Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa
File:                     323830343a366431343a3a2f33322d3438203d3e20323730353131.roa (raw, json)
Hash identifier:          YjOW6UOCdhX6uphsWDkCqvVVS0v8CeTguaer+HWXanA=
Subject key identifier:   D1:3B:07:BF:00:49:13:25:1D:7F:A3:4B:7B:00:23:3B:B5:F4:FF:28
Certificate issuer:       /CN=933D25103B9996B3949AF7607EDF6BC993402B70
Certificate serial:       452B11D7FAA66AFED9838131E280722AE6344E2E
Authority key identifier: 93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa
Signing time:             Thu 04 Apr 2024 17:08:16 +0000
ROA not before:           Thu 04 Apr 2024 17:03:16 +0000
ROA not after:            Thu 03 Apr 2025 17:08:16 +0000
asID:                     270511
IP address blocks:        2804:6d14::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl
                          rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2b:11:d7:fa:a6:6a:fe:d9:83:81:31:e2:80:72:2a:e6:34:4e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=933D25103B9996B3949AF7607EDF6BC993402B70
        Validity
            Not Before: Apr  4 17:03:16 2024 GMT
            Not After : Apr  3 17:08:16 2025 GMT
        Subject: CN=D13B07BF004913251D7FA34B7B00233BB5F4FF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:d6:d0:36:a6:44:85:10:28:59:96:0b:d2:
                    4b:9e:dd:8b:a9:66:45:1a:0e:7d:15:cf:61:07:ea:
                    e0:17:14:3d:43:4c:22:7b:c3:e9:91:5f:39:c2:02:
                    8f:f2:f2:b3:4e:83:4e:e9:47:cc:0d:7f:79:1b:53:
                    8c:12:9b:0c:a7:f0:73:b3:44:66:3e:da:48:15:8a:
                    35:bb:0a:21:f7:3a:a1:4f:d7:23:19:de:1d:9a:05:
                    be:e2:85:84:c5:cb:aa:48:db:2a:33:98:ba:1f:7d:
                    5c:b5:11:9b:34:33:b8:2f:bb:c6:8c:66:1d:cb:d6:
                    d4:ca:82:2f:75:7e:75:be:4d:cd:90:b9:ca:6b:94:
                    d6:5e:c0:49:b4:11:2a:26:84:01:d5:9e:99:a1:af:
                    d5:f3:8a:e6:84:a0:fc:d0:6e:7c:f9:d2:c8:0b:62:
                    e5:12:86:7f:ec:96:1f:31:5b:7b:31:1c:02:e6:db:
                    4f:57:35:4f:80:61:60:a4:42:12:dc:67:b3:ff:11:
                    fd:55:fa:48:93:7e:a5:b7:91:a8:95:7e:b1:5b:4f:
                    9e:6e:59:cb:f4:9d:96:e3:f7:64:e2:3e:00:7d:48:
                    6e:b1:0e:e3:a4:b2:80:4c:76:bb:99:89:c2:ef:db:
                    aa:08:23:0e:83:e8:6e:1a:21:74:bb:9c:22:9d:65:
                    d0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3B:07:BF:00:49:13:25:1D:7F:A3:4B:7B:00:23:3B:B5:F4:FF:28
            X509v3 Authority Key Identifier:
                keyid:93:3D:25:10:3B:99:96:B3:94:9A:F7:60:7E:DF:6B:C9:93:40:2B:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/933D25103B9996B3949AF7607EDF6BC993402B70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/933D25103B9996B3949AF7607EDF6BC993402B70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56RdXxD9QXwXWehrchLsLyTzAhLu4RSqWvQ6FrKeqaBU/1/323830343a366431343a3a2f33322d3438203d3e20323730353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:75:c9:7f:58:81:c9:fa:10:01:79:da:0f:81:59:97:ce:
         0f:8f:c8:fa:6a:3e:d7:2f:d4:6c:f1:1c:71:6a:db:4a:6a:2f:
         fe:f1:18:6a:80:28:60:da:c8:23:ba:71:e4:b2:b7:eb:5f:90:
         98:bd:01:99:61:b0:44:e9:e5:ba:08:5b:b8:3f:b3:0e:9e:e7:
         56:74:f7:b1:a6:27:3a:37:d7:93:86:af:c3:bd:f5:79:20:5a:
         6c:6c:05:53:ff:68:93:d6:17:ba:08:fb:90:56:df:8d:cf:7d:
         96:34:cd:44:ea:16:23:e9:57:37:9c:33:4c:b7:90:19:a5:2f:
         c4:1b:33:fd:93:68:86:5c:8a:2d:08:8d:ff:9d:1d:89:dc:b8:
         20:95:63:ac:63:6a:d0:6c:91:cd:96:fb:f3:ae:08:04:93:6d:
         22:7a:e9:41:6a:5a:ac:cb:f0:a5:4c:6e:44:80:77:8f:9b:a6:
         c8:60:8b:de:65:5e:c2:36:f4:70:14:ab:5e:15:19:41:2c:ec:
         28:77:1c:68:c0:dc:d8:c8:96:63:ac:2d:48:9c:89:87:53:c5:
         d0:0f:56:ab:a0:ed:a4:74:12:10:54:ba:12:74:a1:01:43:b0:
         c2:51:03:a4:91:41:a8:42:d3:c8:52:d8:41:ad:32:c1:49:8b:
         61:41:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org