Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/323830343a353134383a3a2f33322d3335203d3e20323638343433.roa
File:                     323830343a353134383a3a2f33322d3335203d3e20323638343433.roa (raw, json)
Hash identifier:          nekAGBeHDccahgNoY696ttavdTrDtfGpyX23rcSWud8=
Subject key identifier:   E1:C4:1B:B2:AD:85:97:0A:FF:22:38:DB:89:E2:D7:31:07:E6:73:AC
Certificate issuer:       /CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
Certificate serial:       6AFDAEF1271D300F065A97DFB503CAE933C864C7
Authority key identifier: 5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/323830343a353134383a3a2f33322d3335203d3e20323638343433.roa
Signing time:             Wed 03 Apr 2024 18:31:52 +0000
ROA not before:           Wed 03 Apr 2024 18:26:52 +0000
ROA not after:            Wed 02 Apr 2025 18:31:52 +0000
asID:                     268443
IP address blocks:        2804:5148::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl
                          rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:ae:f1:27:1d:30:0f:06:5a:97:df:b5:03:ca:e9:33:c8:64:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EA0A0802D5FBA076B06703D21D6D32026825F6D
        Validity
            Not Before: Apr  3 18:26:52 2024 GMT
            Not After : Apr  2 18:31:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:1e:a4:eb:d0:66:5b:52:a3:b9:82:57:2d:
                    6f:46:91:07:4f:6a:d7:94:e8:8a:a1:ba:44:a8:f3:
                    91:8e:d3:cb:26:90:96:67:c5:6c:4e:74:e9:ea:48:
                    ee:64:f2:21:6d:28:cc:5a:1d:71:e4:08:8d:00:8c:
                    d8:17:e3:4d:c7:c9:e5:49:10:0e:77:38:36:9a:86:
                    99:05:56:4e:2c:36:a8:52:49:27:83:b1:bb:c6:09:
                    bb:55:33:bd:d9:4e:6d:da:21:54:a6:60:b3:36:14:
                    b6:12:41:16:b4:bf:bd:eb:50:e7:55:1d:41:df:14:
                    18:23:03:6b:67:80:68:8f:d3:ba:bc:8e:b7:48:0a:
                    d9:b2:99:1c:eb:4a:10:25:9d:2f:86:d4:5b:b5:49:
                    77:cc:e4:d3:ed:8f:b2:eb:95:c8:2f:df:ce:47:43:
                    05:33:56:9b:07:f6:71:9a:2c:77:29:db:ef:97:0b:
                    76:cf:22:32:ac:e6:b4:e5:fc:6b:3e:88:dc:8c:c0:
                    dd:3c:cf:fe:b3:dd:0e:c6:48:a4:53:cb:1a:13:e6:
                    8b:22:bf:5d:e7:8a:47:63:e3:31:43:25:00:3e:ff:
                    62:0a:18:1e:66:91:d0:57:51:82:1c:d5:cd:08:f2:
                    d0:ed:8a:16:f9:37:aa:4c:43:0a:3d:63:a8:cf:ac:
                    90:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:1B:B2:AD:85:97:0A:FF:22:38:DB:89:E2:D7:31:07:E6:73:AC
            X509v3 Authority Key Identifier:
                keyid:5E:A0:A0:80:2D:5F:BA:07:6B:06:70:3D:21:D6:D3:20:26:82:5F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EA0A0802D5FBA076B06703D21D6D32026825F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp8RUjhxTDvLHSAmF5J9ohGErXdKfDTgNCLh9SKoHhbs/1/323830343a353134383a3a2f33322d3335203d3e20323638343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5148::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:82:ed:03:3a:1b:d3:59:ff:1f:97:44:9a:ba:c7:4d:5d:62:
         e8:2b:56:10:0d:ff:54:d7:f9:51:c9:99:5d:81:12:0b:6d:f7:
         09:d7:21:af:36:2f:7a:43:60:5f:cd:ab:62:79:e8:56:49:f6:
         f6:49:da:d9:de:af:5d:31:f4:2b:93:a2:0e:3e:b3:f6:72:4c:
         5e:ee:be:7f:68:9d:b6:07:88:f4:ca:06:05:37:bb:e9:aa:88:
         72:83:b1:5b:3f:a9:50:6d:67:a6:01:42:03:6e:a2:2b:e9:44:
         b0:b7:80:6b:f2:1f:62:e8:96:0c:0b:7c:29:b3:fb:90:3e:1d:
         76:95:44:61:a1:07:2d:18:26:6c:94:35:3e:f3:e5:34:55:33:
         76:f9:08:0c:01:22:90:f0:35:ed:b0:b2:c1:54:fc:8d:f0:08:
         55:14:34:2f:67:63:60:b5:db:cb:53:00:75:43:eb:e2:ef:39:
         ff:bb:0c:7c:a9:81:0d:d3:7b:57:c9:42:ce:a1:32:4e:09:e9:
         9b:58:b6:8a:af:bc:5e:b3:57:5d:85:d9:f1:e1:df:d0:52:8f:
         de:d6:3c:4c:27:4c:a3:95:dd:64:c7:23:e3:e2:ea:df:7d:e6:
         72:c9:d7:88:55:eb:82:88:9d:0d:3f:0c:37:82:bb:9f:cd:ab:
         81:b2:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:55 2024 by rpki-client on console-fra.rpki-client.org