Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa
File:                     323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier:          2ge3PCy0sKF+2JbvKdNeLSzqvGKxDmZzJ0JvHJEczig=
Subject key identifier:   E1:9D:EB:EC:50:D1:09:9F:91:FA:4C:DA:69:83:54:90:59:72:E6:A9
Certificate issuer:       /CN=33E0AB84CEF869E76435D17DB5E5566182625773
Certificate serial:       2B1742B125F5638ADAD907C9B1026719239E256E
Authority key identifier: 33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa
Signing time:             Wed 03 Apr 2024 23:02:54 +0000
ROA not before:           Wed 03 Apr 2024 22:57:54 +0000
ROA not after:            Wed 02 Apr 2025 23:02:54 +0000
asID:                     267440
IP address blocks:        2804:418c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:17:42:b1:25:f5:63:8a:da:d9:07:c9:b1:02:67:19:23:9e:25:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Validity
            Not Before: Apr  3 22:57:54 2024 GMT
            Not After : Apr  2 23:02:54 2025 GMT
        Subject: CN=E19DEBEC50D1099F91FA4CDA698354905972E6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:31:84:d4:7e:a1:c1:b0:d9:56:d1:a3:59:
                    d2:14:37:fa:49:17:27:d7:9f:ab:95:82:61:ae:75:
                    a1:4c:fc:b2:7a:18:78:7f:22:57:63:17:7a:cf:78:
                    2c:cd:aa:84:56:ef:ee:01:be:42:ee:e8:bf:87:3c:
                    aa:f1:e9:5e:b7:68:d7:e6:7e:60:83:46:f8:67:05:
                    4d:c6:fd:50:62:91:d3:a0:44:c9:97:2e:79:d3:0a:
                    24:bd:4d:2c:0a:bc:64:35:b2:12:4d:06:a9:bc:f0:
                    52:f3:78:1a:4b:1d:36:6c:ff:b2:a7:77:b7:ef:64:
                    a2:0e:1f:d2:e6:58:67:55:37:5e:02:4e:a0:a4:5d:
                    7c:0c:ca:29:62:f0:18:f4:e3:3f:e2:13:6f:bf:3b:
                    b1:0d:ad:45:50:75:23:62:4f:9c:e4:24:ec:4f:e7:
                    e0:57:59:bd:8e:44:f0:5a:a8:68:05:42:a0:8d:63:
                    63:f2:28:14:76:1b:75:ae:4b:17:73:93:5b:bb:dd:
                    7f:f7:6f:e2:24:1f:60:5f:a2:50:cb:4c:be:e8:b6:
                    7e:46:57:9f:d5:d8:74:1e:28:4c:58:c4:31:94:a5:
                    57:fb:bb:f8:2f:8e:e4:b1:05:ec:54:28:8b:fc:1f:
                    bf:fb:12:b9:60:62:c9:d4:b5:03:2c:fa:e1:78:ab:
                    74:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9D:EB:EC:50:D1:09:9F:91:FA:4C:DA:69:83:54:90:59:72:E6:A9
            X509v3 Authority Key Identifier:
                keyid:33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a343030303a3a2f33342d3334203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:31:06:11:19:67:36:33:b6:d8:8f:4b:d8:9d:b9:af:91:c7:
         6e:21:f8:85:6e:cd:ad:99:aa:6e:74:70:94:74:b3:e3:f3:7f:
         dd:2a:a6:72:85:89:a3:17:04:1d:64:a7:ac:c1:f2:a2:2a:94:
         26:de:47:1b:d6:b2:14:56:51:12:0a:b9:1c:e1:b0:30:79:7f:
         f3:dc:e7:ee:e3:c8:e1:5f:b9:9b:23:f2:ee:10:68:ce:14:00:
         30:2b:07:31:15:02:07:5f:aa:12:38:b4:fb:c0:5d:be:b9:c4:
         c2:b6:22:c5:e3:11:c4:0f:75:00:81:4e:66:01:97:fd:ec:df:
         78:e4:20:84:7f:d6:47:9e:80:c9:31:b4:d0:f8:48:e0:54:3c:
         03:e4:55:d5:aa:fc:8e:10:e0:61:01:72:82:eb:4a:0f:00:b3:
         83:da:51:2f:21:36:20:6d:0e:72:f1:f7:08:20:d4:04:60:33:
         25:57:49:aa:d4:d3:2a:22:f2:5f:07:65:0f:a8:cd:ab:42:d2:
         9c:12:b4:4f:3c:87:4c:88:1a:72:df:ab:d1:e5:19:66:bf:8d:
         fe:bd:60:cf:43:b2:2e:5f:a6:c2:c0:7d:04:87:2d:0a:67:dd:
         f4:bc:35:2f:58:ab:d4:99:21:62:42:ba:89:ea:ad:be:54:84:
         29:01:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:58 2024 by rpki-client on console-ams.rpki-client.org