Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa
File:                     323830343a363632633a3a2f33332d3333203d3e20323639353339.roa (raw, json)
Hash identifier:          17mp3jEsi8JfeI06yRiNjHWWOgiKKbqLTSuDcLTHy9Y=
Subject key identifier:   90:AE:BD:0B:42:94:08:DC:3C:14:E4:C6:59:17:B6:63:65:C5:3E:01
Certificate issuer:       /CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
Certificate serial:       18470A39C99847F59315E534F3BD16313DFF02F5
Authority key identifier: 61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa
Signing time:             Thu 04 Apr 2024 15:55:29 +0000
ROA not before:           Thu 04 Apr 2024 15:50:29 +0000
ROA not after:            Thu 03 Apr 2025 15:55:29 +0000
asID:                     269539
IP address blocks:        2804:662c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl
                          rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:47:0a:39:c9:98:47:f5:93:15:e5:34:f3:bd:16:31:3d:ff:02:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61B8BFC4DF5F553A5B38694045E0E47F0F23EB63
        Validity
            Not Before: Apr  4 15:50:29 2024 GMT
            Not After : Apr  3 15:55:29 2025 GMT
        Subject: CN=90AEBD0B429408DC3C14E4C65917B66365C53E01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:22:fd:0a:30:86:45:b6:4b:7c:e0:6d:d6:
                    c4:e0:09:54:3f:8a:c6:63:94:a6:43:9a:04:61:1e:
                    fb:17:25:b6:99:36:17:a6:31:9a:48:09:4a:f5:29:
                    a9:49:ed:d8:9d:b2:8d:19:b3:a7:65:8a:fa:bf:7a:
                    e0:90:51:74:a1:68:96:40:b1:61:e0:bc:6b:79:74:
                    d0:cb:e0:c9:9f:85:4d:0b:4e:4e:54:50:4d:5f:8d:
                    19:d1:7e:79:56:10:f4:b0:79:72:35:9d:ef:fc:bc:
                    67:ce:69:56:07:0e:a1:dc:9d:20:a2:44:e5:41:ed:
                    92:43:6d:ca:1b:c9:f6:79:46:d5:65:2b:55:9d:d8:
                    2d:70:f3:c0:06:55:07:f7:20:ab:95:c6:0e:ab:af:
                    92:c1:31:63:75:42:71:15:28:8f:0b:9c:ac:64:13:
                    d3:ba:3d:00:bf:70:c6:23:e0:d3:e2:7d:2f:18:1f:
                    5b:44:52:2d:d3:94:bb:44:1d:a8:82:43:65:db:7c:
                    cd:01:40:d9:95:83:5f:ea:96:63:73:25:a7:74:fc:
                    0d:7a:78:ec:28:33:7e:db:80:31:bd:d1:80:ed:25:
                    59:1d:d9:6e:ff:a9:8a:ab:d0:9f:10:d0:a0:40:52:
                    6d:0d:00:62:27:50:e2:a1:f7:f0:00:34:d0:b9:f5:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AE:BD:0B:42:94:08:DC:3C:14:E4:C6:59:17:B6:63:65:C5:3E:01
            X509v3 Authority Key Identifier:
                keyid:61:B8:BF:C4:DF:5F:55:3A:5B:38:69:40:45:E0:E4:7F:0F:23:EB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61B8BFC4DF5F553A5B38694045E0E47F0F23EB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/1/323830343a363632633a3a2f33332d3333203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:662c::/33

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:1f:d5:fc:d7:25:e1:ce:e8:4b:7e:89:b4:6f:9a:d9:f9:
         0f:75:3d:6f:83:e4:1e:63:56:dc:b5:ee:cd:ed:e1:b9:d7:e7:
         d8:29:84:98:93:c0:40:da:a0:67:c8:10:24:07:0b:f5:00:88:
         07:da:57:6c:c9:65:b1:36:38:c8:14:33:5d:5f:3f:2d:28:71:
         80:66:0d:7e:9e:2a:37:9c:32:9c:c7:ef:90:db:ac:c4:cb:b0:
         bd:97:14:6e:d3:cd:c5:14:6c:70:bd:93:f9:f4:1a:40:09:e3:
         45:21:1d:55:b0:96:1a:90:de:81:04:86:e3:74:42:ec:52:2c:
         87:e2:bd:fd:0b:40:48:6b:2c:f2:fc:46:6e:12:41:8c:aa:6c:
         19:a7:99:78:06:9d:d7:27:59:10:de:aa:b0:a0:68:ec:95:df:
         cf:ef:01:63:b9:bc:14:6b:34:6c:9f:aa:f3:36:e3:e2:8a:2c:
         a3:0a:83:c1:9b:a6:f3:42:a8:dd:cd:af:85:6e:f7:b5:15:4e:
         0a:ed:34:b8:5c:30:75:fb:ad:af:fa:b6:a1:76:5e:f0:b6:80:
         44:84:e6:fc:48:71:e0:da:2a:b1:8b:89:f5:5d:87:1e:a9:2e:
         31:09:86:f1:35:71:70:be:9b:03:7a:31:4a:89:52:e9:06:9f:
         b0:40:e4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:13 2024 by rpki-client on console-ams.rpki-client.org