Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          AclKMoAXHSwA0ylrFanBxWDoy4IseVx/DQDr2YqWFno=
Subject key identifier:   50:EC:51:6A:D3:9C:2E:E0:B6:BB:B3:8A:13:08:83:87:3A:B9:89:82
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       43F8E518FA3F7BF7253E361529F38072061712C5
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Thu 04 Apr 2024 13:53:52 +0000
ROA not before:           Thu 04 Apr 2024 13:48:52 +0000
ROA not after:            Thu 03 Apr 2025 13:53:52 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f8:e5:18:fa:3f:7b:f7:25:3e:36:15:29:f3:80:72:06:17:12:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Apr  4 13:48:52 2024 GMT
            Not After : Apr  3 13:53:52 2025 GMT
        Subject: CN=50EC516AD39C2EE0B6BBB38A130883873AB98982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:44:df:ab:5e:5d:c0:e8:b7:71:13:cf:8c:
                    7a:c5:1d:f8:a9:89:fa:cb:c9:35:d3:07:e3:52:c1:
                    6c:2a:36:f8:56:2e:79:db:77:50:ae:47:44:cd:19:
                    7a:e6:ba:18:40:5e:c8:70:f9:aa:25:23:c6:94:f8:
                    d7:35:44:d7:14:9f:b0:ae:9e:eb:9d:db:2b:fb:ca:
                    f4:d5:53:ac:ba:60:ca:bf:47:0b:22:48:ae:37:6d:
                    61:09:a8:20:09:23:1a:2b:88:61:60:19:2b:67:4b:
                    41:ff:ba:ca:3e:77:b4:b0:b0:26:a1:73:22:09:48:
                    63:cf:d4:b8:e5:66:00:d4:2f:48:7f:d5:c1:15:84:
                    d4:ea:70:9e:28:4d:de:02:ba:78:9f:b6:7f:af:11:
                    27:1d:e7:f1:8a:0e:1c:1d:c5:42:ac:ef:13:5a:d2:
                    4a:3e:5a:be:d9:4c:97:19:cd:e4:03:5f:f7:7d:4d:
                    b2:33:08:2c:ec:db:df:91:40:53:3c:7e:a7:02:b6:
                    f5:1c:55:3f:30:a1:91:03:a4:1a:6c:d7:9b:f7:67:
                    e3:ff:5b:7c:01:c1:0f:84:c0:14:cb:7a:c4:2c:9c:
                    1f:ad:54:5b:1a:11:9f:1b:ab:53:e2:eb:42:7e:13:
                    38:7f:d5:4e:18:20:6e:93:e8:ac:9d:3c:07:69:85:
                    75:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:51:6A:D3:9C:2E:E0:B6:BB:B3:8A:13:08:83:87:3A:B9:89:82
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a383030303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:78:68:92:e4:4c:58:6f:ee:42:08:d6:78:87:6b:4c:be:
         d4:d4:6b:b1:8f:d6:b2:f6:d7:ae:eb:ae:11:c7:52:40:75:e5:
         7b:bb:a0:c8:9e:dd:8b:cc:6b:e9:e9:08:06:a6:0e:31:09:63:
         86:41:05:5a:c2:bd:ee:b9:f6:54:95:fb:d8:4f:dc:33:5e:c8:
         3f:1d:fd:0d:cf:97:6e:07:02:3f:cf:37:b6:a5:30:00:fd:94:
         ba:77:18:90:f8:b6:7c:5b:08:9b:50:79:b9:a8:d7:c4:f9:3d:
         70:d5:85:5d:a7:fb:fe:67:54:48:20:08:2e:99:08:67:56:99:
         74:ff:b0:05:a0:69:2c:82:c7:39:f5:10:dd:b9:ad:1e:94:0f:
         cf:0a:7a:b0:39:29:e1:6e:87:99:14:3e:0b:fc:06:a9:79:93:
         e0:5d:88:78:ec:84:d1:3e:ec:4b:29:5f:03:26:b6:03:81:16:
         02:1e:ce:98:26:91:2b:8d:a2:bb:70:2b:15:bb:99:d3:ba:68:
         ab:0b:7f:f7:97:2f:62:ed:df:63:63:39:3a:7a:5a:a8:32:9a:
         c1:8b:6b:1c:04:b5:95:95:8c:35:18:f9:f5:71:64:2d:fc:ec:
         45:0f:a6:a4:c4:17:92:03:1d:18:46:6d:20:65:43:5f:61:21:
         aa:23:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:59 2024 by rpki-client on console-ams.rpki-client.org