Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          NBE6K6zJ/FotRliNVDb8nUAwWjiBFGRk7f5Lj9E98Xo=
Subject key identifier:   9B:DA:83:A9:8E:8F:4B:B9:73:5C:57:D8:9D:34:93:B8:F3:19:EF:C1
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       16A67F9C15D8B1D13D140C4155CDD32771E56C86
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Mon 21 Oct 2024 13:46:08 +0000
ROA not before:           Mon 21 Oct 2024 13:41:08 +0000
ROA not after:            Mon 20 Oct 2025 13:46:08 +0000
asID:                     266309
IP address blocks:        2804:35d4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl
                          rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:7f:9c:15:d8:b1:d1:3d:14:0c:41:55:cd:d3:27:71:e5:6c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Oct 21 13:41:08 2024 GMT
            Not After : Oct 20 13:46:08 2025 GMT
        Subject: CN=9BDA83A98E8F4BB9735C57D89D3493B8F319EFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:6e:48:09:46:40:b5:1a:fb:1c:02:e4:53:
                    e1:f3:bf:ae:5e:40:cc:29:1d:b9:5f:77:55:a2:57:
                    e4:43:40:92:ea:90:ce:be:a7:7c:4e:19:8a:87:0e:
                    6c:4d:5c:e1:59:5e:68:7d:94:9f:d0:d4:75:16:60:
                    2a:be:18:35:c3:25:47:7d:36:15:2e:11:3d:ac:1a:
                    da:f5:f7:5b:64:05:5a:76:e3:a2:99:39:0c:de:1d:
                    c9:26:6d:0a:73:b4:7d:ec:6f:93:90:fe:dc:a1:4e:
                    4b:6b:ff:8a:5f:a5:8c:b9:d4:c8:19:27:11:3d:3d:
                    b0:06:96:39:81:92:b0:a0:0b:3b:02:01:28:58:50:
                    75:ba:a7:da:86:c0:09:43:a1:cd:7a:21:04:5a:cb:
                    8c:e3:70:35:71:1a:1b:53:d6:95:18:7b:80:53:a8:
                    09:15:e9:4b:46:12:4a:01:12:01:88:81:b3:af:e7:
                    53:81:98:a4:f6:8a:78:80:2f:ea:92:03:c0:77:df:
                    28:3a:1a:70:60:50:be:e5:28:34:6f:2a:5d:5d:7d:
                    2a:f1:47:ad:d1:c9:f0:3b:e8:5d:80:d4:c0:9e:22:
                    49:4d:8d:37:36:5b:37:de:8a:9d:fc:9b:1a:69:67:
                    84:71:0c:c9:6c:eb:32:70:36:d9:e0:97:a0:58:25:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DA:83:A9:8E:8F:4B:B9:73:5C:57:D8:9D:34:93:B8:F3:19:EF:C1
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:59:41:16:ae:ff:a7:25:cc:52:62:9e:1c:9e:06:2c:99:
         66:09:d7:aa:80:60:d0:c7:e3:c5:22:0d:a5:32:75:f5:2a:79:
         9f:bf:43:ec:8c:b6:19:3e:9b:73:5e:96:b2:63:79:a5:52:9a:
         fb:c2:2b:87:43:45:bf:2d:dd:56:47:d2:ee:ee:a8:a6:9a:50:
         a6:01:f6:16:0f:24:74:3d:08:3a:36:f4:19:07:f5:2f:00:6f:
         8c:67:9d:fc:28:44:3a:69:2d:fa:ee:f3:ec:7c:23:64:75:51:
         9f:41:28:56:36:79:07:2d:49:a3:5f:ac:83:ca:da:00:12:ab:
         a3:39:a7:f0:3c:fd:a1:d2:62:8d:8a:df:c9:51:d6:e0:a3:54:
         15:ae:6d:5e:0f:78:1e:5e:8e:88:77:5a:0b:09:4c:24:50:52:
         2e:6d:25:ac:a9:0e:7d:fc:4c:2e:8f:1e:a0:d4:d5:e3:36:37:
         18:f0:5a:50:20:74:02:df:7b:99:1d:34:6c:82:ad:e2:56:66:
         7a:5c:89:29:54:46:7b:56:a4:e7:8c:3c:15:27:ad:8b:5c:5a:
         bf:26:81:e3:5f:8c:5a:4f:72:16:b9:e3:86:78:a6:80:83:97:
         66:cd:9d:f3:2c:cc:6a:0a:ca:aa:58:3d:0e:1a:af:ad:12:1e:
         85:e4:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:15 2024 by rpki-client on console-fra.rpki-client.org