Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa (raw, json)
Hash identifier:          /8nQ6kfRm3lSBJf6K19medKNfLCCDjVuxzWV9zMkbe8=
Subject key identifier:   83:78:35:14:6C:E0:67:05:67:85:05:BC:31:16:35:EE:71:12:D2:19
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       0C9018387B65ADF41EC0F762A7F1958A4FC554FC
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa
Signing time:             Thu 04 Apr 2024 03:24:14 +0000
ROA not before:           Thu 04 Apr 2024 03:19:14 +0000
ROA not after:            Thu 03 Apr 2025 03:24:14 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:90:18:38:7b:65:ad:f4:1e:c0:f7:62:a7:f1:95:8a:4f:c5:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Apr  4 03:19:14 2024 GMT
            Not After : Apr  3 03:24:14 2025 GMT
        Subject: CN=837835146CE06705678505BC311635EE7112D219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:c7:03:2e:5c:71:13:9f:03:b3:25:6f:d8:
                    36:e0:ee:73:92:ce:94:70:f4:ee:a3:5c:ec:85:e5:
                    c7:22:60:ee:8e:9b:fb:32:8f:ac:f8:6f:bd:8e:42:
                    c9:71:1b:5c:bd:3c:d1:7c:a8:44:af:f4:fc:44:53:
                    f9:aa:72:02:a9:14:ac:79:35:49:b0:ba:d5:a1:55:
                    f6:41:73:c7:fd:73:e8:61:c4:4d:8d:91:22:49:77:
                    98:94:83:bb:bf:03:0e:57:26:cc:d7:ee:be:0d:d4:
                    e5:27:14:e3:31:bd:a1:2e:84:ef:df:26:40:fb:90:
                    ad:a6:06:63:32:0a:3e:bc:65:f0:4a:79:ad:b5:34:
                    b0:b5:0b:28:c3:a1:c8:ea:87:0b:92:67:19:c0:50:
                    7b:71:05:c5:05:d7:d4:ba:6f:cd:15:f7:26:df:9b:
                    19:bf:40:21:a6:31:2e:32:42:44:a6:07:73:f9:40:
                    5a:1b:9e:c6:88:e2:5e:0d:12:22:09:d2:8a:b3:74:
                    10:71:1e:c0:9f:3e:2c:35:b8:86:eb:42:86:d0:b0:
                    d6:f0:3a:96:13:5c:53:1e:a7:46:46:3a:47:70:d1:
                    56:38:2f:1d:b5:d7:1d:aa:32:3d:b0:b0:b5:9a:da:
                    f8:e9:95:40:88:f8:f0:49:5e:f1:c3:c8:d2:e6:7f:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:35:14:6C:E0:67:05:67:85:05:BC:31:16:35:EE:71:12:D2:19
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:39:f1:cb:00:5c:63:86:01:e1:92:5e:d0:e8:0a:b7:5a:
         8a:b1:e6:b6:c0:19:07:77:cc:30:10:62:e7:38:cd:ed:ae:f1:
         cd:0f:ea:77:79:98:61:70:96:3c:c8:5f:bc:71:d2:2d:b4:45:
         5e:68:6a:7f:bb:11:85:ff:0a:b0:64:0a:09:29:80:b0:b5:cb:
         0b:3d:55:ce:3a:ba:5d:2c:04:75:ee:06:a6:59:59:dc:1b:99:
         d7:0f:84:87:81:75:2b:34:ac:4d:41:9f:22:94:13:52:5d:f9:
         9e:ba:a3:c1:27:65:cd:40:fd:20:fc:7e:a4:b5:1a:c4:6e:f7:
         96:12:ec:57:79:53:ad:85:a0:43:c5:94:e0:ea:91:8b:7d:a5:
         6a:73:82:33:cd:0c:52:a0:fb:d2:84:5a:76:c3:d0:c9:bc:c0:
         81:98:4a:d8:4f:c2:bf:7d:87:87:00:18:d3:8a:1e:da:ca:53:
         b3:21:5d:15:93:2f:46:1d:a4:62:d7:87:e3:ad:02:d4:55:78:
         4f:45:86:53:cc:00:94:e1:cb:bd:dc:09:eb:16:07:18:e5:50:
         06:6e:0c:2c:5d:9b:67:99:6e:a3:b1:51:79:99:99:19:d1:5e:
         20:7b:23:ca:89:34:19:95:10:23:4d:4e:5d:67:71:f4:5f:92:
         27:bd:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:22 2024 by rpki-client on console-fra.rpki-client.org