Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa
File:                     323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa (raw, json)
Hash identifier:          mXL0hkVImbvB9kxP5QUCyUx91eFZ3oLcpe0dJFMWOOc=
Subject key identifier:   DE:A8:7D:3C:64:61:A6:31:D4:94:34:6D:1C:F9:31:4C:62:F7:1F:D0
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       2D6906420AB96DFD1BDA8ACA853E5B4E254EEE41
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:40 +0000
ROA not before:           Tue 23 Apr 2024 19:08:40 +0000
ROA not after:            Tue 22 Apr 2025 19:13:40 +0000
asID:                     263627
IP address blocks:        2804:1044:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:69:06:42:0a:b9:6d:fd:1b:da:8a:ca:85:3e:5b:4e:25:4e:ee:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:40 2024 GMT
            Not After : Apr 22 19:13:40 2025 GMT
        Subject: CN=DEA87D3C6461A631D494346D1CF9314C62F71FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:8a:5b:b6:b7:4a:af:68:b5:6d:8e:a3:26:
                    95:50:63:ec:df:09:3c:fd:93:b5:c3:99:98:2d:d3:
                    83:ae:03:d9:a8:9e:64:a3:f4:44:d5:89:3d:aa:bf:
                    08:64:f4:9a:b9:31:6e:1c:fb:f6:c7:27:81:4c:28:
                    73:01:2a:ac:ee:47:38:8e:f0:89:f3:b3:1f:f1:1c:
                    f7:00:d6:ae:bc:30:ea:33:12:78:cd:61:0c:8e:bf:
                    98:b4:45:7d:8e:2d:83:dc:d1:ae:5b:b9:28:b3:e1:
                    85:22:c0:c6:0a:4d:78:70:f8:96:0d:ff:19:5c:bb:
                    45:78:21:13:2e:e1:73:53:47:05:51:e5:4d:13:ed:
                    0c:e2:1b:12:51:c6:26:e6:63:e9:64:22:bd:e2:d3:
                    bd:23:8c:4b:88:7f:9c:2a:9e:ee:35:38:24:f1:5b:
                    9b:49:c1:b5:fb:e5:68:95:a6:14:75:19:cf:93:ac:
                    44:e2:fd:84:f5:58:fe:fc:08:f0:6b:cb:8f:52:c3:
                    55:2a:99:a3:49:f9:bf:b5:b9:13:2a:c5:63:4b:c8:
                    a1:a4:b6:40:f3:bb:aa:9d:8e:e8:8f:24:86:cd:7d:
                    79:1e:3f:8d:87:61:b6:f6:3c:bf:5f:62:50:15:81:
                    90:32:09:62:0e:a7:ba:05:e4:72:d7:d2:1a:1f:90:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A8:7D:3C:64:61:A6:31:D4:94:34:6D:1C:F9:31:4C:62:F7:1F:D0
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33332d3333203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:1e:c7:1a:7a:96:69:c0:4f:6f:06:d6:89:99:0e:ce:a7:
         ae:d3:92:dc:7a:9c:b7:c8:57:d7:b9:4d:b4:52:20:19:84:db:
         16:11:68:b3:99:6b:b2:a7:e5:ad:40:39:56:a3:60:13:a4:39:
         2a:5d:f3:26:cc:88:7b:b7:57:cd:c7:c0:46:10:bb:9f:10:64:
         b3:47:84:a5:34:5c:22:26:8d:8b:5b:3a:d0:1c:59:be:de:6f:
         22:90:ac:73:6d:27:22:65:b9:22:15:30:11:8e:ba:f4:8b:c8:
         6e:75:00:d0:e6:bc:fd:8c:0b:9b:84:77:53:69:46:f6:fe:01:
         4a:19:f4:e0:73:bf:e1:c8:18:df:93:2c:61:2e:87:73:98:59:
         a8:0e:23:39:98:a2:a6:70:f3:2a:36:b7:3f:e8:37:04:1b:b6:
         f5:c0:08:c9:0c:f3:93:45:1a:ad:63:72:cb:4f:6b:ab:2f:6e:
         18:ba:30:d9:50:1d:93:71:91:b0:01:d7:ca:85:1e:85:32:a6:
         b4:d0:ba:81:80:62:17:c2:98:32:a3:95:88:83:9d:de:9d:da:
         b2:6b:e1:28:15:b8:26:f1:2b:a4:19:1b:c9:f9:32:bb:3b:3a:
         58:cb:1f:65:7c:ba:84:d4:1e:68:ee:a0:e1:42:4d:e1:bf:41:
         de:62:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:59:34 2024 by rpki-client on console-ams.rpki-client.org