Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa
File:                     323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (raw, json)
Hash identifier:          7pAcbuLrpIB62LfP66+E2nxWBNHiZ+nJQEK/Jwqg2Yk=
Subject key identifier:   77:B7:1E:FA:8E:BD:4D:13:08:18:21:B6:61:C6:7C:86:D7:8A:A3:52
Certificate issuer:       /CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
Certificate serial:       790561585B4ED7B6548AAD616E31DF1295BAF28A
Authority key identifier: 33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa
Signing time:             Wed 05 Jun 2024 19:16:34 +0000
ROA not before:           Wed 05 Jun 2024 19:11:34 +0000
ROA not after:            Wed 04 Jun 2025 19:16:34 +0000
asID:                     263528
IP address blocks:        2804:1350::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl
                          rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:61:58:5b:4e:d7:b6:54:8a:ad:61:6e:31:df:12:95:ba:f2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780
        Validity
            Not Before: Jun  5 19:11:34 2024 GMT
            Not After : Jun  4 19:16:34 2025 GMT
        Subject: CN=77B71EFA8EBD4D13081821B661C67C86D78AA352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:12:8d:57:ef:6f:45:50:6c:f7:71:b1:1e:
                    2d:97:d2:67:e0:60:e2:f7:69:6a:4a:92:6a:45:71:
                    ac:49:3d:5c:21:32:d9:aa:b3:64:7b:88:8d:3c:cf:
                    48:e7:30:85:98:e7:7a:2b:2e:a5:b4:3f:dd:6a:0a:
                    14:33:e3:39:19:3b:02:2f:34:76:96:64:31:40:9d:
                    19:46:5f:b1:5e:2e:36:3a:bd:f1:2a:db:28:0d:16:
                    d2:40:45:8b:95:17:40:7b:11:63:df:e1:25:fc:e1:
                    4e:3f:29:3b:d6:4a:a7:83:15:80:ba:25:9b:a2:75:
                    4d:89:e3:cb:51:e9:38:cb:a4:70:ec:86:ae:64:ea:
                    78:89:52:38:34:c1:12:d5:87:d2:7c:da:5e:03:ba:
                    48:b1:60:76:0c:f9:a1:a7:a8:c8:8f:82:88:31:5f:
                    b2:41:81:e6:d2:1b:f3:61:b4:a5:13:2c:64:f5:91:
                    74:87:c6:e8:21:f7:ed:56:0d:03:8e:43:27:11:31:
                    67:8a:3c:d9:f2:fd:9a:db:22:b2:24:04:9f:c1:6e:
                    f6:ac:c1:1a:3d:dc:e6:7e:53:71:14:7c:21:e0:97:
                    0f:36:f8:43:02:57:c6:85:4a:20:80:09:6d:83:47:
                    97:ed:b3:dc:ca:11:b7:d1:32:35:4f:3e:94:22:5a:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B7:1E:FA:8E:BD:4D:13:08:18:21:B6:61:C6:7C:86:D7:8A:A3:52
            X509v3 Authority Key Identifier:
                keyid:33:D9:9B:8E:AE:1A:B8:BE:E4:19:8B:87:03:1C:FE:8F:ED:BE:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D99B8EAE1AB8BEE4198B87031CFE8FEDBE7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/0/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1350::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:48:d9:13:de:fd:08:22:a6:c3:e7:ed:ae:d8:2e:8d:7a:ce:
         b7:d1:02:7d:cb:c7:56:f4:10:62:91:20:20:a9:f8:c1:09:e6:
         8b:6c:8d:41:cb:7f:fc:8a:10:82:e0:2b:5a:b9:65:da:34:1c:
         81:d2:c8:d5:24:ac:74:27:ac:52:23:5a:a6:8f:a6:62:64:d1:
         61:ba:28:50:59:ca:06:98:62:d2:5e:fc:34:25:0d:68:55:d2:
         41:5e:5c:ab:f3:7a:7b:79:e0:66:88:17:a7:e2:cd:43:75:b4:
         41:cc:a7:ab:ba:f2:3e:25:37:ff:ac:6f:6d:ac:6c:ec:90:7f:
         61:97:3e:0a:ea:a1:7b:e8:74:89:b0:fb:c1:45:7a:ff:41:85:
         4d:c2:34:bf:e2:2d:78:76:61:d0:44:05:9b:9b:8b:47:cf:2d:
         b5:9f:06:a7:3b:d4:5e:cf:7d:4b:2a:13:1c:f8:26:86:42:f5:
         ca:55:7d:58:8b:58:7c:aa:6e:ca:47:93:de:e7:3d:a0:a9:03:
         a7:bf:1a:0a:d4:10:f1:e4:53:9a:a4:ae:21:cd:b4:2f:0a:1f:
         96:96:fa:86:a2:1e:7d:52:86:cf:75:4b:c8:fc:d4:b9:47:5c:
         8f:35:e6:09:0b:cd:6d:6d:7a:a0:41:64:89:66:77:3b:b3:8a:
         8e:2e:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:43:15 2024 by rpki-client on console-fra.rpki-client.org