Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a383030303a3a2f33332d3333203d3e20323635343632.roa
File:                     323830343a333438303a383030303a3a2f33332d3333203d3e20323635343632.roa (raw, json)
Hash identifier:          dAL8Ma8iJOoUvB2vd0C2PfDcWXCJSVpmJeonHHj4RAI=
Subject key identifier:   9D:9C:75:5C:B6:93:20:C5:A1:0F:8E:CC:03:EA:16:42:E2:F5:1C:57
Certificate issuer:       /CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
Certificate serial:       5EF2233E1174416BBD7A3B773A5D03D8762F20D0
Authority key identifier: 74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a383030303a3a2f33332d3333203d3e20323635343632.roa
Signing time:             Thu 04 Apr 2024 00:50:32 +0000
ROA not before:           Thu 04 Apr 2024 00:45:32 +0000
ROA not after:            Thu 03 Apr 2025 00:50:32 +0000
asID:                     265462
IP address blocks:        2804:3480:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl
                          rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:f2:23:3e:11:74:41:6b:bd:7a:3b:77:3a:5d:03:d8:76:2f:20:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74EA71FAA5CED5BB59CB34FC46F40B1198A31A07
        Validity
            Not Before: Apr  4 00:45:32 2024 GMT
            Not After : Apr  3 00:50:32 2025 GMT
        Subject: CN=9D9C755CB69320C5A10F8ECC03EA1642E2F51C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:61:f5:89:60:dc:ac:62:47:d8:bc:a1:e4:
                    11:75:f0:35:3c:b2:2a:42:59:f7:a1:5b:11:41:8d:
                    4d:b0:dc:71:00:36:0f:17:c0:2f:88:36:3c:1b:5a:
                    ce:81:da:95:b1:2a:48:d0:94:29:ad:48:d9:2e:89:
                    da:30:bc:84:cc:15:c8:0c:25:63:cd:70:16:1b:81:
                    8a:1f:e1:a3:37:51:e1:b2:4e:27:0c:01:95:a2:3c:
                    56:ec:ad:7e:4a:1d:fd:2a:f5:39:b4:00:f2:ca:91:
                    eb:73:11:d8:fc:d0:84:0f:da:0d:3a:5c:9d:42:ac:
                    72:6d:5f:7a:52:52:99:20:02:9b:99:4e:7c:93:ca:
                    64:a8:84:d1:67:b9:0a:f0:62:24:de:31:8b:23:1b:
                    3c:2a:4a:da:33:62:ae:42:15:3e:bd:94:26:69:16:
                    dd:5b:e0:c9:d8:92:41:59:e4:2f:89:5d:66:aa:7e:
                    e2:21:5f:32:a6:94:2c:80:78:51:df:7c:70:d8:8b:
                    3a:28:5e:db:97:51:47:d4:5e:04:b0:7d:fa:ec:91:
                    51:0f:91:23:94:3c:1d:20:3f:04:f2:3b:e9:96:41:
                    00:db:b1:f8:e0:cd:6b:fe:d0:74:60:39:37:29:13:
                    0e:32:2a:02:69:60:78:dd:c0:52:cb:db:f2:9e:91:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9C:75:5C:B6:93:20:C5:A1:0F:8E:CC:03:EA:16:42:E2:F5:1C:57
            X509v3 Authority Key Identifier:
                keyid:74:EA:71:FA:A5:CE:D5:BB:59:CB:34:FC:46:F4:0B:11:98:A3:1A:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74EA71FAA5CED5BB59CB34FC46F40B1198A31A07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/1/323830343a333438303a383030303a3a2f33332d3333203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3480:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         43:43:0d:b7:b4:1f:55:ab:f5:fa:6c:9a:b9:51:1f:97:3e:4b:
         ec:18:28:6b:a2:21:c7:4f:d3:4d:3f:dd:f3:74:cc:39:51:76:
         6e:da:c0:34:9e:ee:db:6c:ab:09:26:63:c7:ea:81:7b:89:52:
         db:fd:7c:0d:57:34:52:cd:bd:e9:04:4b:bf:d7:9f:8a:15:98:
         11:ed:20:15:4c:33:87:63:3b:81:5c:63:07:0b:41:ab:cb:a2:
         0b:b1:7a:c4:33:c6:27:15:0f:76:9a:21:77:79:85:94:bd:cf:
         66:cf:d6:e3:60:7a:f1:56:e8:2d:52:82:d9:a6:66:fa:80:04:
         a1:5a:00:6f:99:f3:e5:1f:ec:ad:cc:62:f1:6a:27:cd:89:7f:
         57:12:ed:81:24:c0:b9:ee:6c:84:fb:a5:aa:51:11:b5:43:5a:
         3e:e4:74:4e:e6:19:71:a1:91:2c:73:92:8f:67:d8:c6:d6:bb:
         0f:e8:3c:f5:c7:71:95:0d:e5:16:a7:75:e4:0f:e8:5b:68:49:
         10:6a:0d:b2:63:1e:c1:c0:70:24:43:bb:d0:4e:c5:56:9c:be:
         ea:9a:55:ec:5b:b1:bd:96:46:df:9b:2f:8a:3d:02:9f:04:90:
         2d:3d:8f:f3:3b:5b:88:11:da:0e:c7:3c:72:00:c0:f5:d7:08:
         8d:fa:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:08 2024 by rpki-client on console-fra.rpki-client.org