Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa
File:                     323830343a356139303a3a2f33322d3438203d3e20323638373831.roa (raw, json)
Hash identifier:          GdAdztOh1UrIMWLXMa2ZM9qQC7hLnIXtRz/U5gOQTNI=
Subject key identifier:   82:61:B9:24:35:E7:B0:D5:83:1D:3C:53:C9:73:97:24:B5:E6:3E:25
Certificate issuer:       /CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
Certificate serial:       23CD6984FBF52A64EF97CEDC7A9FF865D71F5165
Authority key identifier: A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa
Signing time:             Thu 04 Apr 2024 00:17:57 +0000
ROA not before:           Thu 04 Apr 2024 00:12:57 +0000
ROA not after:            Thu 03 Apr 2025 00:17:57 +0000
asID:                     268781
IP address blocks:        2804:5a90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl
                          rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cd:69:84:fb:f5:2a:64:ef:97:ce:dc:7a:9f:f8:65:d7:1f:51:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Validity
            Not Before: Apr  4 00:12:57 2024 GMT
            Not After : Apr  3 00:17:57 2025 GMT
        Subject: CN=8261B92435E7B0D5831D3C53C9739724B5E63E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:af:26:08:67:bc:91:67:60:de:e7:ef:20:
                    af:1b:50:3a:6b:bb:3a:e8:72:99:35:88:0a:73:e3:
                    81:a4:c0:44:37:25:98:50:08:59:67:0f:ac:c0:18:
                    be:0d:72:fc:0b:47:36:09:d7:0f:a0:78:7d:63:5e:
                    e8:1c:05:f8:7c:f8:4b:56:03:90:27:10:be:57:c6:
                    f0:47:eb:53:fc:1a:a8:94:97:4b:71:66:3f:9b:53:
                    25:09:a8:2b:b4:b4:03:09:3c:d7:46:58:77:cb:fb:
                    22:77:81:0c:1c:27:5f:9e:70:e3:56:4b:dd:d8:b7:
                    bf:02:57:9b:19:e7:11:58:2f:ce:08:a7:33:32:61:
                    ae:73:41:6c:48:4f:f7:8f:5f:6d:71:d9:47:9a:ce:
                    23:b3:c0:99:0c:00:f2:f4:e8:98:a6:c1:82:51:90:
                    75:0f:1c:c4:ff:15:15:d0:50:9a:db:01:14:09:13:
                    f6:38:17:9f:4f:9b:ed:de:4b:c0:d6:9b:0e:d7:08:
                    2b:ad:4c:60:4f:e0:ec:92:60:e3:ef:3c:a0:cc:a5:
                    91:52:df:d2:9c:00:07:6b:da:51:65:90:47:71:ed:
                    25:33:62:a1:7c:7c:1d:47:5a:66:c5:82:ce:fb:93:
                    e8:74:5b:77:cd:7e:21:15:76:c0:9b:8d:25:9d:50:
                    38:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:B9:24:35:E7:B0:D5:83:1D:3C:53:C9:73:97:24:B5:E6:3E:25
            X509v3 Authority Key Identifier:
                keyid:A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/323830343a356139303a3a2f33322d3438203d3e20323638373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:cc:c5:6f:d8:ca:fd:54:1d:34:69:ae:aa:92:ce:50:6e:
         5a:56:d2:b8:33:01:e4:fe:81:2e:ec:64:b2:1b:9b:88:a1:7e:
         50:58:56:de:1a:9d:54:18:8f:b4:4e:9b:21:98:be:00:16:d3:
         91:89:fa:6b:99:5e:b9:09:45:be:d8:ae:55:26:3a:ce:00:42:
         dd:8c:13:14:7b:b2:3a:41:eb:0d:84:fa:20:20:21:8f:88:57:
         0b:d3:b4:b5:11:67:da:5a:32:ae:92:87:97:a5:66:ad:71:72:
         16:d0:f7:d6:80:bd:55:62:79:36:5c:7e:25:29:e5:67:62:22:
         b9:b4:a9:4e:fa:50:e4:9d:2d:00:d7:3b:88:bb:48:64:b1:b8:
         a5:7f:83:40:1b:fb:a6:48:3c:ca:6f:e7:f1:20:6f:4c:ab:7a:
         38:c4:05:e9:3c:10:51:1f:65:39:ab:78:c4:06:67:c5:bc:07:
         a1:cb:77:14:49:0f:ac:47:61:7b:4b:a8:5f:5d:3a:5c:ee:b4:
         9e:cb:cf:76:ee:1a:4c:a5:7e:ee:4c:7b:97:81:30:a6:a0:27:
         cc:05:2e:2c:33:d3:44:52:ef:22:4a:c3:b3:59:5e:8c:95:12:
         ee:18:95:23:0a:ed:2f:e4:14:a3:d9:f9:98:f3:e2:c9:e8:42:
         83:12:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:29 2024 by rpki-client on console-ams.rpki-client.org