Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
File:                     323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa (raw, json)
Hash identifier:          T04SUUMpFoGQvtQ/HRlV/9t69Wk0+jY9SUyjAx9vIJg=
Subject key identifier:   5C:4E:E8:DD:51:72:C0:88:EC:3C:C4:C7:E9:09:5D:07:DD:C4:92:48
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       0307188DBC79C808DB248C76EE04AED1A0F7AC4A
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa
Signing time:             Wed 03 Apr 2024 18:30:40 +0000
ROA not before:           Wed 03 Apr 2024 18:25:40 +0000
ROA not after:            Wed 02 Apr 2025 18:30:40 +0000
asID:                     268137
IP address blocks:        2804:5894:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:07:18:8d:bc:79:c8:08:db:24:8c:76:ee:04:ae:d1:a0:f7:ac:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Apr  3 18:25:40 2024 GMT
            Not After : Apr  2 18:30:40 2025 GMT
        Subject: CN=5C4EE8DD5172C088EC3CC4C7E9095D07DDC49248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:bc:58:97:4e:a0:de:fc:9e:37:c9:66:36:
                    1b:a8:3e:11:ed:34:78:09:eb:e9:a7:b6:3c:99:49:
                    bf:f1:95:53:bb:fd:4b:a3:ed:f3:b2:98:e5:c7:5a:
                    d0:41:21:a0:a8:c0:48:06:17:e4:c6:04:04:96:c8:
                    bb:85:06:2b:71:76:3f:20:67:81:c4:e1:8d:04:91:
                    d2:2c:19:ff:89:de:9b:3a:23:71:7f:47:0a:78:56:
                    6a:d6:c5:9d:23:bc:49:42:77:5d:1c:b5:8f:34:ab:
                    04:af:c7:95:91:8d:bd:33:fc:c3:fa:f1:c5:24:df:
                    9d:b0:01:64:ab:b8:90:3f:ed:34:82:db:37:61:64:
                    fd:19:24:f1:0f:5f:a9:bb:ed:17:01:0c:08:76:34:
                    18:26:8d:02:b6:0d:53:46:12:ac:b0:2a:39:ba:e8:
                    6a:5c:ee:72:b3:a6:4a:9e:ab:37:ab:b5:bc:ec:c9:
                    11:60:ea:ac:47:85:4f:a3:47:37:03:c2:f8:d1:f3:
                    8c:f6:61:a0:4a:44:25:01:ab:ac:94:15:a7:81:57:
                    46:93:36:d3:58:55:63:88:1d:79:a7:cc:72:1c:44:
                    6d:e7:fb:99:45:72:5d:09:df:2c:6e:80:11:89:f8:
                    b5:2c:03:4b:90:37:d6:66:44:35:28:da:52:a8:df:
                    62:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:E8:DD:51:72:C0:88:EC:3C:C4:C7:E9:09:5D:07:DD:C4:92:48
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a383030303a3a2f33342d3334203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:a8:19:c7:2c:9c:55:eb:00:3c:da:11:9e:6b:75:96:92:90:
         7d:cb:22:5a:45:37:c3:0d:27:0e:bb:77:f7:fa:b8:01:74:80:
         e8:59:94:84:e6:41:fb:96:fe:5b:d3:92:df:f2:78:37:97:58:
         24:2a:e2:d3:4b:53:06:2c:6c:99:2c:a3:68:f4:08:98:1e:79:
         8b:0e:25:53:ce:1c:b6:01:30:8c:4b:02:11:59:39:93:50:c6:
         86:f0:73:21:0c:68:fd:05:3c:58:03:70:e6:9a:79:e0:6e:08:
         5a:d9:8c:b2:a8:28:1a:a9:39:8b:46:45:5e:30:3c:4a:36:37:
         6e:e4:d8:c3:a8:ce:27:5f:97:02:40:72:16:2b:21:89:7a:f7:
         77:da:f8:8b:30:fc:16:17:80:72:c2:5c:f9:0a:9e:5b:7d:a5:
         20:d2:a4:7d:bc:36:41:f6:97:cf:b1:16:ab:e7:85:eb:47:06:
         09:f9:cc:c8:b5:32:2e:37:13:a1:1d:81:d2:da:e2:06:cb:9f:
         0f:11:57:80:5a:78:2b:4e:b3:30:f5:22:44:1a:54:75:ba:6f:
         fe:71:57:4a:ac:74:9a:9d:34:37:dd:6c:c6:77:f5:76:14:08:
         72:d8:33:22:cf:72:a0:0f:52:70:40:ab:4a:e1:18:56:17:77:
         5b:80:5c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org