Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a383030303a3a2f33332d3333203d3e20323634313335.roa
File:                     323830343a323266383a383030303a3a2f33332d3333203d3e20323634313335.roa (raw, json)
Hash identifier:          MYvmI9OOc2J7kkTImKqvREUHxgnf+NDRjR1g7Hzt+Cc=
Subject key identifier:   03:BE:EE:A1:F8:EC:6E:1E:55:66:E6:EA:0C:0E:3F:99:4E:61:0B:D1
Certificate issuer:       /CN=01170BDC1377EB9F68890189149ACEBC035A036A
Certificate serial:       62142E782B2CD0AFB0340C0C4C48BDA2F801FAED
Authority key identifier: 01:17:0B:DC:13:77:EB:9F:68:89:01:89:14:9A:CE:BC:03:5A:03:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a383030303a3a2f33332d3333203d3e20323634313335.roa
Signing time:             Tue 21 May 2024 14:35:39 +0000
ROA not before:           Tue 21 May 2024 14:30:39 +0000
ROA not after:            Tue 20 May 2025 14:35:39 +0000
asID:                     264135
IP address blocks:        2804:22f8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.crl
                          rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:14:2e:78:2b:2c:d0:af:b0:34:0c:0c:4c:48:bd:a2:f8:01:fa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01170BDC1377EB9F68890189149ACEBC035A036A
        Validity
            Not Before: May 21 14:30:39 2024 GMT
            Not After : May 20 14:35:39 2025 GMT
        Subject: CN=03BEEEA1F8EC6E1E5566E6EA0C0E3F994E610BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:d2:1e:f2:6c:30:af:4f:8d:89:00:99:38:
                    53:68:8d:bf:94:c4:34:f7:30:b5:90:56:f5:5c:fd:
                    dd:46:d3:16:fe:be:a4:dc:6b:0d:94:5c:62:b2:a8:
                    dc:1f:8a:6e:39:86:0b:f8:07:94:92:9b:94:e4:75:
                    68:d3:1e:0b:1a:14:79:22:0b:79:23:50:e3:f8:f7:
                    05:86:38:16:f4:3d:f2:81:15:ad:36:b7:a6:1d:96:
                    56:b1:15:69:d9:5f:36:0b:f8:00:85:84:7d:ca:e7:
                    01:ff:d3:04:31:7c:09:94:59:f8:7f:85:8b:80:c9:
                    cd:94:75:6d:6a:2b:29:ba:05:b7:56:7e:ec:08:ca:
                    ac:90:5e:c2:f2:fb:b7:0c:51:13:31:27:30:5a:bf:
                    be:58:d0:7f:bc:07:60:c0:13:cd:f6:7e:74:c2:b4:
                    89:8e:fe:cc:04:62:e8:1a:2d:58:ac:69:4d:f2:a2:
                    a7:7e:52:e4:e3:05:ca:bd:d1:1c:b6:f0:00:e0:0d:
                    a4:55:5f:8c:fd:c2:a0:c3:10:db:4e:84:50:03:07:
                    49:59:08:84:e1:f4:54:ab:58:8d:7a:7b:47:9c:70:
                    21:3d:4f:44:d2:2e:4d:50:27:bd:e6:c4:22:d2:27:
                    dd:bc:f0:8c:98:cd:c2:f0:88:61:62:db:ae:01:58:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:EE:A1:F8:EC:6E:1E:55:66:E6:EA:0C:0E:3F:99:4E:61:0B:D1
            X509v3 Authority Key Identifier:
                keyid:01:17:0B:DC:13:77:EB:9F:68:89:01:89:14:9A:CE:BC:03:5A:03:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/01170BDC1377EB9F68890189149ACEBC035A036A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01170BDC1377EB9F68890189149ACEBC035A036A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/323830343a323266383a383030303a3a2f33332d3333203d3e20323634313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22f8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:d7:2e:23:e9:2a:73:50:40:46:b4:5d:ab:84:4e:ca:5a:
         2c:5e:07:e3:e8:94:e1:a3:6b:ef:39:3c:3d:48:f1:3f:79:70:
         53:f3:f2:74:0f:cf:8d:c8:0c:ed:5f:ce:7c:93:cf:6d:3e:0d:
         a0:c9:b8:96:c2:e9:98:31:47:04:40:3b:fb:67:a1:9c:bd:23:
         1e:b1:be:52:9e:7a:1c:f2:e3:e3:5d:fe:a7:8c:92:e4:30:3b:
         ef:9f:89:43:db:7a:7a:f6:e7:e4:a2:9a:57:4f:3b:40:49:bd:
         34:25:67:0e:06:fe:f7:74:46:20:5e:e5:f9:a4:99:a3:3f:3f:
         51:23:f8:13:ae:22:92:7a:f8:c9:c9:90:42:47:64:cc:19:a9:
         62:c0:be:74:98:55:8e:29:ba:07:93:43:01:45:26:e7:73:b3:
         6b:20:63:70:41:a7:51:53:18:25:c2:69:ba:42:c9:9f:96:3a:
         3f:7a:2c:75:70:16:8e:90:a5:ec:dd:50:54:11:a9:fa:15:9c:
         3e:6b:95:58:a7:11:7c:c4:8b:88:6f:64:9c:fc:8e:4b:81:de:
         ca:0e:05:82:91:f1:ff:ba:e6:8d:3b:6e:73:a4:c2:0b:6e:6f:
         b0:cc:aa:dc:87:c0:1a:19:2a:f0:d4:7c:1a:3a:38:35:34:c2:
         8a:d4:50:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:59 2024 by rpki-client on console-fra.rpki-client.org