Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d313238203d3e20323638343932.roa
File:                     323830343a353231303a3a2f33322d313238203d3e20323638343932.roa (raw, json)
Hash identifier:          KJCLuqGA/AecE2Qt6Id2DdpAwUZ0KVyvuwrLmwJ9AOc=
Subject key identifier:   E8:DD:12:D6:74:BB:30:5E:84:2F:91:71:BC:E1:5E:C0:45:73:87:32
Certificate issuer:       /CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
Certificate serial:       51BD15E7D7AF72E0E01E3CEF036E04909DD39603
Authority key identifier: 86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d313238203d3e20323638343932.roa
Signing time:             Thu 04 Jul 2024 23:31:41 +0000
ROA not before:           Thu 04 Jul 2024 23:26:41 +0000
ROA not after:            Thu 03 Jul 2025 23:31:41 +0000
asID:                     268492
IP address blocks:        2804:5210::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl
                          rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bd:15:e7:d7:af:72:e0:e0:1e:3c:ef:03:6e:04:90:9d:d3:96:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862E6B4A1CBE91545E258A4AB625E41F54CC86BE
        Validity
            Not Before: Jul  4 23:26:41 2024 GMT
            Not After : Jul  3 23:31:41 2025 GMT
        Subject: CN=E8DD12D674BB305E842F9171BCE15EC045738732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:6e:f7:b9:6b:01:73:db:14:48:73:15:7e:
                    e4:db:9c:3d:4b:1c:e6:8e:01:57:61:a8:79:35:a1:
                    e9:66:5d:b7:3b:fa:1f:f4:86:2a:f9:e4:a8:af:42:
                    b1:5c:e5:ef:38:d4:db:6a:fe:bc:fd:a6:eb:a2:7d:
                    25:2b:9a:11:d1:b2:3c:d8:cb:98:f9:2b:07:7a:56:
                    12:3c:0d:d2:8b:28:fe:dc:99:23:1d:12:e2:ea:56:
                    17:ce:d6:2c:e7:b4:7e:a3:43:22:93:a4:48:c1:c9:
                    4f:91:fb:81:97:26:41:a6:2c:cd:7b:76:5d:0c:20:
                    3a:64:54:28:65:96:70:e4:57:6d:3c:69:66:0a:e8:
                    df:58:57:68:34:81:91:ad:6f:6c:c5:96:63:a5:51:
                    ae:aa:0b:e5:04:84:26:e2:67:04:0f:04:78:44:74:
                    0e:ff:e3:8c:5f:58:b3:a1:65:4c:6a:bd:76:41:52:
                    a8:a3:71:86:73:96:5e:13:84:b2:43:cb:c4:00:31:
                    ea:a5:12:09:df:6b:13:9f:e0:bb:a1:76:f6:9b:fd:
                    d4:4f:42:fe:da:38:13:ec:15:91:cf:6e:41:2b:2a:
                    df:06:fd:57:fb:81:9d:1c:a5:cf:61:ca:ed:52:f0:
                    26:4d:5b:72:ad:e0:1d:10:25:6f:ac:36:97:70:5a:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DD:12:D6:74:BB:30:5E:84:2F:91:71:BC:E1:5E:C0:45:73:87:32
            X509v3 Authority Key Identifier:
                keyid:86:2E:6B:4A:1C:BE:91:54:5E:25:8A:4A:B6:25:E4:1F:54:CC:86:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/862E6B4A1CBE91545E258A4AB625E41F54CC86BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fsaqi7oZaD7XmR51bLSPFeUHGy6jfE3cgJDPVbjM1Jj1/0/323830343a353231303a3a2f33322d313238203d3e20323638343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5210::/32

    Signature Algorithm: sha256WithRSAEncryption
         ce:79:e5:a2:0f:16:93:6b:2a:7f:8b:40:15:76:5e:f0:19:11:
         cd:33:29:4c:5b:92:b8:d4:58:3b:7e:ef:a3:89:b9:dc:ec:f5:
         3f:a5:8c:95:27:7c:37:0d:14:0f:cf:3b:22:a0:7e:99:36:60:
         e6:d9:87:60:ef:00:a7:be:27:f7:bc:32:e4:05:af:dc:28:cc:
         fb:2b:ce:d3:d9:0e:a1:91:dc:9c:f7:4d:f3:3e:f8:fe:ca:74:
         51:ba:cf:8a:b0:b5:d1:a3:ff:0d:22:fb:32:0d:5a:d7:3a:81:
         9c:b8:a3:2a:b7:5e:a8:b7:32:43:ee:61:99:0d:02:70:9b:26:
         c7:35:20:e9:f3:fd:d4:aa:eb:e3:c6:5f:5a:17:fc:27:30:5a:
         7c:e9:7f:31:b9:0b:99:2d:30:8d:1f:42:5d:2c:95:a3:55:60:
         13:fa:39:5f:a6:d1:9b:33:3b:7f:0c:40:7d:75:d7:74:07:dc:
         b0:03:ce:7e:55:02:9e:82:2d:87:f5:6e:90:9a:9a:43:7a:d1:
         c2:64:53:b4:af:34:a3:8f:db:8a:db:2c:e0:77:32:77:c2:a1:
         33:85:f7:f8:8e:14:b2:ea:3e:90:aa:c4:1e:5d:7f:43:8b:63:
         b4:05:6f:bf:2a:2f:40:d2:ce:a8:cf:97:e6:57:83:29:41:7a:
         e9:a5:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:48 2024 by rpki-client on console-ams.rpki-client.org