Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33332d3333203d3e20323635313735.roa (raw, json)
Hash identifier:          2yuV3j4aepakeHKO+UcEbt46BLuhkQ2o9eiHcuanDmE=
Subject key identifier:   1D:88:66:CF:D2:5D:04:23:4B:5A:46:3E:44:1E:35:5D:02:E4:E0:FB
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       34F30E3C712173F180BF8B0ED75DEA081A276AC4
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:53 +0000
ROA not before:           Tue 01 Oct 2024 14:00:53 +0000
ROA not after:            Tue 30 Sep 2025 14:05:53 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f3:0e:3c:71:21:73:f1:80:bf:8b:0e:d7:5d:ea:08:1a:27:6a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:53 2024 GMT
            Not After : Sep 30 14:05:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:be:55:e7:a4:af:1a:5b:6d:58:46:68:a5:d6:
                    39:62:6e:a8:52:68:17:00:82:c4:22:80:93:50:3e:
                    82:0b:26:f3:d7:42:1a:9a:04:66:c1:87:5e:7b:cc:
                    6c:ac:9c:c5:cd:fd:1d:21:54:e1:e7:71:e0:91:a5:
                    c7:49:3a:28:08:8b:81:dd:db:5f:35:13:53:39:70:
                    0e:c2:6a:f6:a5:5e:2d:7b:73:a8:f2:58:83:20:21:
                    0b:ca:1a:35:56:03:5e:60:5b:ca:3b:98:15:f6:16:
                    9b:cc:5b:2a:03:4a:4a:66:b2:8e:b0:55:83:fc:bf:
                    a5:6e:ce:ec:f8:20:2c:51:e2:a2:04:1a:ea:be:2d:
                    89:de:ab:4d:57:ea:42:26:fc:d1:d7:af:91:d0:e2:
                    4c:09:01:00:1a:9e:46:d9:21:4a:40:5d:2b:d3:45:
                    6d:93:59:1a:29:a2:b9:31:aa:a2:d7:57:bb:8e:e2:
                    a0:d6:7b:28:5d:65:bf:d7:16:7f:8f:b9:d8:d3:9e:
                    fd:fd:93:b5:56:b0:03:98:17:40:38:d9:8d:2f:7a:
                    81:fa:08:dd:a8:e3:ab:e9:f3:66:94:66:05:25:41:
                    2c:2e:5a:47:7a:d2:fd:93:12:a8:aa:1f:6b:07:74:
                    e2:e9:b0:49:f6:96:9f:d3:a6:74:0e:b2:1c:3f:58:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:66:CF:D2:5D:04:23:4B:5A:46:3E:44:1E:35:5D:02:E4:E0:FB
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33332d3333203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:6b:99:c4:b0:af:34:ab:4f:ec:39:31:98:79:ca:a0:68:d0:
         bf:a7:6f:f4:3b:d3:ee:48:57:aa:d4:8e:6b:3b:3a:e5:56:ce:
         09:5b:45:53:eb:70:b8:03:3e:16:ba:69:fb:83:fd:02:87:b2:
         ac:82:e5:b3:25:5f:4e:12:8f:ff:ec:b5:d6:29:34:46:d8:66:
         17:6f:07:f7:08:0f:7f:4d:48:be:25:8c:69:3b:fc:5a:af:27:
         f8:aa:02:85:3f:9e:6c:7a:0d:01:b3:fd:ff:8d:96:ff:c0:f2:
         84:f3:3c:fb:c4:c2:a7:91:13:da:90:55:e2:04:90:3b:67:a2:
         5a:7a:56:8b:7c:64:40:dd:5c:86:ca:24:77:a8:c3:60:c5:4c:
         a9:bc:ca:d7:69:be:1c:e7:b5:f7:61:15:84:87:cb:56:e7:55:
         3f:67:c5:5b:ab:0a:19:dd:64:18:e7:e5:f0:aa:74:40:ea:36:
         79:2a:da:0d:3c:b7:35:32:2d:da:89:99:66:8a:67:09:d5:3a:
         49:2e:f1:e6:c1:eb:af:6f:86:4f:41:a6:34:6c:cc:17:30:2d:
         30:1d:4e:5b:fe:dc:12:65:43:9b:fc:4b:67:34:4d:43:de:ec:
         3c:4f:ac:ed:b6:24:05:86:59:74:a3:42:b9:49:9e:b8:e5:98:
         f9:06:f9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org