Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33332d3333203d3e20323635323934.roa (raw, json)
Hash identifier:          BzdI9Q3mkPdVDIwWydr0FXW2WvOl0TeilMgXYj8vDh4=
Subject key identifier:   D5:46:12:BC:21:1E:37:C3:74:24:FC:CD:FD:76:7F:9E:45:73:C2:35
Certificate issuer:       /CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
Certificate serial:       55E656D341AC0B8991FE5248037F30C940A6E00C
Authority key identifier: 08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa
Signing time:             Wed 03 Apr 2024 18:33:13 +0000
ROA not before:           Wed 03 Apr 2024 18:28:13 +0000
ROA not after:            Wed 02 Apr 2025 18:33:13 +0000
asID:                     265294
IP address blocks:        2804:2da4::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e6:56:d3:41:ac:0b:89:91:fe:52:48:03:7f:30:c9:40:a6:e0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
        Validity
            Not Before: Apr  3 18:28:13 2024 GMT
            Not After : Apr  2 18:33:13 2025 GMT
        Subject: CN=D54612BC211E37C37424FCCDFD767F9E4573C235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:e7:c2:c3:c7:27:be:88:c9:9c:9f:96:16:
                    03:96:16:10:67:99:40:e2:be:05:f4:17:2c:d1:ea:
                    b5:e6:cf:9a:2b:59:ba:1d:97:a9:4a:b4:4c:42:be:
                    b7:f7:ab:63:97:ab:2c:00:60:93:a2:1a:38:77:18:
                    d5:b0:69:b4:ff:9b:1f:43:e5:47:74:df:51:ba:f7:
                    35:30:62:c7:03:6f:dc:3c:78:e4:3c:2e:68:2e:6e:
                    9b:82:05:04:6f:b9:dc:92:38:36:6e:9f:93:27:02:
                    76:34:ae:12:1c:4a:d4:9f:2b:76:90:63:8a:ff:d5:
                    e4:ca:9f:12:b0:a5:e2:a8:7d:ee:7f:0d:f1:a6:d0:
                    2e:59:bf:99:30:6c:c1:81:d6:41:bc:6f:5b:13:7f:
                    08:78:88:bc:a5:7d:af:9e:04:55:37:ed:71:35:9a:
                    36:da:d0:a0:e4:2d:c0:9f:f9:51:98:8f:67:2e:26:
                    d2:8e:80:5a:4c:7d:4f:7c:11:4e:db:a9:de:fd:72:
                    8a:0d:57:35:a2:fc:02:4f:2c:53:38:b8:f4:f7:a8:
                    da:f6:66:c8:ac:d0:c7:77:18:02:a8:89:3c:62:7f:
                    26:a3:1d:76:a1:00:61:48:e1:bf:84:b3:85:42:ab:
                    04:d9:dc:c0:16:e7:0b:b1:38:08:86:8e:06:b1:a3:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:12:BC:21:1E:37:C3:74:24:FC:CD:FD:76:7F:9E:45:73:C2:35
            X509v3 Authority Key Identifier:
                keyid:08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a3a2f33332d3333203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:5b:c1:be:2c:57:0a:ea:f6:97:cd:a4:fc:97:00:2a:b1:4f:
         cb:0a:50:fc:55:5a:da:33:38:ee:ee:dd:83:4d:82:ec:88:74:
         51:0a:6a:13:ae:6c:07:cb:fb:b6:6f:cc:55:67:d0:a0:a5:49:
         37:a1:c1:f3:55:b3:4d:2c:43:8d:3a:89:28:b7:12:48:8f:86:
         3a:20:40:48:86:97:13:6f:cd:a9:3d:5f:e4:66:ea:a4:8c:07:
         3b:bb:44:56:b0:92:a1:16:78:3a:79:a2:80:29:c1:58:b4:88:
         ef:f1:9a:45:81:9a:78:42:7a:d3:ca:84:84:8d:dd:d5:c4:28:
         6b:63:53:94:b3:56:43:85:78:89:f4:84:e7:f9:ed:38:90:15:
         7f:a3:73:25:63:3a:6e:b7:c8:de:d6:e1:ce:da:39:b7:70:de:
         f3:b2:73:20:89:de:13:58:15:0b:4c:0b:12:22:27:66:f5:47:
         29:d0:9b:32:6c:16:e9:96:d0:66:6f:79:4c:0d:07:11:a8:18:
         3f:b9:92:76:c2:94:1d:ba:f3:4e:5a:b1:04:62:38:39:a2:e6:
         9d:96:7b:6d:0a:8f:a5:35:43:4d:f0:2a:00:f5:27:c5:57:c2:
         ac:58:be:91:62:43:4d:d4:2d:b9:ae:67:b2:6a:26:0d:33:89:
         29:ba:db:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:45 2024 by rpki-client on console-fra.rpki-client.org