Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a3a2f33332d3333203d3e20323635323636.roa
File:                     323830343a326433343a3a2f33332d3333203d3e20323635323636.roa (raw, json)
Hash identifier:          vuaoTtFyXpmrvD7BMsM/v3QVcFDOAtUvEbl1csuS1jM=
Subject key identifier:   0B:E9:A4:E4:1F:C4:7D:E1:92:7D:39:8E:A6:3A:E5:9C:6E:F5:25:E5
Certificate issuer:       /CN=40B2EE8786079947D0F70A861B591AFA74854AA7
Certificate serial:       11A44B6E366BC19A4F6591C3087A912913F59D2A
Authority key identifier: 40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a3a2f33332d3333203d3e20323635323636.roa
Signing time:             Thu 18 Apr 2024 20:24:12 +0000
ROA not before:           Thu 18 Apr 2024 20:19:12 +0000
ROA not after:            Thu 17 Apr 2025 20:24:12 +0000
asID:                     265266
IP address blocks:        2804:2d34::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl
                          rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 19:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a4:4b:6e:36:6b:c1:9a:4f:65:91:c3:08:7a:91:29:13:f5:9d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B2EE8786079947D0F70A861B591AFA74854AA7
        Validity
            Not Before: Apr 18 20:19:12 2024 GMT
            Not After : Apr 17 20:24:12 2025 GMT
        Subject: CN=0BE9A4E41FC47DE1927D398EA63AE59C6EF525E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:4a:85:cc:ba:19:59:10:c3:ab:d1:28:6a:
                    5a:45:d4:4b:63:da:88:03:a9:13:fa:66:34:ac:0e:
                    65:4a:d1:90:13:64:49:38:fe:81:7d:ae:61:d8:26:
                    87:60:e0:cc:ec:13:67:c4:6a:81:99:06:48:b3:33:
                    ae:85:fc:de:a7:84:6a:1d:3b:48:c9:76:3d:48:a0:
                    d9:93:6b:4b:25:70:41:59:d4:55:96:0b:81:b1:e6:
                    8e:72:95:a8:4c:11:94:24:0d:7a:1d:31:cb:f0:56:
                    9b:e3:96:5c:0d:be:57:ca:ac:36:48:48:80:48:43:
                    e2:31:66:29:89:fa:21:84:91:4b:40:e3:c8:cb:c9:
                    de:f6:3e:e7:8a:62:e7:42:60:5a:2f:2c:d5:97:6b:
                    8e:1b:31:be:5d:02:58:06:23:fb:3f:21:89:94:44:
                    86:75:f3:d9:84:05:45:67:36:2d:86:13:32:11:75:
                    3b:e4:a4:46:f7:00:d6:d9:56:00:c7:72:76:ce:94:
                    6f:d3:75:8a:c1:2a:49:3c:14:c7:59:46:cf:81:5a:
                    82:72:df:8e:61:c5:16:73:62:6e:b2:e9:d4:90:97:
                    b9:d0:16:d3:ae:15:23:e1:3f:08:90:d6:c0:5e:b5:
                    3a:28:04:ac:9c:f0:45:c8:23:0b:cd:af:75:1f:0d:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:A4:E4:1F:C4:7D:E1:92:7D:39:8E:A6:3A:E5:9C:6E:F5:25:E5
            X509v3 Authority Key Identifier:
                keyid:40:B2:EE:87:86:07:99:47:D0:F7:0A:86:1B:59:1A:FA:74:85:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/40B2EE8786079947D0F70A861B591AFA74854AA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B2EE8786079947D0F70A861B591AFA74854AA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4YvV6XNJjttunLfhDSfLoaptxPdbbEdMhnfnQ6gWUB58/0/323830343a326433343a3a2f33332d3333203d3e20323635323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d34::/33

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:78:89:43:6a:5a:97:a3:c6:5c:c2:93:e2:95:71:b6:04:
         15:1c:2f:9f:47:cf:68:86:d5:18:28:ac:49:cb:52:cb:80:89:
         9d:10:18:39:3d:89:f5:af:4a:8a:53:ce:c3:bf:57:6b:82:79:
         ab:8b:75:98:ee:0e:87:cc:a5:ac:91:cb:7a:01:a6:e8:ff:ba:
         b1:e4:bd:ef:b4:28:dc:b2:5d:39:fc:39:43:3b:48:29:76:9b:
         db:89:8f:92:d8:08:b3:5c:40:79:a2:48:04:12:c7:5e:c3:74:
         b3:59:a9:47:d2:9d:d3:3a:6c:13:99:95:e9:04:92:d1:70:9d:
         cd:00:68:22:cc:01:64:b0:59:92:3a:af:ae:25:04:cb:dd:24:
         e7:19:a9:f5:44:53:17:0f:ac:ce:f5:8c:fa:42:8f:17:b3:10:
         a2:1e:10:39:1a:b9:2c:44:f1:4f:97:cc:70:fb:8a:a5:e3:32:
         4a:8b:c8:42:27:d0:2b:64:c9:ba:f9:e2:19:d4:ac:3a:42:db:
         91:bb:72:48:f0:f3:2a:a9:d1:be:e5:7c:0d:d0:34:d1:08:a6:
         4b:68:d5:38:c5:0a:ec:72:ae:ca:be:57:06:fc:92:62:22:79:
         28:e4:d1:84:8d:e7:6c:c7:55:fb:c7:f5:d1:aa:2d:75:f5:c6:
         a2:08:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:36 2024 by rpki-client on console-ams.rpki-client.org