Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa
File:                     323830343a3637343a3a2f33322d3332203d3e203238333238.roa (raw, json)
Hash identifier:          r7s/iHoqLkMXDSavH8EMvKiM0FRuw0JqpiOy+Mcudd0=
Subject key identifier:   8D:F7:8D:99:74:14:7B:A4:4D:CF:B9:E6:F8:CE:2F:C8:7D:B9:EB:90
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       31008981655BF74C56BC059F4A0C2F677168FA31
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa
Signing time:             Wed 24 Apr 2024 21:38:48 +0000
ROA not before:           Wed 24 Apr 2024 21:33:48 +0000
ROA not after:            Wed 23 Apr 2025 21:38:48 +0000
asID:                     28328
IP address blocks:        2804:674::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:00:89:81:65:5b:f7:4c:56:bc:05:9f:4a:0c:2f:67:71:68:fa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Apr 24 21:33:48 2024 GMT
            Not After : Apr 23 21:38:48 2025 GMT
        Subject: CN=8DF78D9974147BA44DCFB9E6F8CE2FC87DB9EB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:1f:ac:a0:a0:08:01:fc:8c:50:f8:bb:5b:
                    83:48:6d:96:c5:68:47:cd:84:2c:e7:59:3f:12:e3:
                    18:e3:14:60:e7:d0:ba:42:9d:b8:36:76:c7:55:52:
                    79:69:52:35:e1:6b:bc:7f:68:7a:8a:3b:aa:de:d1:
                    2f:f6:72:b7:f8:d8:bd:41:42:d1:c4:27:f7:6b:80:
                    aa:b2:d4:e8:3a:c8:cf:d4:4b:52:5c:7e:b8:10:54:
                    48:df:b5:08:65:92:c1:10:ab:a2:56:5a:3f:38:70:
                    97:b2:ac:ff:de:4b:c4:f7:dd:e9:46:7f:5a:35:d4:
                    7e:6d:7e:a5:f6:37:80:82:74:98:a8:36:19:fc:d4:
                    3d:f6:75:2a:3a:8b:da:46:13:d6:a0:dc:68:b7:52:
                    af:15:b1:c2:9d:8f:48:53:8f:40:5b:c0:b0:97:63:
                    bd:38:03:c5:f8:ac:1c:5a:71:a5:bc:8b:da:a7:f7:
                    ce:38:c1:02:98:09:4b:22:da:cb:1d:88:d0:cb:35:
                    6f:17:e1:b9:43:9d:ce:e3:57:05:f5:72:df:b1:a6:
                    34:f7:92:c2:c1:b3:30:42:2e:a9:a0:43:f1:b8:3c:
                    2a:4c:19:eb:ec:c8:4b:b9:52:16:5a:46:7e:90:5e:
                    1a:67:9a:a4:a2:d6:f3:8f:f2:c7:ce:7f:14:2e:28:
                    83:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:8D:99:74:14:7B:A4:4D:CF:B9:E6:F8:CE:2F:C8:7D:B9:EB:90
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a3a2f33322d3332203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:2c:4b:4b:98:fc:90:5e:a8:ac:2d:28:e4:48:29:c8:da:
         f4:d1:5b:45:ec:42:3e:60:ba:88:8b:b5:7d:1a:ce:66:29:30:
         65:7a:7c:bd:eb:a7:0f:0a:4d:72:70:8e:82:fd:01:31:d2:93:
         4e:93:20:75:90:66:6e:6b:01:47:12:b4:4b:e5:e9:20:8f:a0:
         fe:6b:e2:1b:ad:c2:eb:13:e1:13:f0:bc:25:48:24:c3:2f:bc:
         e9:e5:99:70:7b:c5:23:48:7b:9a:4e:d1:61:1b:bb:b4:95:fa:
         cd:25:3b:54:0d:99:d4:fe:b5:f3:37:6d:11:09:09:f9:8d:cc:
         fb:e2:d3:a6:f9:07:58:a1:f0:5a:6d:ff:67:22:42:6f:9b:c9:
         da:46:cc:aa:19:f3:2a:b1:4a:fb:b0:d9:18:3f:48:4c:01:48:
         f3:94:51:f6:3c:34:78:10:d1:35:31:31:c6:e6:3e:a2:2b:0f:
         17:1c:f9:cc:dd:77:03:08:66:9b:34:d0:73:61:cc:76:53:52:
         a7:38:17:29:00:d1:0e:0a:05:c8:12:c2:17:66:fe:9d:18:81:
         8e:69:ac:c0:6c:bc:34:4c:4e:a8:56:7c:c4:11:ef:85:7d:7c:
         c8:7c:0a:41:2c:43:4d:81:b4:7b:a5:0f:f9:f1:1e:62:a2:d3:
         52:62:43:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:07 2024 by rpki-client on console-fra.rpki-client.org