Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa
File:                     323830343a353966383a3a2f33322d3438203d3e20323638373337.roa (raw, json)
Hash identifier:          AiOtuScYnHPd4bHROdSU+L6d2ZRJpaMHbghGNw+wNY8=
Subject key identifier:   25:3F:53:3C:E8:42:95:EB:2E:72:2A:43:87:29:E8:D7:7A:B7:C8:DB
Certificate issuer:       /CN=33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A
Certificate serial:       025384B28DB319AF0D285CBD98C17D20AA2A2392
Authority key identifier: 33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa
Signing time:             Thu 04 Apr 2024 07:27:36 +0000
ROA not before:           Thu 04 Apr 2024 07:22:36 +0000
ROA not after:            Thu 03 Apr 2025 07:27:36 +0000
asID:                     268737
IP address blocks:        2804:59f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.crl
                          rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:53:84:b2:8d:b3:19:af:0d:28:5c:bd:98:c1:7d:20:aa:2a:23:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A
        Validity
            Not Before: Apr  4 07:22:36 2024 GMT
            Not After : Apr  3 07:27:36 2025 GMT
        Subject: CN=253F533CE84295EB2E722A438729E8D77AB7C8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:a3:3d:5e:89:a8:79:c1:b1:ef:92:4f:70:
                    a3:ed:67:93:00:70:cd:8d:2d:1f:a4:4c:fd:56:7a:
                    63:44:ea:e8:94:7a:1b:6a:37:c6:e3:dc:1f:6e:4a:
                    bc:2d:01:5a:78:28:87:5d:23:1e:95:e4:95:f3:f7:
                    7b:c9:29:dc:db:9a:d5:fa:4d:61:30:8e:f8:75:d4:
                    b1:81:b5:94:f9:a1:d5:f6:c3:17:f4:fd:4e:33:20:
                    06:5d:61:a6:7d:82:c4:78:65:2d:c1:bf:c4:90:41:
                    d1:01:ed:83:f8:7f:16:6f:5e:04:3e:97:5d:25:67:
                    fc:65:c2:18:1e:a9:8e:7f:81:20:ea:e7:0c:8b:23:
                    4e:89:88:9b:00:39:cc:e8:6b:2c:2c:91:5a:42:19:
                    dd:71:e9:03:d0:b7:de:9e:70:ef:7c:bb:ce:38:1b:
                    96:81:e3:82:a0:63:43:a5:38:cc:41:89:38:9c:a8:
                    50:cb:b6:74:0c:5f:0b:b0:7a:dc:5e:f1:ec:cd:2b:
                    d6:b1:80:53:98:ca:80:d7:42:c6:2e:54:81:9f:d5:
                    05:b0:cf:2a:e3:83:01:cd:d8:0a:ba:ba:45:10:e6:
                    8f:38:8b:ed:58:33:23:88:5a:ba:b1:03:b1:60:24:
                    36:e8:c5:b0:12:83:56:02:39:94:a9:06:0d:a5:ea:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3F:53:3C:E8:42:95:EB:2E:72:2A:43:87:29:E8:D7:7A:B7:C8:DB
            X509v3 Authority Key Identifier:
                keyid:33:A6:DF:FF:7F:2B:17:EF:89:28:30:BB:63:5C:0D:F0:AB:06:F3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33A6DFFF7F2B17EF892830BB635C0DF0AB06F33A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/2/323830343a353966383a3a2f33322d3438203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:6d:90:b8:71:e9:56:70:da:70:47:9c:c1:be:53:fd:dd:15:
         58:9d:48:0d:70:cd:ab:f3:1c:5e:29:63:72:e0:87:6b:ee:81:
         c6:29:f0:54:41:37:43:8c:c4:25:c5:ed:1b:85:6b:6b:78:09:
         ef:69:08:77:8c:24:a7:5c:d7:66:19:52:95:c0:b0:06:6e:ee:
         f8:d3:a7:4f:92:40:a5:2a:07:ed:63:2d:99:a0:2f:5c:5e:d9:
         03:9d:0e:17:b8:fc:3c:8e:cd:09:f5:7e:39:40:6f:db:e6:00:
         18:88:eb:ff:91:88:33:10:9f:5d:90:05:41:6d:94:5e:a3:3b:
         9f:df:90:b7:bc:c6:01:f0:d7:e0:51:75:63:68:b5:99:4c:d7:
         f9:c6:4f:22:e8:03:d0:27:0a:b4:7f:af:58:b3:a0:86:d9:a5:
         43:69:98:dc:08:be:c1:22:cc:3a:de:69:a7:67:b9:db:26:68:
         32:58:ef:04:e1:d1:39:20:d0:be:2c:ae:29:49:9d:61:6d:d6:
         c1:ee:e3:44:5a:7d:5f:0c:5f:3a:24:6c:89:12:ef:e6:dd:a3:
         1e:c4:4f:37:8d:1b:48:3c:5a:51:9f:e3:03:2d:18:05:3e:96:
         b3:3a:01:75:14:ab:4b:2c:66:00:d1:98:d8:32:7c:f3:09:06:
         17:74:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org