Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa
File:                     323830343a356264303a3a2f33322d3334203d3e20323638383730.roa (raw, json)
Hash identifier:          FRCDX2Jl1Z9dBzWHSwBrNJbGb4R15aatnmOV1lVhBmI=
Subject key identifier:   A3:D2:11:4E:69:68:22:05:7F:05:DA:C8:D5:E7:C5:8F:44:1A:10:F2
Certificate issuer:       /CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
Certificate serial:       379F1EFB24759A9D4464DE40B1DF484C051D9AC7
Authority key identifier: 51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa
Signing time:             Thu 04 Apr 2024 03:53:06 +0000
ROA not before:           Thu 04 Apr 2024 03:48:06 +0000
ROA not after:            Thu 03 Apr 2025 03:53:06 +0000
asID:                     268870
IP address blocks:        2804:5bd0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl
                          rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 12:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9f:1e:fb:24:75:9a:9d:44:64:de:40:b1:df:48:4c:05:1d:9a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
        Validity
            Not Before: Apr  4 03:48:06 2024 GMT
            Not After : Apr  3 03:53:06 2025 GMT
        Subject: CN=A3D2114E696822057F05DAC8D5E7C58F441A10F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:eb:66:a5:b4:61:18:1c:45:20:5d:4c:5c:1d:
                    64:e9:10:02:92:a0:e0:b3:49:73:e8:b0:ca:de:76:
                    58:97:06:45:95:cd:7d:49:fa:fe:f9:46:15:59:3a:
                    61:cf:87:62:48:72:d2:18:2d:e2:d4:cc:90:b8:6e:
                    29:32:3b:4c:c2:c1:f9:d3:a7:25:5f:72:e8:7d:d7:
                    f7:69:ee:e0:63:fd:85:58:4e:b4:47:e2:34:75:7e:
                    ec:f0:af:2d:e2:26:08:84:57:c0:0e:b0:86:0b:f5:
                    27:a9:46:3c:c0:ac:26:72:b6:8b:f8:12:58:63:b8:
                    7e:47:bd:ca:5c:6b:93:12:25:c3:46:08:25:24:92:
                    d3:08:f7:e2:1c:ed:77:5d:5f:4c:b9:60:b8:7a:f2:
                    3d:50:7e:99:c5:28:9f:d7:cc:3b:d4:ba:5d:a5:e1:
                    df:0e:f0:38:c7:52:0e:7e:4b:37:48:dc:9e:08:e7:
                    fa:c6:8a:1a:ad:ac:8e:4c:4c:e1:a2:6b:39:07:47:
                    06:8c:1d:81:d3:07:d0:30:f6:eb:40:79:c7:89:82:
                    61:6f:cb:e6:66:9e:79:b2:36:86:1c:67:5e:b3:19:
                    4b:6b:d0:97:33:fb:b4:0b:80:c0:46:ad:79:c1:06:
                    50:c5:cc:31:00:59:bf:21:f3:4b:ef:d3:bb:3e:f3:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D2:11:4E:69:68:22:05:7F:05:DA:C8:D5:E7:C5:8F:44:1A:10:F2
            X509v3 Authority Key Identifier:
                keyid:51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/323830343a356264303a3a2f33322d3334203d3e20323638383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:56:61:3b:5a:4e:11:c0:73:03:d9:a0:59:5c:f3:15:1c:
         18:cc:e9:a3:41:4b:86:8d:dd:40:7d:82:63:07:90:bd:b3:9d:
         2e:01:9b:da:6c:53:53:d3:2a:57:b4:90:57:67:7b:59:55:c5:
         5d:17:91:4a:e1:3b:81:73:24:e6:b6:c2:25:3e:0b:af:b2:af:
         98:78:65:8b:4c:77:78:94:76:f0:b6:3d:3e:e7:94:d8:20:65:
         12:d8:e2:52:9b:26:3d:a5:58:9b:ae:8d:e9:19:eb:ef:1d:63:
         b7:18:32:3b:cd:57:2f:9f:b5:25:12:60:ca:03:fd:b9:b2:5c:
         c4:08:f1:4b:18:8e:00:6e:ad:86:f1:2d:d6:fd:13:cb:92:e5:
         ba:7d:97:ec:99:df:ba:a0:43:71:7b:e2:60:8b:a0:a9:a4:f0:
         a6:b8:2d:28:f5:d0:aa:b5:c3:cd:52:18:13:7b:a2:0e:59:38:
         fc:6b:72:6d:44:4c:7a:43:f4:ae:0e:55:97:4d:74:07:cf:35:
         21:75:42:44:f6:c9:4a:75:38:5a:61:b2:e5:ac:dd:cf:a8:f4:
         19:8d:fe:90:64:1f:f3:d0:19:7b:01:46:e0:d6:00:4e:72:a4:
         e5:57:e1:f0:74:47:13:e4:aa:ff:32:99:37:04:7f:57:e0:e5:
         b9:e0:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 14:21:55 2024 by rpki-client on console-fra.rpki-client.org