Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa
File:                     323830343a393038303a3a2f33332d3333203d3e20323733353536.roa (raw, json)
Hash identifier:          YOkS49VnIUaQjBNBSJN+WQnjVUb33K6lJU1hdvLRMbI=
Subject key identifier:   E5:BD:41:CD:BC:58:39:93:F4:32:74:77:4A:19:66:48:CF:2C:0A:E9
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       730C6BD82142E608FBA7889953C7BF27810FCDFE
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa
Signing time:             Mon 30 Sep 2024 11:20:12 +0000
ROA not before:           Mon 30 Sep 2024 11:15:12 +0000
ROA not after:            Mon 29 Sep 2025 11:20:12 +0000
asID:                     273556
IP address blocks:        2804:9080::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0c:6b:d8:21:42:e6:08:fb:a7:88:99:53:c7:bf:27:81:0f:cd:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Sep 30 11:15:12 2024 GMT
            Not After : Sep 29 11:20:12 2025 GMT
        Subject: CN=E5BD41CDBC583993F43274774A196648CF2C0AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:a8:9d:65:67:db:f2:de:89:5c:f9:30:e1:
                    71:d3:f5:a5:29:d3:a4:60:4d:ba:8f:b1:2c:b0:e3:
                    f6:16:d2:1e:15:04:2d:6f:ea:7d:e2:ca:66:89:90:
                    23:59:4d:25:7e:39:42:c9:9a:8d:aa:9f:47:cd:79:
                    3e:3d:ed:d3:69:c7:9a:23:e4:14:79:c2:55:02:ba:
                    ea:6f:e9:ae:62:65:42:73:ce:2e:01:5a:dc:07:4a:
                    d8:c7:89:2b:4e:1b:ec:9c:c5:4b:88:2a:40:05:a0:
                    3e:d0:e2:a3:16:db:1d:ce:de:a6:1f:90:11:69:bd:
                    ec:80:15:44:c8:67:0a:0d:f1:52:fa:10:43:4a:10:
                    a7:cd:49:e2:6c:da:6a:98:86:4e:e2:91:be:2f:69:
                    b3:7e:0a:12:67:e1:e4:0f:cc:02:3a:f2:db:5a:95:
                    7b:64:43:4e:b2:69:09:c8:14:3f:04:cc:c3:1b:d1:
                    54:a1:f8:d2:e8:e0:08:cf:7f:73:72:da:99:c0:df:
                    43:61:28:c4:93:81:1a:92:9d:4a:1f:e0:8b:28:68:
                    54:ff:c2:5b:99:59:1e:f7:d0:e6:4d:f1:95:58:96:
                    d3:39:0e:c2:40:7d:2d:38:ac:29:30:83:df:dd:63:
                    e3:c1:28:66:2b:fd:94:b1:d1:c1:16:2b:28:91:d9:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:41:CD:BC:58:39:93:F4:32:74:77:4A:19:66:48:CF:2C:0A:E9
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33332d3333203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080::/33

    Signature Algorithm: sha256WithRSAEncryption
         b4:c6:9a:9b:ef:eb:cb:29:9f:0d:3d:7c:f0:47:2a:84:f2:91:
         12:b8:2c:b3:5b:cd:7c:60:49:5e:03:f2:d5:7a:af:6d:c8:d7:
         5f:1d:be:45:24:ee:84:a7:17:7e:77:0e:39:02:0a:86:2a:13:
         f2:3f:89:f6:02:dc:55:04:fb:7c:3a:ba:3b:c7:16:c0:04:74:
         70:71:a6:0d:cc:64:f0:d2:27:20:ae:ea:d1:e4:26:5d:26:29:
         af:b4:81:10:fd:f9:63:77:22:b6:2c:79:7b:19:b3:f8:64:6b:
         71:eb:55:fe:f6:f8:e2:b3:de:7d:0e:ef:bc:f3:55:28:cd:40:
         e9:ad:c9:3b:dc:26:a2:9b:2f:45:ca:04:dd:ed:2b:f8:ef:9c:
         a5:39:05:eb:1e:b6:80:08:d2:12:c5:2e:bb:89:de:85:af:e3:
         ca:6c:fc:97:a5:6b:7c:8d:77:73:df:42:ad:ea:f1:5d:10:0d:
         ce:a7:5b:4a:f6:3a:c3:64:ea:de:1d:a7:07:39:37:33:aa:95:
         07:a2:6d:21:6c:c2:53:17:f1:41:d4:18:39:fc:d5:9d:25:a7:
         04:48:ad:12:b0:39:68:4d:ce:34:12:3e:89:21:d3:50:f1:4c:
         41:ac:a7:4a:1c:e6:4f:f2:a2:8d:f9:fc:89:98:7d:9a:be:c8:
         b4:b3:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:05 2024 by rpki-client on console-fra.rpki-client.org