Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
File:                     323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa (raw, json)
Hash identifier:          sLBKrE+BKtBRD6bHwzVU908PshcZmk0YhcTMTiBaG28=
Subject key identifier:   34:BA:39:08:23:2C:A9:9C:FF:34:70:92:F4:28:2A:08:AA:0B:EC:5D
Certificate issuer:       /CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
Certificate serial:       558AAEA700403E2B4AE29A94CB97D6452FFB36E9
Authority key identifier: 41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa
Signing time:             Wed 03 Apr 2024 18:31:46 +0000
ROA not before:           Wed 03 Apr 2024 18:26:46 +0000
ROA not after:            Wed 02 Apr 2025 18:31:46 +0000
asID:                     266623
IP address blocks:        2804:3ed4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl
                          rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8a:ae:a7:00:40:3e:2b:4a:e2:9a:94:cb:97:d6:45:2f:fb:36:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78
        Validity
            Not Before: Apr  3 18:26:46 2024 GMT
            Not After : Apr  2 18:31:46 2025 GMT
        Subject: CN=34BA3908232CA99CFF347092F4282A08AA0BEC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:70:6c:44:27:cd:d0:6d:2c:ed:15:7c:a0:10:
                    30:82:88:30:6d:be:f0:42:c9:c5:5e:a8:09:a6:e0:
                    f8:bd:b2:66:92:93:52:65:35:0f:10:0d:16:3e:e4:
                    76:83:a2:04:e7:18:5c:58:8f:90:52:f8:7f:df:27:
                    cd:0c:d3:02:ba:31:1a:85:23:11:40:ce:dd:56:2d:
                    f6:30:a2:1a:b5:f1:b1:44:e5:33:33:6c:68:51:4d:
                    ab:3c:05:1e:12:4f:4d:37:9e:9e:12:35:c7:84:5c:
                    94:49:dc:0d:da:60:51:9c:b8:e7:ac:52:f4:05:dc:
                    83:da:9c:56:67:ee:8d:7d:16:56:74:5d:e2:e3:02:
                    98:30:ff:91:0d:8b:3b:b9:36:d4:2f:53:b1:38:06:
                    51:17:2c:65:67:0d:fb:3a:c1:fa:ec:e6:2f:17:9d:
                    fc:cd:4c:91:26:f1:c9:05:ed:ae:36:80:52:1f:dd:
                    91:59:f7:45:4a:69:c0:ce:1b:5f:77:e3:23:c3:b3:
                    dd:13:8d:56:be:e2:8c:c7:3e:55:49:98:6f:fe:58:
                    2c:79:4e:1d:be:51:1a:c2:43:ed:7a:1c:6b:ae:87:
                    6e:e0:08:c6:cc:15:45:73:d0:03:ca:59:0c:b3:99:
                    f5:b0:02:57:35:22:b1:1d:eb:e2:59:0c:f7:0f:65:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:39:08:23:2C:A9:9C:FF:34:70:92:F4:28:2A:08:AA:0B:EC:5D
            X509v3 Authority Key Identifier:
                keyid:41:37:66:ED:70:3A:4A:9E:9C:A4:37:F3:E7:FD:B2:DB:5E:8C:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413766ED703A4A9E9CA437F3E7FDB2DB5E8C8A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y79iornUXMrML7TmDp2FvrzkEnVPCRDfhsv9F5g3wmG/1/323830343a336564343a383030303a3a2f33332d3333203d3e20323636363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ed4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:49:04:9a:4a:c7:89:2c:f2:f3:a4:2a:2d:cb:13:cf:d0:79:
         8b:ca:f7:0f:10:f8:76:98:75:d2:7f:06:2d:37:04:6e:1f:56:
         45:c6:ff:d0:d6:0a:43:21:ab:3e:ef:7d:c9:7f:91:b9:58:39:
         ef:9f:d8:97:02:d7:08:31:4d:49:46:15:d4:df:ed:f7:14:27:
         43:25:22:b6:4d:8d:b9:b2:cd:14:5a:ec:70:bc:07:aa:32:af:
         47:d1:47:ce:44:1c:cf:f8:20:bb:f0:ec:66:38:78:44:23:99:
         3a:be:0b:4f:6a:04:23:54:9a:df:f6:70:ab:15:7a:77:9b:a5:
         a4:dd:65:a8:fe:93:ff:00:c5:57:ff:63:78:7d:6e:29:e6:7e:
         ab:25:6e:00:db:05:7f:f7:0c:33:b1:0c:51:ca:9a:c0:27:62:
         63:fd:de:a3:04:7a:bd:3f:78:6e:b6:5a:54:de:ba:e6:e9:be:
         c3:f0:41:95:b0:1d:4e:83:11:43:e7:3c:37:98:a3:ea:ab:ec:
         94:dc:81:02:4f:f3:1c:43:b8:9a:f3:95:e4:a5:45:6d:e3:8e:
         a0:26:03:9e:ea:f6:63:42:47:20:bf:74:af:e6:f8:d2:9e:19:
         b9:76:f3:42:77:90:e0:92:4d:44:81:5e:7b:3d:b5:2c:7c:0e:
         1d:ec:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:07 2024 by rpki-client on console-fra.rpki-client.org