Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa
File:                     323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa (raw, json)
Hash identifier:          n9wVRNtaCZ3YRg95vYt8zaWsFHwFr0HgsuWLQ6ysjHE=
Subject key identifier:   B1:AC:CE:0A:1A:C6:7D:9F:34:4C:D1:BF:6F:76:17:C2:F4:A6:5C:22
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       47954D973AAB292A0B141160F63CCFD185A48146
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     266129
IP address blocks:        2804:3b18:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:95:4d:97:3a:ab:29:2a:0b:14:11:60:f6:3c:cf:d1:85:a4:81:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject: CN=B1ACCE0A1AC67D9F344CD1BF6F7617C2F4A65C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:b4:28:24:f3:79:2e:2c:5f:60:f7:d0:de:
                    9b:b8:f6:e6:8c:1c:9e:de:7d:0c:f5:cb:87:cb:e5:
                    84:c9:28:21:b0:72:09:9b:80:ce:b0:d5:7f:1a:b3:
                    77:fb:ef:16:0c:71:63:65:46:63:ce:c3:2d:e8:1c:
                    d4:9a:66:b0:d4:f3:96:6a:1b:87:f1:a1:64:f3:2f:
                    42:50:91:54:62:39:fc:8d:da:80:c3:64:04:86:e6:
                    08:90:51:8b:82:11:88:7b:34:f5:60:85:95:9f:39:
                    22:d3:c5:59:81:de:96:7b:21:d8:75:13:07:08:57:
                    f3:26:ba:85:3f:11:00:d5:a5:9f:e6:0e:01:74:43:
                    7c:7a:49:90:06:be:a1:f8:c1:5c:78:e9:19:16:4e:
                    4b:9a:62:90:fb:10:ef:ab:43:46:a2:d8:2d:da:d0:
                    b1:68:dc:88:b1:10:cd:ec:ea:bf:9e:ac:95:55:7e:
                    92:85:83:ad:04:1d:75:10:fe:a0:da:aa:c7:2d:a6:
                    a0:05:c5:ee:b3:ae:42:2f:bb:5b:de:54:33:b4:a4:
                    18:fe:d1:5c:b0:b9:6b:ea:ff:54:3b:df:6c:3d:04:
                    91:1d:26:30:0a:19:5a:8a:b4:59:b8:f0:e5:32:da:
                    dc:ac:ab:aa:97:ae:9c:32:63:ab:b8:5a:d4:30:f8:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:CE:0A:1A:C6:7D:9F:34:4C:D1:BF:6F:76:17:C2:F4:A6:5C:22
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33332d3333203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:3b:0b:50:a7:80:f5:31:22:37:78:26:b6:cc:ee:eb:3c:f5:
         58:f4:c4:54:19:66:b0:39:1d:c7:4f:c1:de:b9:5f:3c:7e:b7:
         dd:c1:aa:12:7e:91:9c:90:95:ab:80:84:0f:f5:70:4b:eb:41:
         cf:22:26:0b:f4:8b:df:0f:bb:e6:1d:da:ae:22:0d:18:de:8d:
         21:ab:2c:3a:71:a2:4f:76:3b:ba:b7:81:21:5b:b0:f9:5b:70:
         00:e9:f1:f5:6a:48:55:cb:12:bf:9a:64:8f:0c:fc:c7:7a:9d:
         7f:8f:9f:88:62:b0:60:b3:04:01:5e:7c:7b:65:0f:57:47:da:
         d4:e0:69:d6:ea:d4:57:a7:c7:84:77:76:9b:a9:69:87:2a:c6:
         09:d8:bd:c3:c8:d6:93:01:f1:82:82:6d:b1:5f:e9:96:d3:db:
         30:9c:fa:9e:dc:dc:10:ad:68:9e:69:3a:9f:13:3e:eb:9e:91:
         03:7d:22:0d:37:a2:ff:db:3a:69:70:31:f3:fb:49:82:4d:72:
         02:0c:5b:c4:ec:a9:25:69:60:23:00:5d:a1:45:6a:bd:d8:38:
         5d:c7:05:99:c8:d9:ad:d7:e6:db:3b:e5:43:f1:ad:9a:54:db:
         f5:d1:ab:df:93:7d:c6:99:1a:b9:fd:f0:69:2c:8e:26:be:d6:
         d6:7e:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:33 2024 by rpki-client on console-ams.rpki-client.org