Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa
File:                     323830343a3335303a3a2f33322d313238203d3e203533323434.roa (raw, json)
Hash identifier:          2FB6MoE+b1/XwNfyLi9nv1759EJXRkG1X4WuHmrmtaQ=
Subject key identifier:   97:46:E2:64:9C:2F:CE:6E:17:3F:40:74:71:BA:BF:50:74:C1:2D:21
Certificate issuer:       /CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
Certificate serial:       4D037D5BCAFDFB7C68F6329A79A3453471AD86
Authority key identifier: F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa
Signing time:             Thu 04 Apr 2024 01:16:59 +0000
ROA not before:           Thu 04 Apr 2024 01:11:59 +0000
ROA not after:            Thu 03 Apr 2025 01:16:59 +0000
asID:                     53244
IP address blocks:        2804:350::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl
                          rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 17:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:03:7d:5b:ca:fd:fb:7c:68:f6:32:9a:79:a3:45:34:71:ad:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A757E49A3EE62BEE5F32163DBC154299BDFBA6
        Validity
            Not Before: Apr  4 01:11:59 2024 GMT
            Not After : Apr  3 01:16:59 2025 GMT
        Subject: CN=9746E2649C2FCE6E173F407471BABF5074C12D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:e7:3c:01:80:67:bd:26:da:8b:ad:6e:a9:
                    20:67:d4:68:45:e5:d2:36:6c:9c:e6:ad:61:7f:9e:
                    62:2e:ff:15:72:6e:a1:fe:e2:a0:82:e8:6f:52:a7:
                    f2:92:c7:28:dd:7b:13:fe:02:b8:7d:c9:53:6f:ac:
                    20:30:8e:6a:cb:63:3b:a5:ee:33:57:13:00:1d:e4:
                    e3:cf:ce:be:e5:33:f9:50:ea:9a:6e:79:ad:69:9b:
                    4b:4e:68:2d:d9:5d:f0:ac:52:9e:e0:ae:18:c0:03:
                    b4:96:e7:11:57:8c:0e:49:31:15:6b:d6:45:45:d1:
                    30:ae:40:33:8c:00:16:71:95:bc:df:0a:ef:09:e3:
                    90:09:e7:45:67:ab:11:6e:68:55:f5:36:f3:7a:5c:
                    0a:b5:85:ac:56:27:7c:5f:ad:fa:d7:2e:2e:f6:36:
                    8f:2a:68:84:a1:da:0f:1e:bb:d7:9a:e5:bc:63:b4:
                    91:b6:91:2c:1c:b8:f3:84:1e:c6:7d:ab:19:21:4f:
                    d8:e3:7f:dc:b3:3c:07:fb:77:5a:5e:9e:1e:3f:6c:
                    bc:18:2a:38:00:b9:79:07:30:43:44:07:17:43:0b:
                    15:87:f4:b9:2f:64:2d:f0:0f:e2:f1:2c:43:07:de:
                    f1:a3:76:7e:ca:f5:75:98:ad:84:85:a9:2e:07:54:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:46:E2:64:9C:2F:CE:6E:17:3F:40:74:71:BA:BF:50:74:C1:2D:21
            X509v3 Authority Key Identifier:
                keyid:F5:A7:57:E4:9A:3E:E6:2B:EE:5F:32:16:3D:BC:15:42:99:BD:FB:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A757E49A3EE62BEE5F32163DBC154299BDFBA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/1/323830343a3335303a3a2f33322d313238203d3e203533323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:350::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:98:5b:f5:7c:a2:12:1c:5c:f0:13:9c:df:5a:ab:a2:77:17:
         55:57:b9:cc:bd:bb:6d:55:94:cf:08:9d:d1:cb:6d:ce:ba:a3:
         07:15:3d:4c:77:82:8b:13:d9:cf:66:d7:4d:64:bd:c7:6c:0e:
         c2:09:92:04:11:17:ac:ef:b7:f3:7e:d4:65:bd:d4:31:14:5e:
         a3:4f:7e:7a:bf:c2:1e:38:3b:94:4d:fa:01:81:d7:cb:7f:a1:
         46:89:35:44:68:d7:2d:7b:15:4c:d9:5e:14:69:da:15:c2:0f:
         93:d4:84:1c:4e:0d:3d:2e:f3:77:c9:57:7b:a6:28:44:a3:77:
         b1:7a:ea:2e:3f:fe:76:c1:78:60:09:66:1c:0d:ca:29:70:43:
         2e:13:37:43:07:70:8c:68:99:12:23:d8:0f:ca:14:96:5d:1d:
         de:89:0d:b6:3d:38:fd:cd:4a:39:c0:90:1a:47:22:b8:ff:a0:
         fd:75:1b:42:b6:1a:4f:3a:6d:2d:4e:89:cd:00:46:82:c1:af:
         15:e9:8c:a0:0c:7d:dd:88:4d:33:bb:1b:a7:64:91:0f:be:80:
         47:54:43:e7:fe:a4:1d:0a:ce:81:e0:ed:42:4d:3b:06:f2:9e:
         bb:70:ee:7c:3e:4d:44:da:20:33:b9:4c:19:b5:34:a7:75:01:
         b2:06:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:57:01 2024 by rpki-client on console-ams.rpki-client.org