Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
File:                     323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (raw, json)
Hash identifier:          JJYdZy5ZTEBzcPhZYx2vLYFFpfk9V3AglQSY26FPB3I=
Subject key identifier:   BD:02:33:9D:02:D5:13:E0:61:C8:3B:74:F8:14:BD:93:42:05:4D:F4
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       5BB45EA81A65B6510B54ECA9D21A217C25A7A560
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
Signing time:             Thu 04 Apr 2024 09:21:25 +0000
ROA not before:           Thu 04 Apr 2024 09:16:25 +0000
ROA not after:            Thu 03 Apr 2025 09:21:25 +0000
asID:                     267222
IP address blocks:        2804:4a2c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b4:5e:a8:1a:65:b6:51:0b:54:ec:a9:d2:1a:21:7c:25:a7:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Apr  4 09:16:25 2024 GMT
            Not After : Apr  3 09:21:25 2025 GMT
        Subject: CN=BD02339D02D513E061C83B74F814BD9342054DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bf:d2:0f:92:a2:f1:e3:0a:b8:82:1b:76:23:
                    44:85:37:ac:5f:e4:e3:7c:16:aa:00:ba:22:71:d4:
                    1b:d6:8e:99:b5:12:82:c7:e2:37:5b:16:60:60:3c:
                    38:64:e3:bf:0c:23:b3:32:3b:93:44:28:aa:82:23:
                    1c:4d:86:9f:71:38:95:3a:b6:82:84:b0:cb:2e:ea:
                    b2:a9:d3:c9:bd:30:a1:c8:4a:77:ed:26:79:97:8c:
                    2c:13:45:53:fe:41:58:51:36:a2:39:b0:15:e9:d8:
                    d2:9c:4a:9c:18:da:3c:12:b8:fc:d9:92:b2:17:5d:
                    ef:84:8d:d6:f0:75:d4:99:21:b3:e5:d0:87:df:5e:
                    c2:92:08:91:72:92:53:d1:2c:a4:ed:07:b7:7e:e7:
                    e6:b1:57:55:db:41:cf:fa:02:13:cb:ca:62:71:3b:
                    71:b1:47:f7:18:a3:ef:cd:b9:bd:d4:4c:87:69:4f:
                    60:90:96:e4:a4:a5:74:c9:f9:f4:27:9d:7c:23:f1:
                    2d:25:fa:cb:9e:05:9b:b2:8a:fe:ca:a5:02:e8:59:
                    f0:31:c5:9d:bb:2a:68:dd:98:1e:92:aa:16:50:4c:
                    4b:af:81:d1:06:bf:27:14:59:86:4e:da:d3:a3:06:
                    f5:55:c4:bd:a2:79:77:cb:b8:89:05:b9:ad:b0:ef:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:02:33:9D:02:D5:13:E0:61:C8:3B:74:F8:14:BD:93:42:05:4D:F4
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:d1:79:60:5e:da:0d:fe:a4:3e:de:e7:1e:64:a4:5b:8e:02:
         28:11:30:3b:dc:4e:1f:6e:76:bc:57:04:a7:19:5b:e5:e7:5d:
         48:49:66:dc:f0:f9:12:ef:93:cc:f2:0d:75:40:3d:df:53:7c:
         e8:4e:95:75:6b:90:fe:85:9a:75:1a:3c:6f:19:04:ec:85:42:
         8f:11:51:b5:dd:3c:c2:f0:c6:eb:78:e5:a1:c9:2a:fa:43:f0:
         59:5c:98:b3:20:de:f2:97:7d:84:e8:7e:02:94:be:a2:66:88:
         63:c2:13:3f:cf:93:2d:0e:84:81:21:59:a1:2a:e8:a3:77:ab:
         78:2a:af:d6:19:d8:34:c4:2c:a2:b3:67:18:d8:fe:28:1c:02:
         46:db:49:fa:3d:3d:1a:03:6b:ea:d9:b6:dd:74:fd:db:74:39:
         a3:c3:cd:d3:ca:9d:cd:b5:7a:30:f9:51:25:0a:f4:10:e7:40:
         40:1b:ce:5b:df:87:24:e8:8d:9f:70:27:b1:59:52:fb:1f:d6:
         db:86:69:3e:e6:8d:f6:cb:8a:ab:90:b3:f9:f7:df:65:43:b9:
         08:ba:f0:bd:a7:73:f9:47:28:ab:ef:77:c1:28:cc:e1:07:20:
         0d:87:3a:3b:25:c7:a5:3e:27:d3:3e:24:41:fd:36:ef:18:b0:
         a9:24:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org