Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a3a2f33332d3333203d3e20323635343236.roa
File:                     323830343a333366303a3a2f33332d3333203d3e20323635343236.roa (raw, json)
Hash identifier:          RMNDhFxhpcuZ5Koq53JrF83WVPzgxtP7MWkNiP/eHcQ=
Subject key identifier:   BD:78:8A:1C:2E:53:9E:E4:86:BE:FC:43:4D:5E:50:A2:A6:9C:8A:B4
Certificate issuer:       /CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
Certificate serial:       01C7DFE7950270630C4F21E26B91C853E0EFC42A
Authority key identifier: 66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a3a2f33332d3333203d3e20323635343236.roa
Signing time:             Fri 19 Jul 2024 00:14:25 +0000
ROA not before:           Fri 19 Jul 2024 00:09:25 +0000
ROA not after:            Fri 18 Jul 2025 00:14:25 +0000
asID:                     265426
IP address blocks:        2804:33f0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl
                          rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c7:df:e7:95:02:70:63:0c:4f:21:e2:6b:91:c8:53:e0:ef:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66934DEA248703E228F7551474B7E7FBCA9E7E40
        Validity
            Not Before: Jul 19 00:09:25 2024 GMT
            Not After : Jul 18 00:14:25 2025 GMT
        Subject: CN=BD788A1C2E539EE486BEFC434D5E50A2A69C8AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:7f:ac:55:17:5a:e6:a6:be:4d:46:7e:8b:
                    d9:24:eb:3e:04:f5:63:2b:d3:df:2c:53:04:7d:14:
                    7c:16:86:2a:45:28:32:f0:f7:f3:b7:86:27:1b:a3:
                    66:27:54:86:36:23:09:86:41:61:89:82:06:86:01:
                    62:ec:ca:e9:da:8b:b3:a6:b8:eb:2d:b6:56:5e:4d:
                    20:43:64:ce:a6:2a:45:20:82:82:cf:f7:cd:bb:a8:
                    cd:90:e8:21:3a:b0:ae:23:bf:d8:b1:16:da:e7:a5:
                    f8:8e:89:f6:bc:fe:cb:87:4d:59:cc:28:9f:8d:1e:
                    bc:76:b3:8c:01:7a:63:0c:8d:06:06:f1:0c:a7:29:
                    48:55:85:65:30:ad:cf:c1:8c:9b:9f:4c:4f:a4:22:
                    d8:b0:da:f9:33:0c:e6:07:cb:ca:b3:48:b3:fe:5b:
                    83:aa:5b:31:c8:36:de:71:ef:02:e9:1f:1f:74:4a:
                    31:7d:0f:ce:0e:66:b4:f5:3c:38:cf:f8:ff:93:73:
                    c1:2f:2c:66:72:f4:de:99:46:84:78:57:1c:d0:56:
                    92:98:b0:65:13:d3:e0:f8:cc:44:53:1f:7a:07:13:
                    02:ca:5a:d4:e8:eb:77:88:ed:bc:2f:82:fa:75:35:
                    b9:f6:a0:82:9a:c3:0a:b3:0b:ea:e5:65:2b:08:ba:
                    f1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:78:8A:1C:2E:53:9E:E4:86:BE:FC:43:4D:5E:50:A2:A6:9C:8A:B4
            X509v3 Authority Key Identifier:
                keyid:66:93:4D:EA:24:87:03:E2:28:F7:55:14:74:B7:E7:FB:CA:9E:7E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66934DEA248703E228F7551474B7E7FBCA9E7E40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6udf8FsvAzMYf1KF6cRQgWLFqSudnF1zgpF6QraygeAo/1/323830343a333366303a3a2f33332d3333203d3e20323635343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:94:2e:c1:53:bf:82:ae:2d:fa:f4:77:1e:86:e1:d2:fb:04:
         31:6a:12:b9:3b:d2:b1:97:8a:91:ae:00:4a:b1:fb:0b:d1:c1:
         39:96:b6:f0:93:68:63:6d:c1:3e:89:25:9b:03:3a:ad:07:e7:
         7d:02:92:27:91:03:fd:15:25:d4:63:53:dd:92:53:1e:ec:0e:
         47:07:a4:5d:60:01:ae:04:55:cf:32:00:b7:5b:74:0b:e7:0f:
         13:5b:1c:10:0f:44:af:2f:42:c3:59:8b:6c:9a:47:78:61:7c:
         eb:19:2d:ad:93:48:59:06:6d:dd:69:14:8e:72:51:db:2e:02:
         ff:40:a4:48:60:d6:55:f5:ff:a0:0b:91:51:a5:bf:f2:31:ab:
         37:9b:10:b7:d9:b7:3d:20:6b:0c:19:ef:97:a7:a5:05:a3:0b:
         e8:cc:d4:75:55:a1:72:c1:3d:c8:4f:3c:91:c0:74:a5:cd:de:
         10:35:be:a8:4b:17:2b:9e:2c:55:3b:4f:ce:6b:28:d7:7c:fd:
         34:22:14:bf:a0:f1:4d:0f:62:4c:21:c6:0d:68:ab:9f:1f:81:
         75:72:42:30:f9:12:87:67:8b:f8:ee:bf:c1:a2:61:7c:5f:54:
         f6:7f:b6:b6:69:7f:bc:e1:87:30:90:1f:9d:57:a4:fd:e6:17:
         ff:63:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:33 2024 by rpki-client on console-ams.rpki-client.org