Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
File:                     323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (raw, json)
Hash identifier:          44ZuKGY89XFOl6beP/NUgxj++oeBaG7H6AIPKmyywE4=
Subject key identifier:   BD:45:9C:88:2C:5F:88:73:E8:63:5A:75:F6:67:00:A2:03:99:1A:91
Certificate issuer:       /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial:       6A07B2A6C4F6D867769AFE8A105813CD8435E949
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
Signing time:             Wed 03 Apr 2024 21:49:16 +0000
ROA not before:           Wed 03 Apr 2024 21:44:16 +0000
ROA not after:            Wed 02 Apr 2025 21:49:16 +0000
asID:                     266374
IP address blocks:        2804:36d0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
                          rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:07:b2:a6:c4:f6:d8:67:76:9a:fe:8a:10:58:13:cd:84:35:e9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
        Validity
            Not Before: Apr  3 21:44:16 2024 GMT
            Not After : Apr  2 21:49:16 2025 GMT
        Subject: CN=BD459C882C5F8873E8635A75F66700A203991A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:4f:9e:c3:cd:59:c3:1f:d1:b4:c0:e1:21:
                    a9:a8:82:8a:b1:e9:48:ba:95:22:45:94:e8:a8:11:
                    8b:20:68:87:90:04:4f:d5:04:5e:d9:23:bd:c2:f7:
                    3b:00:48:f4:65:fd:69:bd:d0:b7:11:9f:75:d8:d7:
                    70:09:76:54:31:6f:4b:8c:48:81:dd:93:df:40:98:
                    de:d1:52:0a:92:b1:fb:80:58:b2:db:1f:96:c2:d2:
                    fb:fd:2a:36:ee:e4:2c:23:1e:71:d7:4c:28:c3:e5:
                    7c:06:2c:0d:4f:65:23:50:1b:72:6c:3e:5e:0b:49:
                    3c:e9:a2:91:35:05:db:69:0f:26:a4:72:51:94:b0:
                    e3:f4:59:c2:bd:22:73:7a:5a:d3:c8:f9:d9:de:b8:
                    99:50:3b:88:ae:be:79:9c:4b:b8:88:84:4e:61:f4:
                    ba:c1:d3:76:c8:55:a9:0b:d8:96:90:03:bd:c8:3c:
                    14:06:f6:2a:0c:19:d9:d5:88:4f:9e:0f:48:9e:61:
                    01:d2:d9:2a:07:4c:3e:5f:f4:ef:c7:38:b9:04:b9:
                    d6:28:76:3c:5a:20:69:73:fd:1b:96:50:4a:69:d6:
                    61:e0:89:10:6c:3c:0e:ae:8e:98:13:f0:bb:12:e8:
                    89:95:c9:5b:5c:ae:ed:f8:a2:ac:55:5a:5d:3a:37:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:9C:88:2C:5F:88:73:E8:63:5A:75:F6:67:00:A2:03:99:1A:91
            X509v3 Authority Key Identifier:
                keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d0::/33

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:c5:64:5d:2f:fa:8e:e3:5c:a8:0c:93:e5:68:cb:bd:8f:
         a0:25:cc:b9:8f:9f:d7:eb:6e:a3:ad:6f:c7:03:ba:72:9b:d3:
         0e:09:25:fd:20:6a:a4:70:4a:e5:73:cb:42:5a:4f:a6:af:2e:
         21:c9:e8:e8:b2:13:19:d1:1e:33:16:d4:24:b3:d3:47:90:fd:
         7c:0c:c2:a0:a9:1d:98:10:9d:b0:55:2b:fc:d5:85:5f:4e:fa:
         1d:cd:25:5d:11:88:f1:66:7d:18:f2:85:ba:48:5c:81:cb:89:
         a8:2a:22:1a:8e:18:9a:11:8a:a1:52:37:48:b4:6b:ae:20:65:
         ec:c0:27:a2:c1:1d:b6:97:c1:76:20:80:d1:fe:da:e3:07:3e:
         89:0f:2a:09:4f:ae:e1:21:23:39:71:0c:2b:5d:61:78:87:d9:
         62:9e:f2:ee:ed:05:1e:e7:51:57:40:97:45:23:0a:e0:52:66:
         ad:59:5c:1b:3f:41:f1:34:d2:00:91:99:fa:47:5d:0f:42:93:
         af:55:db:18:77:10:99:87:40:10:5e:7f:f0:91:f3:bc:6e:7c:
         d0:dc:29:9e:c9:7c:98:d6:e4:10:ab:8f:7c:d7:69:bc:45:13:
         29:72:b8:97:16:92:aa:ec:d0:49:41:26:51:48:06:03:61:05:
         60:1e:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:54 2024 by rpki-client on console-fra.rpki-client.org