Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
File:                     323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (raw, json)
Hash identifier:          kMrhH0VDhwxMZhLjZTsI3oMyDgm9tXjaUvcEbwtxkbg=
Subject key identifier:   5B:9A:B3:98:67:11:1B:E9:0A:74:CB:56:95:0C:B7:0D:81:DD:49:DB
Certificate issuer:       /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial:       5AD0D0E9CBBD0252984742FCCA1B8CF4C2C3FD0B
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
Signing time:             Thu 05 Sep 2024 15:47:09 +0000
ROA not before:           Thu 05 Sep 2024 15:42:09 +0000
ROA not after:            Thu 04 Sep 2025 15:47:09 +0000
asID:                     267073
IP address blocks:        2804:47b8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
                          rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d0:d0:e9:cb:bd:02:52:98:47:42:fc:ca:1b:8c:f4:c2:c3:fd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
        Validity
            Not Before: Sep  5 15:42:09 2024 GMT
            Not After : Sep  4 15:47:09 2025 GMT
        Subject: CN=5B9AB39867111BE90A74CB56950CB70D81DD49DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:97:92:fe:11:57:57:3e:39:1e:ea:df:b6:
                    8a:1e:de:f9:50:09:e8:aa:8a:46:b6:e9:99:bb:54:
                    57:78:ba:7f:48:90:7d:8a:8c:cd:7b:5d:df:02:19:
                    95:3a:68:fc:fc:b2:12:52:bd:af:b2:d4:c7:13:91:
                    0c:69:f0:d4:b2:37:b9:da:db:99:14:74:04:dc:c8:
                    24:54:2f:7f:09:d6:d6:4a:d9:1b:47:89:c3:f7:fc:
                    9b:81:ca:fb:b9:dc:8c:95:f3:82:11:21:1c:a4:8b:
                    b8:51:49:f5:2e:93:0d:db:e2:1a:ee:14:7b:24:54:
                    b0:03:80:17:2b:48:c2:c7:21:36:9e:7d:fa:cc:69:
                    05:ef:4e:36:d8:e7:fb:51:f8:74:6f:fc:ee:86:03:
                    bd:58:a1:d0:2f:58:7e:22:e4:3a:32:2b:8a:5d:58:
                    2b:7f:59:0e:a2:1d:7e:ff:a8:7d:da:24:dc:3c:5f:
                    0a:47:19:b0:37:5c:23:8c:59:de:f9:cf:1b:93:7c:
                    06:af:36:a9:a9:80:7a:66:75:5f:9e:73:ed:58:a7:
                    2d:91:c3:66:35:ea:f7:b6:66:67:a3:ae:f1:91:8f:
                    c2:b2:fc:8a:a8:dd:93:c2:2b:c9:7b:f8:41:6e:94:
                    ff:22:01:9d:3a:7b:d4:0a:8e:bb:99:a2:1d:37:30:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:B3:98:67:11:1B:E9:0A:74:CB:56:95:0C:B7:0D:81:DD:49:DB
            X509v3 Authority Key Identifier:
                keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:b4:f9:f8:f7:13:50:4a:e1:32:f8:41:03:f3:85:70:80:20:
         78:4e:7c:80:a4:e2:4b:1b:c6:ee:8f:2f:1f:de:18:59:e5:98:
         3b:e5:92:bb:0c:85:93:95:c7:61:2c:7f:1e:25:fb:6e:dc:d7:
         16:5b:09:e3:7a:9b:fe:36:51:ea:da:d8:a1:b0:1a:64:c1:7b:
         0b:b4:bc:04:71:82:89:c3:9d:91:bf:72:0f:68:5f:2f:25:21:
         a9:3f:0a:02:90:39:d1:db:60:ac:0f:43:5b:72:fd:f1:0a:2c:
         6a:ba:27:8d:b2:83:63:57:7a:a6:ce:40:50:16:bd:5e:0e:61:
         d7:bb:cf:4c:e7:16:97:e4:b2:23:73:01:c9:8e:9e:ab:2b:00:
         f0:e0:de:5b:99:f3:8f:29:37:42:3c:65:2f:e6:a4:87:69:be:
         12:74:0d:b6:4f:42:90:dc:07:1a:8f:10:45:cd:ba:4c:68:f9:
         f1:bd:f8:9b:d9:fa:bc:f6:26:96:11:72:22:cd:03:ce:d4:22:
         be:dc:6f:53:f8:d7:fe:4b:3e:41:be:35:91:85:93:82:16:32:
         4c:7c:2e:a4:33:9d:39:57:ac:8a:55:b6:c1:e3:d6:90:61:22:
         44:08:cd:e2:94:9b:e6:d2:e4:d8:7e:b2:db:89:11:65:c1:0c:
         ce:a3:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:13 2024 by rpki-client on console-fra.rpki-client.org