Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33332d3333203d3e20323639333535.roa
File:                     323830343a363335383a3a2f33332d3333203d3e20323639333535.roa (raw, json)
Hash identifier:          w2OoQ96RgIBZhAcJn7FXnKq6bNt57AUzi2dtfMWgnvk=
Subject key identifier:   03:B0:1D:32:72:FA:1F:D9:E2:B5:35:FC:B8:10:29:61:B0:76:3D:F4
Certificate issuer:       /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial:       24F0C4121BB0B1170D7FA33375888F2986C4CCE3
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33332d3333203d3e20323639333535.roa
Signing time:             Fri 05 Apr 2024 00:27:25 +0000
ROA not before:           Fri 05 Apr 2024 00:22:25 +0000
ROA not after:            Fri 04 Apr 2025 00:27:25 +0000
asID:                     269355
IP address blocks:        2804:6358::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
                          rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f0:c4:12:1b:b0:b1:17:0d:7f:a3:33:75:88:8f:29:86:c4:cc:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Validity
            Not Before: Apr  5 00:22:25 2024 GMT
            Not After : Apr  4 00:27:25 2025 GMT
        Subject: CN=03B01D3272FA1FD9E2B535FCB8102961B0763DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:a5:d5:dc:ac:1f:4a:5e:a0:68:68:1a:aa:
                    54:66:6e:4a:bf:be:83:c1:cd:09:c8:d1:00:5e:8c:
                    da:45:8f:06:a3:fa:f9:a5:4b:22:4f:80:fd:7d:29:
                    a9:9b:27:99:95:53:3f:75:fe:f4:57:11:54:12:c0:
                    12:43:61:cc:cd:0c:68:5c:ea:db:b6:c3:ae:e0:fc:
                    8e:af:43:06:c2:82:4f:fd:98:df:b7:44:b5:70:d4:
                    72:c7:8d:92:0e:a1:21:0b:29:33:fe:06:76:3a:21:
                    b3:82:28:a2:64:26:8d:ee:96:78:62:d0:3a:d6:f0:
                    1c:70:94:46:5e:1e:58:96:0b:06:d1:7d:75:6b:46:
                    6c:3b:1d:d3:60:15:86:f9:d0:5c:29:fd:df:1f:7b:
                    1a:b5:9f:95:6c:1a:c4:78:7e:b2:11:b2:87:1d:1c:
                    14:6d:60:53:b7:59:2a:e0:c4:d9:97:2b:c6:a5:58:
                    53:c0:75:b7:2b:4c:d2:4b:fe:e8:11:8a:e1:32:f2:
                    74:cc:48:13:23:2d:78:10:92:c3:2d:eb:e6:30:8e:
                    ae:27:ef:96:50:a2:41:96:7b:2c:c8:15:e2:99:27:
                    d5:08:7c:fc:cf:9b:34:9f:8c:56:ac:19:29:38:fe:
                    6a:34:46:3f:bc:67:4e:1f:10:c9:ec:80:87:37:5e:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:1D:32:72:FA:1F:D9:E2:B5:35:FC:B8:10:29:61:B0:76:3D:F4
            X509v3 Authority Key Identifier:
                keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a3a2f33332d3333203d3e20323639333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6358::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:72:d9:46:69:23:1f:18:25:7d:a5:6f:66:72:4d:69:f4:fe:
         64:2e:59:d1:d6:09:77:9e:d2:0e:05:40:5c:d7:57:bf:53:3c:
         7d:28:42:ee:ea:c7:a6:a6:e2:63:15:64:d8:1d:f3:25:ce:d8:
         e4:04:fe:21:a2:0a:e0:b9:7b:83:29:14:b4:c8:9b:36:fd:ab:
         61:f9:07:5d:cf:78:4f:3e:1c:48:02:85:1c:c9:51:75:e6:42:
         3d:bb:a6:05:94:39:cf:cc:4c:b5:88:9c:f2:0e:6d:05:70:04:
         7c:9c:c3:a6:cf:62:2c:49:b0:0d:9e:5e:c0:2f:29:8c:04:50:
         30:59:ff:e8:3c:0f:20:a2:fc:51:47:c0:fc:55:e8:19:95:00:
         b7:5d:f6:74:4b:42:71:2b:e3:7b:10:68:cc:16:bf:bf:38:20:
         78:9b:54:e6:1b:73:ac:36:2c:a7:0c:db:01:7b:ac:ca:78:38:
         68:94:fb:7a:d2:27:7a:3f:9e:17:bd:51:ef:3f:6f:8f:a8:9e:
         6f:89:2f:bb:ec:6e:e3:a4:7b:1d:db:e7:d1:05:2a:e8:bb:20:
         65:17:60:b4:5d:93:df:d2:31:aa:46:8c:df:ad:f3:01:45:3b:
         9a:8f:24:fd:72:17:be:c7:52:08:11:e4:e5:60:a3:af:0b:f6:
         bf:34:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:28 2024 by rpki-client on console-ams.rpki-client.org