Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a383030303a3a2f33332d3333203d3e20323637343430.roa
File:                     323830343a343138633a383030303a3a2f33332d3333203d3e20323637343430.roa (raw, json)
Hash identifier:          FmIjnvrUSZOKfoD0t+cLC3teyPv8VNAv2pt7oTf4L+o=
Subject key identifier:   49:89:C6:12:21:42:C2:A6:1B:6A:58:40:59:BD:C7:ED:C4:6A:7D:DC
Certificate issuer:       /CN=33E0AB84CEF869E76435D17DB5E5566182625773
Certificate serial:       613FEC0074519BF9051505E872B719577E8AF946
Authority key identifier: 33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a383030303a3a2f33332d3333203d3e20323637343430.roa
Signing time:             Wed 03 Apr 2024 23:02:56 +0000
ROA not before:           Wed 03 Apr 2024 22:57:56 +0000
ROA not after:            Wed 02 Apr 2025 23:02:56 +0000
asID:                     267440
IP address blocks:        2804:418c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:ec:00:74:51:9b:f9:05:15:05:e8:72:b7:19:57:7e:8a:f9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Validity
            Not Before: Apr  3 22:57:56 2024 GMT
            Not After : Apr  2 23:02:56 2025 GMT
        Subject: CN=4989C6122142C2A61B6A584059BDC7EDC46A7DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:38:3e:97:46:92:09:db:bf:e1:89:c8:b1:
                    93:55:3b:7f:11:e2:e5:e0:08:ad:52:4b:de:1f:f3:
                    aa:4f:55:24:ab:85:e1:e2:f4:9e:8b:cf:da:10:da:
                    3c:e0:2b:7b:f5:a9:22:ba:72:cc:11:4c:7e:49:f4:
                    d0:25:88:e6:38:83:79:ea:40:06:ab:38:48:33:60:
                    3f:8f:43:21:9e:d7:60:4f:ec:85:ad:a7:09:4c:32:
                    48:d2:ca:b9:fc:94:52:80:d1:12:5f:e0:f8:90:9a:
                    c4:77:c4:71:3c:8d:8a:82:42:55:6f:dc:d0:9f:32:
                    40:a4:d1:03:83:b8:18:e1:c3:4f:77:05:1b:c5:e7:
                    ea:98:85:7c:97:f9:1b:6b:fa:89:8f:60:be:03:a4:
                    c3:cb:a6:10:c1:56:4d:1e:e7:e2:bd:32:a5:57:5e:
                    fa:bd:08:02:d4:bc:5c:d1:ba:d1:6c:51:b1:02:3b:
                    37:14:d1:29:d0:9a:bd:55:31:8e:17:f2:cc:fa:e4:
                    37:77:41:3c:54:cb:61:cc:69:23:91:97:9c:f0:f5:
                    b7:b0:7c:ef:23:e2:5b:4f:80:69:a6:3d:b1:36:53:
                    5e:8e:9f:b2:ce:66:e3:aa:f0:95:a9:5b:be:c5:a3:
                    ae:90:f8:8a:d6:15:0a:66:c1:08:70:47:b3:bb:85:
                    85:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:89:C6:12:21:42:C2:A6:1B:6A:58:40:59:BD:C7:ED:C4:6A:7D:DC
            X509v3 Authority Key Identifier:
                keyid:33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a383030303a3a2f33332d3333203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:18:fb:97:d3:b1:82:98:49:12:7f:2d:f8:b5:3b:d0:31:
         85:ef:53:70:5c:10:39:2c:1f:4e:64:67:e2:ee:74:0f:6c:a8:
         79:12:e1:ff:c1:a2:f9:b8:74:b3:57:8e:5e:d2:86:82:7c:27:
         42:a1:da:b1:04:4b:11:99:7a:c7:4d:91:b4:5c:74:24:bc:1d:
         28:ee:6d:fd:ec:fc:f9:56:62:bc:a0:95:b3:cb:eb:20:8d:88:
         10:ae:fa:09:e1:82:c2:07:73:ff:34:ae:4e:1f:7e:bc:02:cd:
         77:31:1c:ed:ee:d7:ee:23:ed:58:e8:e2:5f:3f:99:24:5b:88:
         42:a1:9d:d3:59:f4:f0:8a:5d:33:24:07:5d:26:7a:43:e9:6e:
         21:31:9a:82:78:61:99:b1:95:83:2b:9b:7e:e4:92:25:ec:f9:
         af:6a:e0:91:3b:42:6f:c7:b0:15:10:da:f1:61:0d:cc:e1:50:
         40:de:17:82:a9:52:e2:a7:8c:c6:f9:66:90:de:2d:9b:cd:ba:
         05:06:36:92:d7:73:6b:d0:09:ed:c0:a4:42:28:93:84:4d:8d:
         c9:8b:ea:bf:40:bb:59:39:b4:58:8b:c6:8e:5a:10:31:fa:5d:
         67:7a:b6:2c:63:34:ea:04:27:b7:75:26:80:dc:f3:74:ec:6a:
         0c:2b:07:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org