Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa (raw, json)
Hash identifier:          AmXlf5Zv7sEgGGlVWsIy9Xt7/JBJWq71U81mrqgeH38=
Subject key identifier:   7D:7F:64:3A:BA:08:23:60:36:F3:65:90:56:A6:80:A4:B9:2E:00:69
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       64D96CC0E045FDC313652F60379DBA68737F7B5B
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa
Signing time:             Wed 15 May 2024 14:33:20 +0000
ROA not before:           Wed 15 May 2024 14:28:20 +0000
ROA not after:            Wed 14 May 2025 14:33:20 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d9:6c:c0:e0:45:fd:c3:13:65:2f:60:37:9d:ba:68:73:7f:7b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: May 15 14:28:20 2024 GMT
            Not After : May 14 14:33:20 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ae:b2:a4:6d:2c:58:2f:da:70:11:fc:c5:c5:
                    2a:3f:3e:f8:a7:66:1d:6a:e9:35:e8:8e:c7:69:3c:
                    47:7d:e8:d4:53:79:23:7e:44:9c:ba:d6:f4:98:94:
                    40:39:28:09:86:de:92:f1:e4:f9:45:2d:1c:34:f9:
                    81:75:15:41:da:3c:bc:f9:e1:fd:a8:12:64:e9:f2:
                    ef:be:41:4e:f6:e5:00:f1:88:69:96:0d:7d:08:c7:
                    2b:de:0b:ea:c3:43:56:d2:1a:8d:cc:ac:5d:cb:82:
                    56:6c:cb:bd:e7:0c:3a:3f:5c:e0:88:4f:b2:55:61:
                    77:5e:8e:3d:ee:16:be:f6:b1:95:8f:31:78:76:99:
                    bc:51:43:32:19:14:fa:3a:4e:12:d5:26:75:b6:3e:
                    97:5e:78:b4:2a:74:1d:c8:37:07:f7:00:03:e1:62:
                    4e:ba:aa:df:6c:0b:95:8b:47:7b:25:a2:75:ed:1d:
                    99:33:80:2b:f5:86:9d:27:b8:d4:2f:7a:87:34:6f:
                    cd:20:71:db:4c:6f:64:3b:a9:76:c9:73:1e:db:1e:
                    7c:92:95:aa:ec:d2:93:99:ee:9e:69:d1:4a:a8:87:
                    c2:6c:a4:39:e3:ba:1e:ec:54:60:e3:94:b2:16:08:
                    62:06:e3:11:24:88:d0:aa:aa:00:66:b6:09:d9:7e:
                    f5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7F:64:3A:BA:08:23:60:36:F3:65:90:56:A6:80:A4:B9:2E:00:69
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33332d3333203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:c9:50:81:ee:ea:27:05:5c:6d:78:63:ef:52:0c:5c:c5:
         f9:19:17:a4:1c:db:80:48:d4:e9:a7:9e:74:a6:fb:41:53:19:
         81:1d:de:12:3f:b7:48:65:16:61:53:e9:31:9c:f0:d1:59:14:
         7e:e9:9c:1e:a3:d7:28:68:41:ff:38:b2:55:37:c6:b1:e6:fe:
         84:27:6b:96:01:fe:79:8c:4e:0c:1e:ed:62:8d:89:ca:55:00:
         35:38:61:32:76:86:a7:41:29:b5:01:6c:37:08:f1:ca:fe:39:
         eb:3b:b4:68:b9:75:ac:ca:04:4b:2d:8a:80:dc:56:78:da:9d:
         d2:f0:28:86:ce:4a:5d:55:46:c1:71:4f:21:04:48:e0:56:53:
         dd:b9:75:3a:e9:42:37:00:9a:a0:74:5e:11:2f:d7:ca:82:65:
         81:bf:f0:d9:dc:06:ff:45:07:e6:77:63:a9:c3:70:15:0e:2a:
         12:2f:a7:18:70:00:47:4d:37:17:a7:27:e3:ee:41:77:b5:d2:
         db:bf:d4:b7:ae:b5:43:36:8f:19:b8:d1:7f:04:96:14:aa:c3:
         ca:f7:49:95:6c:1c:e0:96:a7:73:07:d9:ac:ba:46:0d:86:a4:
         27:99:85:74:1d:46:36:e8:22:98:32:4c:c1:1a:d2:e0:a2:13:
         4a:35:33:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org