Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa
File:                     323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa (raw, json)
Hash identifier:          ikTRgxQLvgd+TEzATxTk13rdCNm80DDMaSWa617osh8=
Subject key identifier:   6E:05:8D:39:BE:FC:A4:D4:15:38:4B:AB:85:47:82:6F:18:09:2B:B8
Certificate issuer:       /CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
Certificate serial:       2556555F09E3F7EF583E947B3471FF18EC24EC47
Authority key identifier: 31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa
Signing time:             Thu 04 Apr 2024 01:58:52 +0000
ROA not before:           Thu 04 Apr 2024 01:53:52 +0000
ROA not after:            Thu 03 Apr 2025 01:58:52 +0000
asID:                     268484
IP address blocks:        2804:51e8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl
                          rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 20:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:56:55:5f:09:e3:f7:ef:58:3e:94:7b:34:71:ff:18:ec:24:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6
        Validity
            Not Before: Apr  4 01:53:52 2024 GMT
            Not After : Apr  3 01:58:52 2025 GMT
        Subject: CN=6E058D39BEFCA4D415384BAB8547826F18092BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:7e:67:aa:36:7d:10:44:18:66:6a:1c:a6:
                    02:a8:fb:20:20:df:d7:1d:48:b2:34:d6:de:ac:a0:
                    2a:e6:89:fe:70:1a:76:15:10:dd:5b:52:1d:2f:77:
                    94:2c:6e:c7:a2:1a:13:4e:37:da:2f:30:1b:0b:19:
                    8b:ab:5a:c0:ca:4b:e3:8d:ce:be:d0:62:9f:be:f9:
                    ea:0d:d1:1c:0a:22:c2:73:15:ae:f3:b4:41:16:d3:
                    eb:8a:69:57:2e:98:c9:48:7f:5e:66:59:74:f2:4e:
                    bf:2e:ea:d7:a0:e4:12:91:43:4c:11:cd:bd:18:ce:
                    65:13:8c:38:66:80:46:9c:1a:7d:35:5d:10:44:1e:
                    7e:f8:79:7f:dc:4d:33:ce:91:54:56:e3:29:e6:3a:
                    19:ea:2e:89:c2:f9:d7:c1:8d:5f:71:f8:27:7b:84:
                    18:49:62:64:e6:13:26:6c:60:96:53:5a:98:fd:cf:
                    93:80:7a:25:9e:c5:3b:c2:2d:47:20:56:65:b4:a6:
                    83:7c:0c:56:bb:0f:14:4e:6f:43:42:21:87:fb:7f:
                    c4:59:5d:5a:4b:0c:88:e3:a1:f7:b0:fb:d1:fe:0e:
                    3b:4b:9c:5f:d4:e6:bf:b8:e3:11:f0:4e:3b:d8:c8:
                    1c:e4:36:49:c8:34:0f:d1:58:5f:0e:13:d5:07:66:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:05:8D:39:BE:FC:A4:D4:15:38:4B:AB:85:47:82:6F:18:09:2B:B8
            X509v3 Authority Key Identifier:
                keyid:31:DC:B6:01:D4:FD:7F:DD:87:D7:4C:93:EB:B2:01:CF:BD:0C:A9:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31DCB601D4FD7FDD87D74C93EBB201CFBD0CA9E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/232kV63GLgSmgNG89qgqrJdJBUu6SPiRDcqfWxjBYm6d/1/323830343a353165383a383030303a3a2f33332d3333203d3e20323638343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51e8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         91:9e:84:42:4a:f7:5e:10:3d:91:1c:08:27:b5:15:7a:7f:f0:
         c3:b0:c3:de:89:aa:06:08:aa:ac:e6:15:02:30:75:0d:13:06:
         95:dc:b5:0b:18:8c:b2:77:fd:a0:54:b0:fc:64:9e:cd:8a:69:
         7f:c0:94:11:43:3e:bc:bf:fb:b4:da:37:bd:aa:2d:31:8c:a6:
         43:66:f3:0d:ff:90:76:f4:fe:3d:76:94:e8:63:5a:d2:4e:8a:
         fe:98:ea:13:03:42:c7:eb:84:66:be:8d:22:4e:34:8b:9b:b5:
         7e:78:f8:46:b0:6a:77:2e:60:b1:a2:a6:dc:af:19:81:10:fc:
         13:a4:1f:c5:4e:bb:18:0b:36:23:cf:df:0c:c5:36:ed:42:0c:
         b1:d4:f8:5f:d8:91:f1:a8:87:da:69:5c:9a:15:2f:a4:ea:52:
         67:c9:c3:de:11:88:9d:f9:2f:86:56:ce:1e:66:4a:0f:62:c6:
         f5:29:99:ff:a8:e7:a3:96:c8:d2:cd:fd:7b:5e:23:0c:19:4d:
         dc:7a:23:e0:a3:ff:98:6e:97:92:58:52:c9:80:b0:b9:76:f1:
         20:3a:5a:eb:7a:d7:fd:f7:69:f8:50:46:89:31:7e:87:84:ca:
         a4:12:db:a4:92:03:f0:80:b9:59:fc:89:a2:67:2c:9e:68:28:
         f2:93:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:51:14 2024 by rpki-client on console-ams.rpki-client.org