Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa
File:                     323830343a346635343a3a2f33322d3438203d3e20323638333230.roa (raw, json)
Hash identifier:          mOOk+6NaS5AQxRV+0EHIN3aIU4NNhk16vcwf3UiBlGY=
Subject key identifier:   83:C0:87:BB:A4:A6:5C:5B:67:F6:27:35:F1:C1:EC:E9:4A:B5:1B:55
Certificate issuer:       /CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
Certificate serial:       33AE2EEE3EDC9247CAEA070983B93C0082033E6B
Authority key identifier: B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa
Signing time:             Thu 04 Apr 2024 08:25:12 +0000
ROA not before:           Thu 04 Apr 2024 08:20:12 +0000
ROA not after:            Thu 03 Apr 2025 08:25:12 +0000
asID:                     268320
IP address blocks:        2804:4f54::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl
                          rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ae:2e:ee:3e:dc:92:47:ca:ea:07:09:83:b9:3c:00:82:03:3e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD
        Validity
            Not Before: Apr  4 08:20:12 2024 GMT
            Not After : Apr  3 08:25:12 2025 GMT
        Subject: CN=83C087BBA4A65C5B67F62735F1C1ECE94AB51B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:06:02:56:ff:f6:1c:9c:1b:fb:65:3e:af:
                    2f:3d:af:22:85:49:38:95:33:1e:56:90:9f:ea:41:
                    6e:b6:d1:e3:06:2f:a8:dd:df:6a:3a:c6:5c:7d:ff:
                    30:aa:53:e0:44:f1:7f:09:51:59:90:ab:ed:b0:ea:
                    a5:2a:1c:2e:2d:1f:8a:f1:71:05:4a:0b:6c:1d:48:
                    4e:d6:6a:d9:d4:f8:06:61:8e:27:66:24:6e:10:09:
                    36:8f:0c:b0:95:cb:b4:7e:0d:fa:f8:6a:93:32:b7:
                    41:79:01:99:fa:04:7c:e8:d7:7d:d2:cd:cf:51:0a:
                    af:22:54:81:d7:fc:00:e0:6c:af:f3:5f:db:cc:0a:
                    bb:e9:9d:91:b3:51:c7:ab:08:cb:da:5b:ef:e5:0c:
                    32:f3:4d:44:1a:a4:ab:1a:50:a3:9d:39:08:58:64:
                    d4:8b:2f:30:7b:f5:d7:e7:04:38:8d:9d:54:f4:64:
                    c1:8c:a4:50:9d:30:ec:e8:73:ed:e1:d6:7c:cf:bb:
                    46:b6:66:aa:68:8c:79:49:37:73:81:f3:cf:f5:82:
                    2d:3d:8b:56:98:06:9b:c3:98:2e:9c:c5:dc:bd:06:
                    29:5d:57:0a:8a:ee:41:21:83:64:69:bd:36:a2:4e:
                    1e:db:10:f9:b2:9e:fe:24:aa:c3:36:b0:fd:30:3d:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C0:87:BB:A4:A6:5C:5B:67:F6:27:35:F1:C1:EC:E9:4A:B5:1B:55
            X509v3 Authority Key Identifier:
                keyid:B8:16:A6:DE:EE:87:A9:7A:EC:5A:D5:8B:35:70:BA:BA:44:CF:DA:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B816A6DEEE87A97AEC5AD58B3570BABA44CFDAAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/1/323830343a346635343a3a2f33322d3438203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:62:02:5e:95:7b:fc:79:cd:f3:fd:f3:9d:20:f6:17:f7:
         25:ea:cd:58:c3:09:57:6f:02:9f:1e:ab:fd:36:fa:a6:13:86:
         0c:c7:81:01:96:58:c5:17:b1:f0:c7:10:d5:fe:c3:ea:3d:6e:
         01:be:7f:0a:28:21:ee:5d:ca:0c:a9:fd:0f:44:d6:ec:f5:5e:
         35:b6:25:d2:d6:fa:35:70:4b:be:3f:a5:d9:57:eb:84:19:93:
         bc:07:dc:99:1b:88:40:c5:76:9b:34:4a:23:33:f5:e0:2f:2d:
         2c:f2:e7:7d:33:67:0b:2a:c2:39:b9:26:1e:25:ec:21:b6:9a:
         20:e4:44:3d:58:08:03:92:cb:e4:ce:7c:f9:02:42:26:92:07:
         ca:35:49:02:8f:e9:6a:bc:98:c7:9d:ec:80:e8:76:97:b2:93:
         8f:39:00:01:94:1f:70:de:40:e7:e3:56:58:f0:56:4d:8a:08:
         1f:29:d7:60:3b:45:fb:f0:f4:a1:ce:d0:f4:97:5d:17:72:1e:
         73:01:8e:c9:72:69:cb:c4:10:3c:0e:dd:f1:8d:c4:69:5d:69:
         aa:14:b5:9d:14:e3:81:aa:66:8f:64:16:f2:60:13:f6:93:b6:
         f2:79:ee:46:66:7c:cc:ab:e9:09:05:3d:79:8b:41:9e:85:07:
         75:b4:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:49 2024 by rpki-client on console-fra.rpki-client.org