Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
File:                     323830343a353765303a3a2f33332d3333203d3e20323638303932.roa (raw, json)
Hash identifier:          Wo2hQP+ygE6CuYmZ8DIXHTKF6SX1ulrWyB5+0gwaRnU=
Subject key identifier:   72:A3:6C:31:F2:DB:C4:60:67:FC:4B:9C:93:38:08:12:3C:9E:49:4C
Certificate issuer:       /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial:       07A621C2130A5F9149028E370F41E8D5C4D11E62
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa
Signing time:             Wed 03 Apr 2024 18:30:12 +0000
ROA not before:           Wed 03 Apr 2024 18:25:12 +0000
ROA not after:            Wed 02 Apr 2025 18:30:12 +0000
asID:                     268092
IP address blocks:        2804:57e0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a6:21:c2:13:0a:5f:91:49:02:8e:37:0f:41:e8:d5:c4:d1:1e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
        Validity
            Not Before: Apr  3 18:25:12 2024 GMT
            Not After : Apr  2 18:30:12 2025 GMT
        Subject: CN=72A36C31F2DBC46067FC4B9C933808123C9E494C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6a:d6:01:3f:18:04:3f:9f:e8:f5:35:0e:9a:
                    4e:25:3b:5d:33:d7:dc:e3:6b:9d:d2:34:a1:37:9f:
                    27:3b:88:df:d2:bc:04:84:40:a9:95:63:52:65:e9:
                    03:f6:dd:74:ff:3a:37:ea:98:8d:3a:82:9d:28:44:
                    a5:17:f2:ba:8d:cd:a3:00:03:67:bd:20:e7:b3:53:
                    a3:9a:6e:41:e2:4e:a2:c2:e7:3f:62:3b:e1:ce:05:
                    b5:20:10:1b:12:5f:cd:f3:11:3d:65:73:fa:d1:63:
                    d9:24:5a:c6:aa:27:d4:19:c6:f9:51:d4:87:30:71:
                    c0:9f:bc:48:dd:8a:1d:79:55:2a:b4:92:ff:44:b0:
                    fa:73:56:4c:22:7b:3c:8c:63:17:00:68:6a:d2:81:
                    4f:43:8e:d6:37:90:f0:9f:b9:5e:eb:3b:fb:d6:f4:
                    38:d1:ab:12:ac:ec:5d:e0:84:01:9f:e3:47:bf:81:
                    c3:a7:d6:be:78:a0:37:2b:30:d8:73:7c:93:5c:32:
                    03:e9:67:21:7d:ea:0b:ef:ff:4c:9d:69:6b:e1:30:
                    d3:e6:6f:75:2b:40:6d:e2:7f:63:b8:5a:14:0c:a8:
                    2d:fe:cc:f9:75:5e:81:1a:e4:48:72:2a:53:50:c3:
                    0b:c2:35:02:5e:91:20:7e:f9:15:41:9d:57:16:c5:
                    5b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A3:6C:31:F2:DB:C4:60:67:FC:4B:9C:93:38:08:12:3C:9E:49:4C
            X509v3 Authority Key Identifier:
                keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33332d3333203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:4e:ad:5b:cb:7b:cf:02:54:da:70:17:b1:25:b5:36:94:
         e5:c3:90:d1:86:32:4f:13:d9:44:23:0a:5d:49:2d:39:b8:24:
         52:15:ee:ce:ac:66:8c:6d:1c:62:b2:97:3e:ff:14:71:7b:c0:
         60:54:9b:f3:0f:1c:44:8c:9c:95:02:35:2b:3b:f1:bd:56:e1:
         8c:59:13:9e:7e:98:54:eb:63:09:f6:99:f0:3c:11:d8:a8:e2:
         51:d0:2a:73:32:0f:04:a0:a7:3e:77:0e:48:93:45:f6:7c:af:
         ff:8f:c1:fb:d2:fd:db:ef:91:74:e8:1e:99:2a:28:c9:22:18:
         5c:e8:0d:99:1a:1a:20:10:c3:5c:ed:35:25:83:2d:68:72:6f:
         f1:82:5c:83:10:05:17:dc:59:0c:91:2a:ec:e2:37:82:ef:7f:
         19:e5:c2:3e:c9:9a:71:0c:48:a9:0e:72:a3:f0:fa:ab:4f:5c:
         fd:bf:39:93:74:62:27:50:76:bf:57:78:ab:ca:36:56:e1:a5:
         20:83:f9:8d:82:a0:f0:2e:11:3e:1b:47:1c:3d:65:c9:b6:b0:
         2d:37:f4:db:12:51:71:49:2c:a0:a4:14:bd:f7:e6:4e:c2:c5:
         38:20:5c:60:51:c1:da:d3:70:13:a9:d1:a7:9e:d8:3f:74:c8:
         c2:cb:38:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:07 2024 by rpki-client on console-fra.rpki-client.org