Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
File:                     323830343a313466303a3a2f33332d3333203d3e20323633333630.roa (raw, json)
Hash identifier:          HuJFDZdjWmJZe9yQsyBmMKw5uUStFg3vbj/ix9eo/wc=
Subject key identifier:   14:4E:79:5B:38:A8:D5:88:FA:2F:20:10:33:D5:6A:7E:B2:0E:6B:8D
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       0AC423C17221607EBF52D0761CA17DA74666A552
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa
Signing time:             Thu 04 Apr 2024 02:25:08 +0000
ROA not before:           Thu 04 Apr 2024 02:20:08 +0000
ROA not after:            Thu 03 Apr 2025 02:25:08 +0000
asID:                     263360
IP address blocks:        2804:14f0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:c4:23:c1:72:21:60:7e:bf:52:d0:76:1c:a1:7d:a7:46:66:a5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Apr  4 02:20:08 2024 GMT
            Not After : Apr  3 02:25:08 2025 GMT
        Subject: CN=144E795B38A8D588FA2F201033D56A7EB20E6B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:2a:f6:51:64:56:55:ab:f1:16:61:11:74:
                    99:f8:7a:ec:fd:32:b2:c5:b9:e8:74:73:ea:80:1a:
                    f5:55:4d:06:a5:d2:51:5d:df:1a:ae:e2:a0:4a:86:
                    6c:c5:5f:9a:bd:bb:d7:6f:b1:7e:48:0c:62:7a:e3:
                    11:c1:06:00:fa:22:b2:f1:f1:bc:18:d2:aa:57:7f:
                    e6:f5:23:77:95:9a:2f:c8:36:a3:a1:f2:9b:8a:eb:
                    55:0e:7b:44:36:e1:53:5a:97:e4:21:dc:6b:72:2a:
                    9f:4c:66:43:f7:d7:d3:b3:71:83:d4:40:b5:5b:ac:
                    d4:55:fc:9e:a8:ab:cc:04:66:f9:6f:ec:c4:65:7e:
                    8f:4a:79:53:1d:97:79:3f:99:48:15:af:58:39:d6:
                    57:cb:cd:d7:ab:74:9d:2c:7f:04:27:eb:0f:82:a1:
                    95:0f:d1:0d:43:d0:9e:f5:5c:ed:73:7c:2a:e7:7d:
                    03:d8:a7:27:5b:b2:89:b0:5d:50:ad:f5:e0:d3:65:
                    6b:1a:02:bc:9b:cd:ba:11:68:5a:08:24:bd:93:39:
                    6d:c3:1f:b2:30:b6:ae:10:22:1b:a2:32:bb:5b:26:
                    bf:35:2f:b9:f5:84:7f:39:a0:61:e3:57:f6:1a:ac:
                    4c:7e:9c:84:f0:33:36:60:3c:23:d1:b4:4b:0b:52:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4E:79:5B:38:A8:D5:88:FA:2F:20:10:33:D5:6A:7E:B2:0E:6B:8D
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33332d3333203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0::/33

    Signature Algorithm: sha256WithRSAEncryption
         67:52:7a:37:e1:65:0f:e7:69:eb:5c:12:95:b1:e3:7c:fb:43:
         b0:0f:13:76:8c:c5:b6:ae:f2:d8:e0:9f:af:9c:d5:52:0c:38:
         44:52:5d:77:72:4c:90:16:f1:3b:e1:ce:6e:5a:73:f6:56:50:
         eb:43:c1:24:4d:c0:99:8e:55:0b:44:5d:b1:43:5c:be:a8:00:
         9f:98:09:86:b9:8a:18:95:e2:43:b1:f2:79:3c:c6:08:ca:03:
         95:bd:5f:27:09:d4:0e:e6:85:68:e5:15:1c:92:8d:8c:0e:63:
         4d:fb:8e:d3:7c:96:8f:f5:6b:01:71:0a:01:ef:5c:87:51:6e:
         9e:33:ae:41:31:19:dc:b5:ff:d9:26:ef:8a:ef:84:6a:27:e0:
         2d:6f:fb:3d:68:da:9f:48:8c:cc:6a:0f:b4:c3:34:4a:05:a8:
         7f:94:fa:8c:c6:f3:c6:b9:ff:43:71:9a:18:a2:76:ac:d0:5b:
         bf:1a:90:af:5d:ff:19:27:64:47:8a:16:38:24:84:6e:39:c8:
         be:61:a4:5d:8c:f3:45:4b:cd:27:be:d0:7b:97:1c:bd:4c:5a:
         43:08:42:68:bc:ec:4d:7b:c8:05:d5:ca:ee:ce:5d:07:82:e4:
         af:90:df:27:1a:5d:9c:33:26:d7:3c:eb:7a:4a:00:1f:0a:f0:
         8a:eb:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org