Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa
File:                     323830343a346130383a3a2f33332d3333203d3e20323637323134.roa (raw, json)
Hash identifier:          PbF+1NccurBfmlyYQ9PFWupwpnTRgtqhNqpLhzA/4D8=
Subject key identifier:   4B:3B:97:2C:B1:6C:8A:51:FC:DB:76:CE:EE:46:3E:6C:0F:72:6B:D6
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       5B15E33B89E046209887378EFDB2963B9D3045F8
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:44:40 +0000
ROA not before:           Wed 30 Oct 2024 14:39:40 +0000
ROA not after:            Wed 29 Oct 2025 14:44:40 +0000
asID:                     267214
IP address blocks:        2804:4a08::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:15:e3:3b:89:e0:46:20:98:87:37:8e:fd:b2:96:3b:9d:30:45:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:39:40 2024 GMT
            Not After : Oct 29 14:44:40 2025 GMT
        Subject: CN=4B3B972CB16C8A51FCDB76CEEE463E6C0F726BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:b2:9a:97:76:f6:bd:93:25:1c:e3:7b:c7:
                    6b:1d:4f:9e:2b:35:55:a2:1d:2d:b4:2b:f3:96:7b:
                    d8:a8:a0:f0:ab:65:15:1f:e0:b3:a0:0b:21:ad:5f:
                    aa:25:e4:99:d9:3e:e1:1e:5a:09:66:4c:99:e7:fd:
                    05:27:aa:22:c3:d7:d6:75:b5:9e:f7:a1:b5:9f:49:
                    87:4a:a6:4e:41:7a:5d:4a:3e:1f:0a:42:dd:1d:13:
                    f1:b5:07:d9:19:e8:de:ea:c7:77:53:49:f9:a0:7c:
                    b4:84:46:b7:24:a8:32:66:41:0c:d0:29:47:79:13:
                    db:bf:d6:c0:93:c4:e1:5d:48:b9:f1:81:6e:90:08:
                    52:64:f3:43:43:89:80:bd:1a:09:86:47:e1:80:7e:
                    f4:2a:7d:68:ec:c5:aa:2f:68:aa:69:5b:cd:33:1a:
                    5b:70:15:31:9b:45:6a:c4:81:01:e9:c4:db:ee:d8:
                    5a:e4:94:d4:14:54:de:1c:db:5f:55:6d:93:9e:f6:
                    24:f0:9d:61:bf:fa:40:26:51:20:36:73:0a:49:7e:
                    5e:93:d4:68:3e:8f:21:ca:d8:ea:c9:2a:d3:82:b5:
                    c7:d3:90:49:4f:db:f5:e2:2c:50:d2:d6:75:d1:f9:
                    49:d3:38:08:97:cc:93:b0:95:ec:97:59:51:86:71:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:97:2C:B1:6C:8A:51:FC:DB:76:CE:EE:46:3E:6C:0F:72:6B:D6
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a3a2f33332d3333203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08::/33

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:8c:7a:56:47:ed:02:2a:20:de:09:e4:60:71:ba:60:2c:
         18:20:67:cc:9d:ea:1b:03:29:b2:a2:33:6c:28:8b:b0:88:62:
         6f:8e:0b:88:1e:76:39:4c:84:23:d9:94:89:15:10:49:43:2b:
         db:53:0b:6e:d9:7f:00:b1:52:bf:8d:93:60:33:3f:84:53:7c:
         b9:9c:b9:70:13:d0:66:5c:5f:e6:f8:59:c9:8d:df:9d:17:69:
         bf:08:ad:41:d5:3b:3d:a8:c7:ab:20:c3:e5:c3:2f:44:51:29:
         c6:06:5a:f4:ff:96:25:f2:68:44:22:a2:55:69:5a:29:b4:9d:
         2d:44:f8:5b:7c:0c:fd:df:29:f1:41:7b:4e:b7:df:b8:9e:0c:
         37:b1:fa:3b:1a:7f:49:c0:fa:d3:6d:3f:ab:44:7f:c8:97:31:
         0a:f7:3a:29:15:d9:f9:75:14:44:70:f2:6d:06:a7:ed:a9:81:
         75:e7:58:dd:c6:9b:9d:0e:04:cc:34:51:81:d8:1e:0b:71:a7:
         99:b3:0c:91:52:6b:48:2c:60:6d:f6:b4:02:8e:69:ba:0a:c5:
         71:26:f6:81:03:b1:29:be:b9:42:9a:95:b2:43:62:bb:af:9b:
         0a:23:04:f8:be:9b:e3:3d:84:71:2b:1c:b9:62:9f:35:1a:54:
         72:97:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org