Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a383030303a3a2f33332d3333203d3e20323635343236.roa
File:                     323830343a333366303a383030303a3a2f33332d3333203d3e20323635343236.roa (raw, json)
Hash identifier:          mpD5+fbYb3WwspT6WvgXu3B6K1gG5OXLlRlwtJX8n7s=
Subject key identifier:   F8:16:04:FE:68:90:36:21:F3:C9:CF:F5:05:1A:76:24:45:60:DE:DD
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       2B2F83412CB028F48C7792AE53C7F6A6489E9219
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a383030303a3a2f33332d3333203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:14:30 +0000
ROA not before:           Fri 19 Jul 2024 00:09:30 +0000
ROA not after:            Fri 18 Jul 2025 00:14:30 +0000
asID:                     265426
IP address blocks:        2804:33f0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:83:41:2c:b0:28:f4:8c:77:92:ae:53:c7:f6:a6:48:9e:92:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:09:30 2024 GMT
            Not After : Jul 18 00:14:30 2025 GMT
        Subject: CN=F81604FE68903621F3C9CFF5051A76244560DEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c9:85:fe:55:75:65:76:d2:9e:fc:ed:9a:8a:
                    5b:fe:ef:fa:4f:12:ee:14:f7:40:6e:c6:d8:41:27:
                    77:68:0f:20:80:29:aa:9f:db:12:a4:e2:5c:86:10:
                    9c:40:9e:2e:5f:c1:28:cb:94:85:88:c3:d7:e0:ac:
                    02:c6:0a:14:05:51:eb:3b:3e:6a:50:4e:f7:cf:8c:
                    e3:44:eb:d5:ed:f5:b8:9d:c0:43:18:ce:d2:79:9f:
                    df:ae:6d:cb:6a:05:04:a5:d8:ef:45:92:da:59:94:
                    4d:6f:b7:5c:0d:db:59:e5:0b:91:bb:51:f6:7c:a2:
                    96:25:b5:31:ab:df:df:b7:54:b1:30:6f:fd:47:f0:
                    38:3e:ae:be:67:06:8e:3b:0c:04:3b:4b:19:b5:05:
                    5a:e5:37:82:70:d0:af:7c:ef:a5:4d:66:68:a7:29:
                    41:9a:23:45:e3:55:9f:83:1e:eb:5c:51:69:b2:9e:
                    88:f5:98:69:2e:a4:8c:62:6d:25:f6:52:64:0b:26:
                    be:7d:d1:b6:a4:17:ab:fb:bb:db:a6:f8:af:07:a5:
                    4a:91:ca:42:00:e4:d5:6d:01:43:33:91:a5:6a:36:
                    66:d0:87:3c:8b:48:f2:f6:39:1b:90:1c:37:73:bc:
                    94:a1:80:50:e1:67:a7:40:af:ef:75:1e:1d:dc:ed:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:16:04:FE:68:90:36:21:F3:C9:CF:F5:05:1A:76:24:45:60:DE:DD
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a383030303a3a2f33332d3333203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:99:c8:5e:04:bb:f4:69:d2:47:b4:71:1d:46:42:43:d7:
         f3:ac:78:02:ba:06:aa:5f:34:05:4c:a9:28:0d:87:a1:ad:21:
         54:9e:68:38:1a:2c:a0:16:66:99:d1:9f:45:89:c2:b2:da:b0:
         3f:70:33:bf:5b:7a:d7:e1:c3:12:7b:9c:13:98:0c:72:79:54:
         6b:76:2b:9c:5b:cc:39:de:db:33:2c:e2:ca:46:3f:72:d3:4b:
         90:95:e7:0f:d3:49:56:49:b2:3b:df:44:70:6d:84:a1:4c:89:
         d2:d4:c5:a7:1b:ae:a9:27:b3:65:53:48:c1:cc:22:19:80:d9:
         10:89:89:4a:70:9e:90:48:e6:ab:7f:95:18:05:f4:33:8b:29:
         8f:54:6d:f1:69:84:ed:07:4b:60:05:f2:2e:08:68:f1:15:23:
         83:51:d3:f0:57:ea:90:13:68:29:48:de:89:0b:a8:d7:a1:6b:
         b0:4a:e8:ce:39:6b:90:f4:97:2f:0b:13:6b:6a:7f:4f:fa:f7:
         f5:3a:6e:71:bb:2e:40:21:05:fb:74:ba:c5:0e:75:3e:e0:cd:
         57:e7:02:14:72:c4:4c:bd:16:9c:b0:f6:97:78:f8:b8:b1:b5:
         47:3a:f8:9b:e4:7d:f7:99:75:73:31:11:40:a7:8d:f6:3a:73:
         c4:b9:cb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org