Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          E4R1TLAvTc3bP2hMXbS2NnfCMgWoGuZ7jVk97bgoWR0=
Subject key identifier:   3A:83:33:BB:B6:C6:63:EC:12:50:2F:EB:40:F9:E2:07:6A:DC:36:0E
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       71C33D19DE21295B5F629777A312559FA7B6037D
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Tue 23 Apr 2024 19:32:35 +0000
ROA not before:           Tue 23 Apr 2024 19:27:35 +0000
ROA not after:            Tue 22 Apr 2025 19:32:35 +0000
asID:                     263995
IP address blocks:        2804:2910:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 22:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c3:3d:19:de:21:29:5b:5f:62:97:77:a3:12:55:9f:a7:b6:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Apr 23 19:27:35 2024 GMT
            Not After : Apr 22 19:32:35 2025 GMT
        Subject: CN=3A8333BBB6C663EC12502FEB40F9E2076ADC360E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:7c:33:11:2a:ad:6f:7d:55:fb:ff:bb:20:
                    70:1b:64:99:70:ff:6f:8d:81:52:ef:df:db:52:07:
                    69:b6:37:53:be:69:3a:22:53:22:4b:7f:bd:d7:e0:
                    28:0e:1c:b0:c7:21:53:19:c2:c2:af:0b:fc:f6:db:
                    2b:a3:85:3f:20:b6:d7:ca:a8:9d:1f:f9:01:13:0c:
                    69:06:d8:5b:f2:36:ad:f1:d9:c0:9e:24:a2:db:26:
                    33:f2:37:9d:9d:31:84:7e:69:38:96:fe:f5:fd:7c:
                    00:68:27:95:6e:86:37:27:ed:54:e3:81:d6:d3:fd:
                    7f:c9:cf:86:54:8c:f2:93:ec:61:fe:cf:94:aa:b2:
                    7d:d1:70:ae:1c:a3:87:4b:c3:b1:dd:06:68:f4:25:
                    25:e4:8a:f0:81:67:96:a5:07:dd:22:b0:ef:ec:5d:
                    a4:19:54:e7:f1:6e:63:dd:0b:71:ab:a4:02:83:65:
                    bb:97:ab:dc:82:66:1a:cd:51:c9:02:b8:06:bb:67:
                    b4:b8:f4:47:19:1f:47:95:42:f4:eb:2b:70:73:48:
                    01:3c:14:db:d1:c8:2e:31:92:93:09:9b:7b:b8:4e:
                    bc:82:00:9e:b9:39:33:ce:f4:1a:f2:7c:92:86:7b:
                    81:99:93:d5:a0:40:16:cb:6b:43:41:d3:e1:47:0f:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:33:BB:B6:C6:63:EC:12:50:2F:EB:40:F9:E2:07:6A:DC:36:0E
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a32303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:9c:f3:3e:96:b5:c5:6e:44:29:17:e2:d6:0e:7e:dc:fe:
         48:33:2a:fb:14:5a:5e:d1:b8:76:da:39:a1:50:a5:86:31:3f:
         e4:3d:ab:d4:ac:bc:ec:ce:3d:03:b3:0a:6e:31:c1:4f:dd:00:
         38:98:40:aa:cb:04:e8:f0:c9:31:92:a1:41:c2:5b:fe:49:22:
         fb:98:37:5a:36:45:d3:d6:63:92:b5:20:3a:91:de:0a:05:4e:
         1c:5d:ec:ea:43:c7:69:a6:72:8b:13:9c:a0:28:7d:12:04:62:
         dd:94:95:83:92:a8:52:cc:fc:f5:17:96:3e:b5:70:97:6b:15:
         9d:83:97:5f:43:8b:35:d5:ec:af:1d:03:3b:ee:e2:e4:21:f0:
         58:18:29:ac:f3:d3:d4:64:45:f7:7b:d7:72:cb:4d:af:60:0c:
         4f:01:6d:0d:78:ef:b6:0e:4a:e1:ff:22:8f:57:90:fe:52:25:
         e1:c0:dd:4c:49:33:72:2d:b0:07:24:09:8e:6e:17:6e:71:62:
         0d:78:6f:8d:16:a7:22:78:65:73:05:8f:70:f7:86:6b:d2:32:
         d7:84:51:3f:29:21:03:97:ea:2f:4b:64:f2:9e:f0:de:73:7c:
         a9:a1:3e:fe:e8:9e:35:e1:b3:9f:3a:54:dd:4e:8f:ba:36:87:
         cf:33:82:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 21:40:02 2024 by rpki-client on console-fra.rpki-client.org