Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
File:                     323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa (raw, json)
Hash identifier:          pUctIHfoAikavapgOG6/3qvLd+MKVnyObnGBtIzpQfE=
Subject key identifier:   E9:9C:79:96:D2:16:58:E3:2E:83:93:E4:FA:15:1D:EB:5E:61:8B:E4
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       5231EB76470926A4DAA81EBBE8F100FFBEE4626A
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa
Signing time:             Thu 04 Apr 2024 11:06:58 +0000
ROA not before:           Thu 04 Apr 2024 11:01:58 +0000
ROA not after:            Thu 03 Apr 2025 11:06:58 +0000
asID:                     262868
IP address blocks:        2804:328:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:31:eb:76:47:09:26:a4:da:a8:1e:bb:e8:f1:00:ff:be:e4:62:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Apr  4 11:01:58 2024 GMT
            Not After : Apr  3 11:06:58 2025 GMT
        Subject: CN=E99C7996D21658E32E8393E4FA151DEB5E618BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:d5:a0:58:15:b3:9e:94:50:de:06:ba:1d:
                    56:05:79:96:be:28:af:dd:0f:2a:03:69:c7:17:2e:
                    47:3b:8c:90:8c:1c:50:29:d3:8e:56:a4:e5:d2:d4:
                    9b:04:49:e7:4f:9c:81:ca:9b:64:5a:d0:41:ed:3f:
                    ea:bb:a3:63:b5:47:13:ee:8c:dd:e4:9a:3a:5e:11:
                    65:1e:86:c3:9f:94:50:68:7a:64:84:a3:26:36:43:
                    7b:47:37:67:a1:b0:19:14:51:cf:eb:5c:20:f1:7f:
                    1e:a1:27:b7:59:22:a3:78:a5:36:91:16:ef:e7:50:
                    d6:fc:1a:31:bd:89:85:9f:a1:6b:8b:5a:f6:09:74:
                    d3:d9:3f:40:87:10:dc:ac:cb:6c:ff:f4:84:ed:92:
                    2e:85:41:30:16:c8:1b:ad:51:e1:c4:29:a2:cf:bc:
                    95:a4:f1:96:6a:d7:34:6a:8b:05:0a:29:cf:69:fe:
                    32:c2:c0:18:7e:eb:47:07:36:18:be:6d:a9:61:12:
                    3a:31:dc:74:9e:86:e9:c8:9c:d6:a3:3d:37:3b:29:
                    94:1b:8a:69:02:1a:4e:69:ee:92:1e:ca:bd:53:1e:
                    c7:5d:5a:40:f1:8d:09:25:b6:f9:dd:ae:08:28:be:
                    99:4a:e1:6c:81:b6:ab:79:b5:97:3e:19:68:bd:76:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9C:79:96:D2:16:58:E3:2E:83:93:E4:FA:15:1D:EB:5E:61:8B:E4
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/323830343a3332383a383030303a3a2f33332d3333203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:328:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:4d:24:42:34:cd:af:33:a3:e0:c8:bf:ae:5f:ff:05:97:
         7d:48:da:3a:95:2a:63:eb:f1:b7:87:83:fd:5b:1a:82:8b:63:
         03:f7:b8:b4:ed:21:36:45:71:c0:98:d2:d6:ec:e1:73:93:f0:
         05:af:eb:74:c6:73:73:82:68:6b:e8:52:15:18:47:68:1e:4c:
         4d:63:ac:e0:d0:e8:64:35:89:cd:67:d4:4b:bf:9e:de:e2:81:
         b6:7a:60:e1:44:1b:c1:3b:83:21:83:ee:ac:d8:cb:fa:ba:ed:
         c4:34:74:de:35:ff:09:76:c4:d8:c5:85:6e:71:1f:7d:60:3e:
         3b:0e:f6:de:4c:5b:c8:f1:b8:69:66:74:e1:24:df:89:ec:2a:
         51:54:5a:47:80:01:91:7a:96:4f:6e:d5:cf:d7:96:af:08:39:
         48:20:7f:12:43:4f:4d:9a:c3:a7:7c:42:cc:28:68:1a:50:48:
         aa:e5:0e:67:97:fb:4a:f1:9b:31:2d:2e:6f:45:34:9f:06:c7:
         fe:c2:04:12:31:55:15:52:bf:62:67:ac:ae:9c:95:64:11:a8:
         50:22:4c:c9:f3:cc:8f:6c:ec:97:26:77:77:38:90:fb:dc:47:
         bd:41:47:0f:39:bd:6e:99:0a:80:66:e7:47:fc:e2:04:28:84:
         51:83:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:53 2024 by rpki-client on console-ams.rpki-client.org