Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a3a2f33342d3334203d3e20323637343430.roa
File:                     323830343a343138633a3a2f33342d3334203d3e20323637343430.roa (raw, json)
Hash identifier:          FIUhh3OKkZXT33m7l+NE8EUyGH6Gl8gC2oiEfiul65A=
Subject key identifier:   89:A4:06:58:6A:88:97:23:A7:81:D8:3F:51:35:1D:7C:8C:98:DE:F3
Certificate issuer:       /CN=33E0AB84CEF869E76435D17DB5E5566182625773
Certificate serial:       2701888F1DF1424BCC823B731EE77D4F25AF5C50
Authority key identifier: 33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a3a2f33342d3334203d3e20323637343430.roa
Signing time:             Wed 03 Apr 2024 23:02:55 +0000
ROA not before:           Wed 03 Apr 2024 22:57:55 +0000
ROA not after:            Wed 02 Apr 2025 23:02:55 +0000
asID:                     267440
IP address blocks:        2804:418c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl
                          rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:01:88:8f:1d:f1:42:4b:cc:82:3b:73:1e:e7:7d:4f:25:af:5c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33E0AB84CEF869E76435D17DB5E5566182625773
        Validity
            Not Before: Apr  3 22:57:55 2024 GMT
            Not After : Apr  2 23:02:55 2025 GMT
        Subject: CN=89A406586A889723A781D83F51351D7C8C98DEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:66:89:4c:d6:ec:8a:33:51:b8:9c:8f:47:
                    98:80:df:7f:c0:83:82:c7:48:78:e5:66:ad:70:cc:
                    79:16:c9:75:dd:a9:53:8f:37:40:ac:97:c5:ac:ab:
                    66:ba:b2:91:44:af:96:51:33:19:8b:a8:88:4d:c2:
                    ca:2e:63:99:f8:51:5a:b3:16:ea:c3:0d:e7:2e:bb:
                    cf:ff:aa:ed:fa:9c:19:ba:51:3d:e2:5c:b4:01:cc:
                    27:f5:cc:53:76:5a:a5:7c:04:b9:a2:87:63:4b:21:
                    85:5a:e6:43:6d:5a:b4:bd:f5:a6:30:be:76:2b:2e:
                    52:65:b4:ac:47:f3:2a:53:9d:53:d0:a0:8f:f2:cf:
                    90:65:9d:9e:75:62:51:e4:3f:e1:85:b8:87:83:b3:
                    34:a9:41:5f:1f:ad:22:1e:11:a1:22:4b:07:a5:f5:
                    f4:f1:97:8c:db:61:4b:5e:89:1b:bf:36:20:56:6f:
                    6b:7c:68:65:df:ce:36:47:e7:91:b4:7e:99:63:60:
                    c6:ed:6d:21:c3:fc:40:13:7c:db:42:07:f2:2e:3e:
                    d5:4f:19:b9:fc:41:b3:b2:ce:dd:23:46:65:d4:f4:
                    2d:c9:7e:ac:72:9c:5c:52:5b:ab:34:85:d3:87:4a:
                    34:72:9f:a4:5d:80:13:cc:ce:f8:3f:7e:d7:b2:dd:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A4:06:58:6A:88:97:23:A7:81:D8:3F:51:35:1D:7C:8C:98:DE:F3
            X509v3 Authority Key Identifier:
                keyid:33:E0:AB:84:CE:F8:69:E7:64:35:D1:7D:B5:E5:56:61:82:62:57:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/33E0AB84CEF869E76435D17DB5E5566182625773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33E0AB84CEF869E76435D17DB5E5566182625773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79nHiD4ipzr73U8L5SQHMaKRBkS1Gs5ahA4ct9RC3w8A/1/323830343a343138633a3a2f33342d3334203d3e20323637343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:418c::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:95:6c:73:8b:da:8a:ee:1d:40:da:6c:14:68:d2:0c:df:
         c5:07:c3:2e:87:e2:91:6c:b9:d7:e9:e8:b4:69:d4:7a:7c:eb:
         c3:b6:7d:a1:4b:92:76:6c:0b:65:cc:0b:64:26:06:72:96:23:
         d4:8f:47:fe:9c:3a:c2:e9:dd:ea:0f:66:3d:5f:48:e5:ba:58:
         f4:f3:a9:62:c4:01:e1:d1:9c:41:19:bb:d2:40:88:13:43:d9:
         68:a4:87:8b:31:69:5d:a4:0d:57:d2:12:80:3b:00:e6:42:90:
         a3:fe:ec:e7:0b:25:dc:f5:32:0d:79:51:1c:92:e6:17:96:ea:
         7a:6c:ab:27:e3:6e:d3:85:af:32:3f:64:03:d6:e7:50:3f:42:
         5d:63:77:32:2a:95:e5:18:f7:f5:93:7f:28:d4:9c:90:37:d5:
         12:fe:f5:4f:c4:a0:7e:bc:f2:e5:b0:7d:e7:57:7d:48:1a:50:
         b6:22:20:82:d3:32:10:f2:0b:8b:ca:07:10:4e:0d:47:86:76:
         9a:78:73:72:09:9f:de:91:0a:14:90:ad:32:fa:c9:30:23:00:
         09:62:b7:45:e6:4a:d6:03:ff:e8:d6:ae:ed:31:f6:2f:b6:7c:
         66:c8:8d:10:04:2e:a6:61:b9:47:90:50:eb:63:fd:b3:ab:f4:
         b4:52:7c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:38 2024 by rpki-client on console-fra.rpki-client.org