Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a3a2f33332d3333203d3e20323633333936.roa
File:                     323830343a313539343a3a2f33332d3333203d3e20323633333936.roa (raw, json)
Hash identifier:          nuuValjt4xh/zF55NZg/evbD2mpOie1p5o1EUT/jr6I=
Subject key identifier:   BF:8A:3F:D0:99:CB:04:C5:20:56:D3:A0:1D:1E:D2:EA:98:0B:ED:81
Certificate issuer:       /CN=40636332B02FA344DE75686E874C7425B2C58624
Certificate serial:       75EB6085587E1820F975EF997508E9E0F3123C44
Authority key identifier: 40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a3a2f33332d3333203d3e20323633333936.roa
Signing time:             Thu 04 Apr 2024 19:28:17 +0000
ROA not before:           Thu 04 Apr 2024 19:23:17 +0000
ROA not after:            Thu 03 Apr 2025 19:28:17 +0000
asID:                     263396
IP address blocks:        2804:1594::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl
                          rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:eb:60:85:58:7e:18:20:f9:75:ef:99:75:08:e9:e0:f3:12:3c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40636332B02FA344DE75686E874C7425B2C58624
        Validity
            Not Before: Apr  4 19:23:17 2024 GMT
            Not After : Apr  3 19:28:17 2025 GMT
        Subject: CN=BF8A3FD099CB04C52056D3A01D1ED2EA980BED81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:10:ce:9e:30:9e:bd:aa:06:25:44:c1:77:
                    04:1e:86:c9:7c:68:dd:8b:12:03:64:b9:94:ce:48:
                    7d:8e:09:d7:78:62:f8:32:45:e1:54:bf:86:ef:2c:
                    75:29:53:46:22:0c:87:2c:98:56:60:67:8f:f1:5c:
                    26:f8:ec:10:a3:e7:3a:5c:69:83:49:79:f0:a5:56:
                    54:d1:44:e8:fa:6b:e5:9e:af:ae:a2:69:71:c8:26:
                    41:d2:47:0b:58:ca:f8:61:96:18:36:bb:ea:7a:4a:
                    74:a2:bf:31:ac:87:c8:70:57:22:2e:43:db:c3:04:
                    b9:67:66:18:3d:12:5f:0b:da:67:2d:b5:47:2c:d5:
                    fe:cf:89:39:c2:81:21:f1:e0:38:10:6c:d0:34:f6:
                    e4:b6:9e:b9:1d:e0:ad:70:fe:5b:38:61:8b:9a:ce:
                    53:5d:09:56:61:b9:e6:ce:1a:29:ba:7c:4b:14:9d:
                    a4:53:86:eb:0f:4a:e8:2d:d0:45:a2:74:d7:99:d4:
                    53:0a:c7:4d:08:4c:44:83:b3:ab:82:0d:ce:00:45:
                    b7:7d:1b:6d:07:f0:6b:b5:0c:dd:91:0c:75:52:13:
                    f3:88:43:04:f3:84:9c:06:19:9b:9b:00:ea:46:1d:
                    65:82:66:d5:3b:d9:81:d3:ab:5b:f4:68:f4:a0:a5:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:3F:D0:99:CB:04:C5:20:56:D3:A0:1D:1E:D2:EA:98:0B:ED:81
            X509v3 Authority Key Identifier:
                keyid:40:63:63:32:B0:2F:A3:44:DE:75:68:6E:87:4C:74:25:B2:C5:86:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/40636332B02FA344DE75686E874C7425B2C58624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40636332B02FA344DE75686E874C7425B2C58624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7MJy8jVEjU6cc2SQEfpXxztVJRjhkoV9Ds64Mqme2SER/1/323830343a313539343a3a2f33332d3333203d3e20323633333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1594::/33

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:0f:86:61:1b:ff:80:cf:33:ae:c5:63:6a:75:e8:fe:77:
         f2:78:df:f3:bb:af:f7:d8:16:57:da:57:11:15:d8:de:89:04:
         7d:b6:6f:31:bc:cb:3c:5c:3b:6d:f8:0c:89:73:da:25:c7:4c:
         1c:72:a2:0a:bc:a0:20:9c:a7:9c:48:77:3b:0d:9e:2b:03:ff:
         c5:79:23:d1:51:58:63:7c:7e:93:a9:16:dd:89:ad:ee:2b:24:
         ea:bf:d0:45:d2:1b:ba:ba:ac:67:26:33:a2:34:90:7d:44:74:
         14:82:f9:17:ca:59:91:69:cd:c1:56:10:8c:2a:72:d9:03:57:
         92:a3:2b:01:05:9c:fb:12:64:5a:48:9b:d9:98:09:70:1d:fa:
         5e:0c:61:ed:52:70:f4:48:a9:fa:2b:ac:cd:d0:18:f6:ff:be:
         e3:89:61:c3:3a:c8:22:10:8b:ca:8a:4e:05:d6:f5:64:1e:5b:
         2a:f1:36:5f:7e:3f:99:cf:6f:d7:77:57:54:f1:3b:50:a5:22:
         ed:b0:b0:ae:43:64:93:f1:ac:ff:10:24:9d:8e:33:6c:6e:2e:
         92:72:61:59:8a:83:60:09:dd:f7:b0:15:e5:96:04:5c:11:91:
         d7:cb:91:f5:08:a1:06:5c:58:5e:5f:69:e0:84:51:39:13:38:
         b8:3a:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:46 2024 by rpki-client on console-fra.rpki-client.org