Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33332d3333203d3e20323731353939.roa
File:                     323830343a376530633a3a2f33332d3333203d3e20323731353939.roa (raw, json)
Hash identifier:          fqz21tJa7bDlBCulxNCxwFXA2bNmzNUPNnzhPMKujXA=
Subject key identifier:   C3:70:B3:60:44:E6:92:56:B3:34:FD:2F:E3:73:FD:B7:E5:9E:C4:62
Certificate issuer:       /CN=085B4B97D0BA72E679EC0F52343750221AD51660
Certificate serial:       59874AC9FB26D4197BEAF4D1523111BF9B932CF6
Authority key identifier: 08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33332d3333203d3e20323731353939.roa
Signing time:             Thu 04 Apr 2024 13:04:32 +0000
ROA not before:           Thu 04 Apr 2024 12:59:32 +0000
ROA not after:            Thu 03 Apr 2025 13:04:32 +0000
asID:                     271599
IP address blocks:        2804:7e0c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl
                          rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:87:4a:c9:fb:26:d4:19:7b:ea:f4:d1:52:31:11:bf:9b:93:2c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085B4B97D0BA72E679EC0F52343750221AD51660
        Validity
            Not Before: Apr  4 12:59:32 2024 GMT
            Not After : Apr  3 13:04:32 2025 GMT
        Subject: CN=C370B36044E69256B334FD2FE373FDB7E59EC462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:21:ad:03:50:b6:19:11:a0:0a:76:88:54:
                    87:59:d0:9e:27:f5:c6:83:ac:82:3c:c0:ae:1c:12:
                    a6:7d:51:c6:9f:01:b4:af:ce:04:28:a1:a4:40:24:
                    96:9a:d0:3f:36:37:26:d5:a9:41:3f:9f:0d:15:f7:
                    ec:40:98:0f:17:4e:e2:ff:55:eb:d9:c9:44:7e:62:
                    81:01:34:e4:ef:f4:3b:b1:20:d4:5a:1f:25:93:1f:
                    9e:62:62:be:d6:d7:fc:b1:3d:b3:60:18:ae:fe:3f:
                    43:89:7c:70:40:71:6f:05:01:93:85:30:23:8e:2e:
                    3a:da:60:1a:3c:ae:6d:b9:75:1e:a9:e9:27:ee:7f:
                    1d:60:62:75:8a:77:a7:28:05:c3:96:c8:e9:c6:cf:
                    f7:8a:9b:a5:81:16:f8:35:11:45:45:92:55:5e:12:
                    a7:f1:5c:e2:e3:1e:53:e9:41:f1:9a:d3:75:40:8f:
                    f6:30:0e:da:4e:5f:bf:96:cc:e1:c5:10:1a:6c:45:
                    11:f4:b9:ec:93:14:4d:b3:13:ee:88:07:58:93:7e:
                    52:4a:05:c4:16:88:7e:ff:f3:31:1c:35:b4:ee:62:
                    da:28:1a:c7:12:e8:d1:e5:28:40:57:52:88:34:da:
                    bc:39:6e:f5:18:e2:8f:f9:39:9a:a8:a9:81:53:b7:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:B3:60:44:E6:92:56:B3:34:FD:2F:E3:73:FD:B7:E5:9E:C4:62
            X509v3 Authority Key Identifier:
                keyid:08:5B:4B:97:D0:BA:72:E6:79:EC:0F:52:34:37:50:22:1A:D5:16:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/085B4B97D0BA72E679EC0F52343750221AD51660.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085B4B97D0BA72E679EC0F52343750221AD51660.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/2/323830343a376530633a3a2f33332d3333203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e0c::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:05:d7:95:4a:59:3f:6b:90:54:5c:96:7c:3c:10:b4:f7:
         3f:60:03:09:5a:cf:93:db:35:a8:ff:84:11:13:06:ea:ed:85:
         b6:03:00:3b:ec:97:ab:3a:93:d8:69:58:3e:ee:c1:ce:81:1b:
         e6:f0:f8:7d:8e:4d:70:46:47:4c:b5:fd:6d:16:99:58:d8:31:
         8f:da:45:27:1a:da:50:ec:c4:70:8a:75:e7:93:e1:7f:1b:f1:
         f7:2c:e5:8a:93:19:12:09:85:f8:8c:db:20:0e:c9:f7:16:40:
         ed:82:8b:cb:a3:2b:a2:ee:05:f2:75:70:47:6a:2b:66:12:5c:
         ec:f7:7b:63:0b:37:bc:7b:ee:8c:fd:35:20:15:ae:f5:2c:b0:
         9b:3e:ef:b1:f1:13:8a:a3:7f:e5:03:8e:60:96:90:f1:12:11:
         e1:fe:d0:f0:20:0d:76:ef:66:73:33:db:47:c7:43:2d:0f:c8:
         c2:9e:df:11:1c:c5:10:21:b5:de:7d:13:1f:38:21:16:ab:0b:
         59:90:2f:3c:e6:1a:8f:0b:ac:55:cf:56:a3:12:41:c4:66:9b:
         ed:99:d2:a2:03:1a:02:74:0d:d4:e9:bf:87:a4:17:c0:a7:72:
         63:3a:d0:e2:d3:1f:74:36:19:75:90:d4:9e:e1:14:01:73:65:
         71:41:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org