Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa
File:                     323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa (raw, json)
Hash identifier:          aGSalRl15eterCETMK92eOt3awQ0Bu3/xPBmgLBw2Xc=
Subject key identifier:   91:CD:4D:F4:13:0F:95:36:D3:D3:80:CC:A9:3F:1A:87:61:36:7D:21
Certificate issuer:       /CN=164081884269A17674589E45798EE6EE0A93A94E
Certificate serial:       1F9BCEEEB9407779E6C4E3A893904911C106D224
Authority key identifier: 16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa
Signing time:             Thu 04 Apr 2024 09:19:56 +0000
ROA not before:           Thu 04 Apr 2024 09:14:56 +0000
ROA not after:            Thu 03 Apr 2025 09:19:56 +0000
asID:                     266547
IP address blocks:        2804:3db0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9b:ce:ee:b9:40:77:79:e6:c4:e3:a8:93:90:49:11:c1:06:d2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164081884269A17674589E45798EE6EE0A93A94E
        Validity
            Not Before: Apr  4 09:14:56 2024 GMT
            Not After : Apr  3 09:19:56 2025 GMT
        Subject: CN=91CD4DF4130F9536D3D380CCA93F1A8761367D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:a0:38:95:44:82:1f:ab:49:cb:8c:4e:c6:
                    dc:b7:2c:6b:a7:46:48:00:61:46:a5:fd:53:42:e3:
                    43:67:37:ec:e9:d0:b2:61:b0:e5:12:ba:0f:9b:ff:
                    54:fc:f9:e2:76:aa:82:bb:5b:21:dc:6d:f5:33:fa:
                    c4:62:0d:e8:c7:86:6b:0b:94:83:22:87:21:eb:87:
                    58:c1:2f:2e:f6:3c:99:a2:35:6d:d0:0b:d3:0b:fc:
                    e2:95:83:62:5e:ce:df:98:6b:38:f8:04:3b:48:1a:
                    a6:d1:0e:a5:a6:c0:01:98:f5:02:95:e1:de:39:cb:
                    68:fc:ac:47:53:ca:3a:c3:4c:42:73:da:42:00:7d:
                    7f:12:74:41:bd:fe:cd:5d:ad:d5:50:64:1d:6f:48:
                    69:5f:26:c2:ef:94:bb:91:25:b7:12:5a:cd:90:b2:
                    11:be:ba:67:5f:0f:97:19:f0:b4:4d:c1:4c:12:02:
                    f2:74:68:c9:ab:ae:90:59:ac:80:e0:40:7a:bd:45:
                    6d:98:71:ac:1e:97:3a:c8:ec:31:3e:1b:d8:ee:93:
                    1e:15:00:37:1b:1b:6b:70:29:4a:e9:65:27:8f:24:
                    25:c1:a5:68:64:66:69:7f:af:18:32:47:cb:24:bd:
                    39:e7:93:44:42:2f:ff:75:50:7e:bd:ca:d0:76:b4:
                    66:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:4D:F4:13:0F:95:36:D3:D3:80:CC:A9:3F:1A:87:61:36:7D:21
            X509v3 Authority Key Identifier:
                keyid:16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/323830343a336462303a383030303a3a2f33332d3333203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3db0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:02:e8:09:f1:d4:2d:da:e7:c9:c4:b6:a0:c9:f7:1d:59:15:
         45:f1:a8:e2:27:24:13:6f:16:3e:d2:6b:b1:ab:1a:e9:31:bf:
         bd:42:4d:b8:0d:3b:c5:8e:e1:5f:30:47:fa:53:f5:dd:05:54:
         cb:4d:ee:96:f5:a8:72:72:b3:20:fe:ea:4b:b2:df:a9:72:88:
         c3:b2:f2:3f:63:4e:51:a6:25:d8:21:95:19:2a:42:21:74:f6:
         73:de:ea:bf:9f:1f:99:a9:8e:8a:73:da:fe:8f:a7:93:fa:7d:
         7f:09:a5:35:b3:17:2e:a4:02:b6:dc:fb:f1:b3:3a:c9:6f:46:
         5b:aa:31:cd:39:29:2d:74:c8:2d:d2:e6:f2:a6:92:df:a2:32:
         d3:0c:d2:e4:1d:9a:ed:39:71:ab:c3:84:a1:18:98:2b:b1:af:
         7d:c9:54:a6:bf:11:ee:9c:7a:dc:b6:c1:e7:97:74:0a:4b:83:
         5c:c9:34:9f:6d:30:8d:e7:8f:57:fa:93:19:db:0e:b0:a1:fa:
         84:cc:d7:ee:c7:7c:11:00:b8:24:e6:e6:ec:3f:bd:5b:7e:1b:
         54:92:78:bc:fc:23:20:09:8d:26:22:4c:3b:18:bd:2a:4d:be:
         04:3e:14:12:d8:99:31:c9:59:3f:9d:4b:02:39:1a:32:4f:b4:
         b2:1a:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:06 2024 by rpki-client on console-fra.rpki-client.org