Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa
File:                     323830343a363830303a3a2f33332d3333203d3e20323639363634.roa (raw, json)
Hash identifier:          tbBU1KolWhtw2uhQ94iLbC20P8KSXSNPEjI4C1ulsPM=
Subject key identifier:   1D:19:E6:79:E2:26:99:EA:99:63:2B:78:EB:A1:41:09:16:7E:40:C8
Certificate issuer:       /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial:       08E5E66E347760B031DF0DB43979EF329FA2919D
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa
Signing time:             Mon 06 May 2024 18:31:06 +0000
ROA not before:           Mon 06 May 2024 18:26:06 +0000
ROA not after:            Mon 05 May 2025 18:31:06 +0000
asID:                     269664
IP address blocks:        2804:6800::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
                          rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:e6:6e:34:77:60:b0:31:df:0d:b4:39:79:ef:32:9f:a2:91:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
        Validity
            Not Before: May  6 18:26:06 2024 GMT
            Not After : May  5 18:31:06 2025 GMT
        Subject: CN=1D19E679E22699EA99632B78EBA14109167E40C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:27:d3:74:04:39:70:18:d5:65:d0:ed:87:
                    60:75:8d:25:88:3a:d8:6a:4b:40:45:8d:17:cd:51:
                    9a:37:7f:fc:f1:6f:f5:ec:77:81:bb:77:9f:09:00:
                    26:cc:67:42:81:ad:83:29:39:9d:98:fc:7a:67:a2:
                    b8:74:99:b5:8d:40:21:82:2c:0a:e8:19:b2:f9:35:
                    d4:10:14:c4:41:20:9c:b3:17:89:a0:ed:6d:c3:e9:
                    a8:49:6c:98:b0:af:25:e1:83:d8:cb:80:56:02:30:
                    14:14:8f:4b:a0:db:d9:c7:8a:67:d1:bc:49:54:1d:
                    32:b1:4b:ae:cc:a7:f9:e8:ec:ab:49:f0:74:43:2c:
                    fd:0b:bc:c6:74:79:b1:cb:18:0c:e5:57:8a:60:5d:
                    6d:16:70:93:f2:8d:23:92:3b:01:93:e4:c3:cc:fc:
                    98:67:b0:b6:64:0a:f0:0a:b4:1d:13:ef:1f:f4:84:
                    5e:ec:89:d6:fe:b1:5f:f0:6b:8e:3f:ad:9e:b8:2a:
                    58:36:f0:9c:ec:c5:7e:33:99:2f:a6:5e:09:0c:ab:
                    91:4e:51:2a:40:28:e5:9c:a5:40:5b:d9:43:a1:e5:
                    4d:40:32:5e:32:f7:97:bf:4e:fb:0c:df:26:77:13:
                    de:c3:4f:72:13:4d:83:61:bc:72:73:cc:d9:a2:2e:
                    9a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:E6:79:E2:26:99:EA:99:63:2B:78:EB:A1:41:09:16:7E:40:C8
            X509v3 Authority Key Identifier:
                keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/323830343a363830303a3a2f33332d3333203d3e20323639363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6800::/33

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:71:be:b3:8a:a2:6e:c5:9e:37:1a:3f:c1:a9:d2:19:d2:
         60:79:66:c2:f5:3b:df:6d:2a:d6:db:df:32:fd:2b:f5:74:eb:
         dc:cb:ef:99:be:05:2a:b7:2d:4c:0f:2a:97:b5:47:cc:e9:e1:
         f5:3a:8e:b5:c7:84:c7:c6:12:ab:c8:13:02:71:1f:5c:07:dc:
         f0:d7:1d:1f:1e:49:53:b7:71:47:58:48:65:47:77:38:27:1b:
         61:88:f9:25:4c:e5:56:26:e3:8d:ec:90:55:74:9f:26:68:96:
         19:21:4d:a8:fc:62:4f:d8:34:f4:ed:35:c4:29:d7:df:f5:19:
         59:d4:cc:28:08:07:a0:e5:23:82:41:60:e9:f6:81:93:94:05:
         c1:d0:32:ca:59:f0:0e:ed:2f:57:77:a5:56:e3:d9:46:9b:63:
         be:d0:31:7a:2b:f8:72:e1:66:3a:e2:45:b4:73:65:8d:4c:34:
         85:38:8f:6e:13:b1:b2:5c:a0:f1:a0:b4:3f:94:f7:81:77:3a:
         b3:c9:2f:e0:d0:f5:de:29:e4:0a:77:7c:30:e2:b1:e9:c3:27:
         14:40:c0:39:e0:8c:6f:75:0a:32:a4:86:8b:1a:be:af:b7:ef:
         2f:97:1c:5f:62:8d:77:a5:2d:57:58:a1:00:7b:6a:da:08:cc:
         59:6c:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org