d:67:1f:e9:36:8e:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BF:B1:13:64:FB:87:75:83:DE:CE:41:38:81:4F:D5:70:FD:A4:DE
            X509v3 Authority Key Identifier:
                keyid:B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a3a2f33342d3334203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/34

    Signature Algorithm: sha256WithRSAEncryption
         8d:5b:db:02:ae:c4:d0:d4:c9:8e:7d:5e:79:88:30:96:72:e7:
         d0:a5:7d:0f:d2:86:d7:69:d6:45:cc:4c:e9:94:d6:79:b7:4e:
         2e:a8:6e:0d:de:65:87:15:39:84:f0:44:b7:ea:05:d3:43:fc:
         1d:6d:d3:fe:0c:2d:fe:4d:a8:76:41:eb:fa:3c:9a:1c:ca:10:
         80:ad:30:46:b0:4a:dd:42:f7:41:b3:94:e6:2a:00:6c:01:90:
         53:7a:81:b5:f3:a1:ad:43:d7:70:88:94:83:a1:06:c5:d4:15:
         95:2d:04:ae:4a:16:84:43:be:6d:a5:05:83:b3:b2:fb:e2:2d:
         03:a6:34:a0:02:59:bd:46:aa:dd:a6:42:fa:c6:72:46:4e:ff:
         ca:0b:ae:dd:3c:dd:73:a3:97:57:3a:3c:92:5f:a7:7f:a7:57:
         93:08:fe:ae:a2:55:05:4e:29:da:6c:6a:d8:02:8a:90:47:4d:
         1b:6c:73:e7:00:39:4a:cf:ea:d8:23:b8:1f:97:ff:46:02:27:
         41:b2:90:7a:43:50:b6:34:77:8b:ea:fd:ac:00:82:a8:d8:6a:
         7f:f0:1f:89:2d:0c:96:1c:5f:31:1d:f4:f5:f4:0e:cf:f4:4f:
         0b:ad:7d:5a:de:ca:51:a1:e5:47:36:dd:c1:2f:22:39:e9:08:
         1f:72:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:38 2024 by rpki-client on console-fra.rpki-client.org