Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa
File:                     323830343a353737633a3a2f33332d3333203d3e20323638303638.roa (raw, json)
Hash identifier:          AbLKDLO+p40I9qGwXpW8fQXVitIvHRWT+JY32ty/dN8=
Subject key identifier:   F3:73:6F:B0:AF:94:4E:CB:A1:B5:FB:E7:BA:3C:5F:64:B9:66:CB:26
Certificate issuer:       /CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
Certificate serial:       45C9728AF120510A9A9CE5C7E7458E12B69D51D5
Authority key identifier: 21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa
Signing time:             Thu 04 Apr 2024 05:26:12 +0000
ROA not before:           Thu 04 Apr 2024 05:21:12 +0000
ROA not after:            Thu 03 Apr 2025 05:26:12 +0000
asID:                     268068
IP address blocks:        2804:577c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl
                          rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c9:72:8a:f1:20:51:0a:9a:9c:e5:c7:e7:45:8e:12:b6:9d:51:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2109BE321BAA489853B95DD9EB2882D4F824F0F2
        Validity
            Not Before: Apr  4 05:21:12 2024 GMT
            Not After : Apr  3 05:26:12 2025 GMT
        Subject: CN=F3736FB0AF944ECBA1B5FBE7BA3C5F64B966CB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:e5:47:72:be:40:25:2b:c7:54:99:21:1f:
                    6a:1d:aa:ad:b4:5d:78:6c:ac:65:3a:a1:1d:8c:93:
                    dd:f9:e0:e4:70:67:74:f8:7d:39:15:97:35:9e:6b:
                    09:c5:05:f3:ac:16:20:7e:9c:73:de:46:50:87:74:
                    da:c1:3c:5a:7c:07:51:2e:7d:80:75:77:b8:5f:50:
                    60:05:03:f2:f1:f2:23:97:0d:47:e4:11:8f:2f:88:
                    c6:4b:64:26:2c:05:76:1c:f2:75:fb:60:26:28:86:
                    d6:3a:55:41:8b:21:12:d1:02:5f:42:ce:6a:31:7e:
                    36:e2:17:30:10:ac:59:f2:73:ae:87:38:ac:12:bf:
                    76:19:f1:47:4a:20:f6:4b:5a:a5:19:d2:0d:a8:a5:
                    a8:23:9c:11:d2:20:32:4e:f0:0f:ba:87:9d:04:ed:
                    94:46:49:32:ae:99:65:65:01:4b:eb:2f:af:ce:cb:
                    25:1d:32:86:c7:0b:a5:9f:be:d4:c2:55:a3:c2:88:
                    39:55:36:65:12:9a:da:60:b0:6d:fb:31:8a:6b:d8:
                    d1:db:d9:1e:1e:fb:47:af:6c:50:6d:3e:02:bb:12:
                    81:77:90:70:15:b2:a4:e5:a6:f6:c7:87:dc:b9:50:
                    d6:58:df:53:ff:5a:54:4f:20:c4:96:19:22:34:a2:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:73:6F:B0:AF:94:4E:CB:A1:B5:FB:E7:BA:3C:5F:64:B9:66:CB:26
            X509v3 Authority Key Identifier:
                keyid:21:09:BE:32:1B:AA:48:98:53:B9:5D:D9:EB:28:82:D4:F8:24:F0:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2109BE321BAA489853B95DD9EB2882D4F824F0F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEQPrBmKHW2FeDG6AbbTQ7QXxPzyqieykJ8eesufVp11/1/323830343a353737633a3a2f33332d3333203d3e20323638303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:577c::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:28:8c:f0:3b:fd:8a:cf:82:cf:7e:96:c0:87:dc:ec:ab:54:
         20:66:5f:46:8b:b1:7e:ac:bb:65:e4:fa:cd:93:83:fd:00:b9:
         d2:96:c1:5a:38:59:6b:54:73:5b:9a:9e:62:5d:d7:db:cd:b4:
         0c:6a:a3:d5:4e:6a:2d:c9:6d:93:6c:00:27:6c:15:f7:37:99:
         1d:51:40:5b:c6:73:8b:19:05:aa:f9:93:59:b3:a1:bb:d5:ee:
         f4:4b:f3:ef:cc:1f:43:e1:bd:4b:fb:2f:01:dd:60:15:cb:f2:
         b8:aa:75:c0:40:16:14:aa:0a:c6:b4:f0:bb:76:59:f1:c6:3f:
         18:0e:4c:45:b2:bf:2f:2c:1f:84:2c:3e:24:48:a3:b5:03:a6:
         2a:1b:2d:4b:b2:91:bd:93:7a:6c:74:14:b5:5d:84:b4:a2:0f:
         aa:8e:f5:76:06:a7:a5:6d:74:e1:2d:5d:93:89:58:e1:22:b2:
         52:7a:f4:40:a7:0c:ec:84:ba:4b:63:b5:b1:ab:47:51:33:0b:
         20:85:63:e8:3d:e7:ef:6d:ef:58:d9:fa:df:6b:5e:86:c6:1a:
         9b:0b:07:45:ff:3d:16:df:39:4e:90:82:ce:e6:ac:3d:89:40:
         fe:12:1b:2b:a8:a7:5f:5d:25:7d:50:9f:2f:c5:b1:20:25:7c:
         ec:db:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:41 2024 by rpki-client on console-ams.rpki-client.org