Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a383030303a3a2f33332d3333203d3e20323637313735.roa
File:                     323830343a343934383a383030303a3a2f33332d3333203d3e20323637313735.roa (raw, json)
Hash identifier:          yRqilItEzRKIf6KLPoTMhQRi7YBtU3ORZgv01K1t+uI=
Subject key identifier:   A9:AE:B3:07:F6:8A:7F:7C:9D:67:2F:0E:F4:76:A4:BA:4B:CC:0A:4B
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       5F82B4978720966D80E40B44D0D78417BAF463C4
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a383030303a3a2f33332d3333203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:09 +0000
ROA not before:           Tue 18 Jun 2024 17:04:09 +0000
ROA not after:            Tue 17 Jun 2025 17:09:09 +0000
asID:                     267175
IP address blocks:        2804:4948:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:82:b4:97:87:20:96:6d:80:e4:0b:44:d0:d7:84:17:ba:f4:63:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:09 2024 GMT
            Not After : Jun 17 17:09:09 2025 GMT
        Subject: CN=A9AEB307F68A7F7C9D672F0EF476A4BA4BCC0A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:e8:43:79:4d:c1:58:68:53:08:cb:55:ee:
                    cc:96:57:1c:b9:c7:dc:d1:e2:5f:2b:57:0e:fe:74:
                    0a:e8:e2:b8:44:35:9c:06:d5:b6:da:4b:a9:cf:ac:
                    b9:22:3c:de:7d:63:27:be:ef:e1:6b:1d:f5:04:46:
                    2f:65:c7:6b:f1:99:71:38:ba:96:5d:b4:7e:06:16:
                    0a:c1:30:76:da:43:9a:df:9e:b5:39:10:a7:bc:fa:
                    9a:69:43:37:98:73:78:e4:63:c1:29:ee:af:34:3a:
                    8b:2b:ac:d0:74:1e:44:92:c5:ff:cb:dd:f0:12:cc:
                    27:72:22:a2:ed:63:23:10:99:01:bf:42:e6:f5:cd:
                    56:8b:0c:a3:05:0b:3b:a2:bb:a0:e2:1f:07:3b:31:
                    5a:c2:bc:62:6a:d1:8b:26:ae:61:0d:e4:d3:dd:0b:
                    a7:b6:7f:fb:46:78:5b:19:33:88:a0:18:2a:b0:eb:
                    c5:99:70:a6:46:9d:2a:ad:8f:d2:fb:4c:03:8a:99:
                    aa:f5:38:27:ce:c0:88:43:2d:2c:0a:77:b3:98:8c:
                    8f:9e:65:30:13:b2:4b:64:b3:2e:e3:f5:21:5e:0a:
                    79:fd:36:46:24:fe:b5:44:8a:97:c0:6f:45:e9:b1:
                    fc:da:8c:83:41:8f:c8:e5:76:2e:38:b9:fa:00:f2:
                    35:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:B3:07:F6:8A:7F:7C:9D:67:2F:0E:F4:76:A4:BA:4B:CC:0A:4B
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a383030303a3a2f33332d3333203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4948:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:b2:e2:55:34:1e:32:d4:2c:9c:f2:58:e2:06:8d:c4:1d:
         f8:ea:7d:79:d2:57:47:14:58:e9:c5:09:38:c2:58:a6:91:07:
         1f:17:81:cb:1e:c2:42:5a:05:12:5f:7b:01:43:cc:32:e0:db:
         95:81:24:70:32:9f:4c:fe:c4:23:1c:86:80:a5:63:0b:28:98:
         72:a5:8e:f7:c1:23:c5:02:46:42:4c:b8:97:1b:8b:ab:77:4c:
         a5:d8:0a:48:3f:c9:8f:22:3c:be:ac:aa:71:63:2e:5a:b8:85:
         0d:36:46:40:f6:d8:d6:20:c6:0a:47:20:46:34:b1:d0:f6:65:
         9f:7b:ed:0f:53:cc:5d:60:7e:f8:ca:60:61:50:46:f6:d9:eb:
         95:93:76:70:58:36:37:9f:9c:89:33:13:7b:cc:07:6d:af:e6:
         5b:83:7f:53:d2:c6:b6:29:b9:51:2e:2e:01:ef:98:23:a0:95:
         85:7f:ab:14:98:1d:65:52:46:0f:12:30:53:52:d6:56:84:c0:
         eb:34:c4:46:29:36:26:7c:b9:10:d5:70:6f:23:3a:b2:ba:24:
         c0:1e:00:d6:96:45:7c:3c:7d:69:58:cb:01:54:62:2a:b0:66:
         87:ba:d2:17:37:8a:34:8c:db:70:b5:40:84:8c:f8:9e:7d:a9:
         49:6e:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:38:23 2024 by rpki-client on console-ams.rpki-client.org