Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a633030303a3a2f33342d3334203d3e20323638343633.roa
File:                     323830343a353139343a633030303a3a2f33342d3334203d3e20323638343633.roa (raw, json)
Hash identifier:          aIiSAh5kh27fDORDJfOoXSyWv7z0hCKZs02eur89W5k=
Subject key identifier:   59:06:F2:8B:FA:C8:7F:81:E3:E9:E8:5E:E0:B0:38:45:93:58:40:7F
Certificate issuer:       /CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
Certificate serial:       54D6BC2EEC2E462388309586273A771600582E5F
Authority key identifier: B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a633030303a3a2f33342d3334203d3e20323638343633.roa
Signing time:             Wed 08 May 2024 17:23:43 +0000
ROA not before:           Wed 08 May 2024 17:18:43 +0000
ROA not after:            Wed 07 May 2025 17:23:43 +0000
asID:                     268463
IP address blocks:        2804:5194:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d6:bc:2e:ec:2e:46:23:88:30:95:86:27:3a:77:16:00:58:2e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF
        Validity
            Not Before: May  8 17:18:43 2024 GMT
            Not After : May  7 17:23:43 2025 GMT
        Subject: CN=5906F28BFAC87F81E3E9E85EE0B038459358407F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:0f:8c:c2:d1:eb:0e:ec:c2:81:03:5c:1d:
                    3b:ed:36:e2:c6:3a:48:bd:3b:30:b2:64:84:a1:ef:
                    78:5c:f0:44:a7:b1:86:6d:17:d3:32:c5:b2:aa:e0:
                    83:81:50:1b:df:1f:a4:0b:9d:9f:94:91:14:a5:ca:
                    38:ac:0a:6d:aa:78:09:ba:6e:a2:61:41:d0:94:62:
                    d3:ea:20:c8:12:b3:b4:2d:69:d9:d3:db:e6:cf:bf:
                    52:82:4a:d3:d6:fc:16:01:a0:91:16:0e:5c:bf:9a:
                    87:01:41:73:38:25:0f:da:27:c6:27:cc:5b:60:79:
                    de:10:40:69:59:9d:34:cc:b8:8b:3e:52:11:cc:75:
                    a5:b8:b1:27:6d:db:ed:9f:d2:ee:5b:34:89:8b:85:
                    8e:70:66:d4:84:ba:02:9b:8b:81:85:1a:a7:1e:e3:
                    24:9c:34:62:2a:73:51:bd:05:53:d5:d4:d9:1f:20:
                    2d:3d:ac:4f:ed:57:3c:c9:a9:d9:94:b5:62:ad:9d:
                    a1:39:8a:d0:30:a6:08:ae:63:77:74:b1:21:f9:e8:
                    d5:a9:bd:fb:ae:1a:6e:ab:f1:e5:54:7b:32:e1:59:
                    fe:da:42:87:13:82:a9:70:13:a2:f8:67:ee:57:2a:
                    7b:7a:3a:04:ae:9d:59:08:cf:e2:00:dd:32:f2:31:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:06:F2:8B:FA:C8:7F:81:E3:E9:E8:5E:E0:B0:38:45:93:58:40:7F
            X509v3 Authority Key Identifier:
                keyid:B0:58:4F:55:CE:CD:C5:88:EB:5A:4A:6C:25:B8:E8:86:20:BF:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0584F55CECDC588EB5A4A6C25B8E88620BF8AEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/1/323830343a353139343a633030303a3a2f33342d3334203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:62:07:e2:e9:73:5d:44:02:5e:c6:b2:67:96:83:c1:62:94:
         01:5c:b3:07:f2:f7:92:bc:eb:cc:d5:8a:b4:6b:2f:34:1a:bb:
         69:7d:de:00:bb:a4:bd:20:13:9f:2b:db:79:05:d8:8a:e2:0e:
         7a:a0:f1:6f:09:d5:4a:9f:20:5b:7f:ea:26:16:29:a9:ff:fd:
         a9:4c:59:15:a0:a8:c8:a5:cb:fb:4b:7a:43:ec:d6:93:20:9d:
         8a:6f:23:69:3a:23:66:e2:a3:00:af:ca:82:b6:08:6c:21:5a:
         f8:96:99:af:65:1b:a9:8b:a9:03:60:20:73:6a:88:2b:37:5e:
         07:d1:18:d4:6e:04:8b:2d:d1:00:2a:e8:d0:d0:f5:a3:4b:da:
         cf:6d:0e:fa:ed:cb:3e:85:d5:b4:2a:4a:a4:ca:03:d4:1d:fa:
         cd:11:48:5b:ab:0b:7a:44:f9:00:57:bf:d4:89:2f:69:0a:3e:
         fc:86:2d:7d:87:a2:3a:82:00:10:9b:01:95:59:69:3a:80:63:
         9e:0f:d1:a5:c4:f6:90:15:31:67:62:e1:2b:55:58:a3:22:8b:
         51:a7:09:f8:e0:e5:86:34:c8:fb:8b:29:5b:24:9b:97:23:e5:
         f2:34:11:21:73:d5:8e:79:01:fb:fc:f9:4a:13:ce:ca:87:8e:
         af:cd:5f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:14 2024 by rpki-client on console-ams.rpki-client.org