Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3334203d3e20323636353834.roa
File:                     323830343a336534343a3a2f33322d3334203d3e20323636353834.roa (raw, json)
Hash identifier:          QaDelKncj6ib4Ko1/z91Wk772ZdCBhJXkXaZuS0zJR8=
Subject key identifier:   76:6A:4D:4D:02:75:51:91:69:1B:FE:34:CD:A7:B5:4F:F2:4D:09:A7
Certificate issuer:       /CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
Certificate serial:       17EEC95C325F19D4734CF5F7C82A8BF1F5F41A46
Authority key identifier: 33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3334203d3e20323636353834.roa
Signing time:             Mon 23 Sep 2024 18:41:49 +0000
ROA not before:           Mon 23 Sep 2024 18:36:49 +0000
ROA not after:            Mon 22 Sep 2025 18:41:49 +0000
asID:                     266584
IP address blocks:        2804:3e44::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl
                          rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 16:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ee:c9:5c:32:5f:19:d4:73:4c:f5:f7:c8:2a:8b:f1:f5:f4:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Validity
            Not Before: Sep 23 18:36:49 2024 GMT
            Not After : Sep 22 18:41:49 2025 GMT
        Subject: CN=766A4D4D02755191691BFE34CDA7B54FF24D09A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:7b:22:22:ad:8c:cd:77:92:99:82:30:3f:
                    04:62:c1:e2:47:7e:54:20:46:ce:53:a8:f5:f3:24:
                    99:91:7a:bb:ea:0f:cd:c1:98:73:d4:9e:b7:02:bc:
                    93:09:1b:db:4e:4c:22:64:eb:f2:40:a6:46:0e:86:
                    7c:a3:0c:ff:98:28:7d:87:d0:ef:d5:61:df:81:06:
                    10:9a:ec:7b:26:56:d5:25:ab:4a:28:40:e5:10:06:
                    c4:24:2b:b0:b8:11:b1:d2:6b:5c:da:4a:b2:30:58:
                    5a:e5:ab:13:e4:9f:15:3c:ff:be:90:7c:f1:3e:c6:
                    6d:4f:37:4c:cc:8d:eb:25:01:32:ba:f0:98:dc:59:
                    3f:8f:a6:a4:83:df:07:1e:f9:f2:04:77:5c:3f:4d:
                    35:67:21:16:80:3d:c6:38:94:49:1b:31:cc:ef:79:
                    e8:9b:a1:60:2e:2c:55:1e:df:49:0c:71:a4:3f:8e:
                    63:2b:07:16:8e:21:a2:ef:bf:dc:ed:48:a6:be:c9:
                    c0:37:f2:e5:9f:c8:90:60:63:3c:4b:28:d1:8e:7b:
                    f8:9b:48:c5:4a:a1:7b:56:db:e9:85:58:f8:be:1f:
                    9f:14:c5:6e:e3:72:28:60:ca:cc:5c:12:e5:f2:0e:
                    be:1a:ae:fe:89:1b:8f:1b:00:21:46:43:1a:8c:cd:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6A:4D:4D:02:75:51:91:69:1B:FE:34:CD:A7:B5:4F:F2:4D:09:A7
            X509v3 Authority Key Identifier:
                keyid:33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/323830343a336534343a3a2f33322d3334203d3e20323636353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:00:91:a0:de:ce:ea:02:7a:49:7f:c5:37:d0:e7:23:73:59:
         9c:a3:5c:7d:a2:9e:60:b9:ea:91:7c:1a:29:88:57:85:89:6c:
         d0:bd:e7:f0:81:c3:a9:85:6a:0c:bd:81:39:26:65:08:81:bd:
         3a:79:c5:f1:49:c1:22:97:c9:b5:f7:34:7e:fa:04:a8:57:6b:
         4d:f4:82:83:b8:40:dc:44:fb:6c:40:90:ae:c6:4b:b0:68:98:
         de:36:ca:d4:13:24:c8:0c:0c:f8:66:9b:99:8d:93:59:67:44:
         8b:6b:a8:1b:14:c1:62:85:2a:31:cf:07:88:af:e4:18:a2:4d:
         80:0f:c3:22:58:9f:08:7a:08:f9:e8:60:81:32:5a:3a:05:41:
         87:aa:0e:32:58:a6:39:3d:02:9f:71:6a:9f:d0:e8:00:7a:4c:
         dc:11:9f:ad:a9:16:22:20:a3:5c:9e:92:72:40:55:71:df:6a:
         50:ce:67:b5:e1:62:68:48:8a:c9:d3:33:57:6d:5c:2f:47:95:
         20:32:d1:1a:bd:1f:8d:92:16:d7:26:07:90:54:33:08:63:2c:
         84:e5:64:3f:72:d6:48:40:9a:cc:a7:d0:6a:5a:02:54:0f:7f:
         f5:d1:95:2b:31:02:e0:82:e3:62:8e:8f:f2:42:82:07:26:40:
         bb:ae:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 18:43:34 2024 by rpki-client on console-fra.rpki-client.org