Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33332d3333203d3e20323637313735.roa
File:                     323830343a343934383a3a2f33332d3333203d3e20323637313735.roa (raw, json)
Hash identifier:          Quvz07nnHrLEnq7vhfDWRUNe85vwkho7vaP+hPdcAys=
Subject key identifier:   24:B7:6B:73:8A:0A:95:56:E1:E7:C9:C1:39:71:96:F8:19:64:6D:47
Certificate issuer:       /CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
Certificate serial:       2F06BD4A0CC7034A6224ABA71F2ECE0A92F0AC95
Authority key identifier: 92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33332d3333203d3e20323637313735.roa
Signing time:             Tue 18 Jun 2024 17:09:08 +0000
ROA not before:           Tue 18 Jun 2024 17:04:08 +0000
ROA not after:            Tue 17 Jun 2025 17:09:08 +0000
asID:                     267175
IP address blocks:        2804:4948::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl
                          rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:06:bd:4a:0c:c7:03:4a:62:24:ab:a7:1f:2e:ce:0a:92:f0:ac:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=925B1A793CC71B318498F84F7BFE62C4ED773F65
        Validity
            Not Before: Jun 18 17:04:08 2024 GMT
            Not After : Jun 17 17:09:08 2025 GMT
        Subject: CN=24B76B738A0A9556E1E7C9C1397196F819646D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:18:a6:91:08:04:ee:5f:e8:b6:62:c0:de:
                    b5:9c:e1:77:24:9c:ab:f8:4c:1f:91:db:8c:c4:fe:
                    75:84:62:db:70:a4:a6:d4:70:a7:61:fe:dd:13:58:
                    5e:a8:a5:2b:ee:88:9c:a8:f1:d5:ad:ee:52:f4:7b:
                    ac:3d:54:32:be:ae:7a:c6:79:c7:41:48:c6:af:6a:
                    a6:b6:7d:80:1e:41:96:6e:a5:19:57:8d:14:40:94:
                    74:d1:26:59:5f:51:d9:52:2f:74:63:f9:e5:2e:97:
                    05:e4:0e:ff:a4:ec:6e:a6:98:eb:b7:59:3e:2a:bc:
                    b1:c4:8d:ad:3e:5d:45:c0:9f:68:83:47:30:cf:ec:
                    13:b7:d9:03:d5:45:f4:61:a1:ba:b2:07:de:2a:d0:
                    c9:e0:03:72:fb:61:7d:da:1a:b3:29:a8:4e:c5:e4:
                    0b:22:17:b5:7b:40:b9:36:5b:95:83:3d:61:00:a9:
                    41:88:fb:08:22:14:05:ec:6c:aa:29:77:cb:66:43:
                    d1:bb:ad:0e:bc:6b:a7:d6:7f:55:90:f4:af:40:23:
                    3e:79:08:da:c0:c4:79:4a:2e:6e:6f:3e:34:0f:62:
                    8e:04:a5:c9:cd:bc:06:01:26:f5:e6:25:14:45:20:
                    84:9e:c8:ea:86:29:1c:37:af:2e:9d:05:f1:e2:1f:
                    4b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B7:6B:73:8A:0A:95:56:E1:E7:C9:C1:39:71:96:F8:19:64:6D:47
            X509v3 Authority Key Identifier:
                keyid:92:5B:1A:79:3C:C7:1B:31:84:98:F8:4F:7B:FE:62:C4:ED:77:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/925B1A793CC71B318498F84F7BFE62C4ED773F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/925B1A793CC71B318498F84F7BFE62C4ED773F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/323830343a343934383a3a2f33332d3333203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4948::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:78:3f:78:03:6b:52:ab:34:1d:dc:24:bf:ac:94:e8:0e:
         94:5f:4d:b3:b1:36:5f:3e:1c:14:fb:c3:e6:78:73:ca:60:0c:
         26:42:2d:a1:2f:a3:87:cd:50:2e:28:12:e7:29:d5:3f:ce:70:
         d2:69:15:58:ff:7f:f2:b9:47:cc:0e:0e:13:3b:a6:80:73:b2:
         8b:72:22:ba:b2:5a:5d:d7:2c:f6:65:a0:f2:f2:94:e3:0d:00:
         ea:ab:06:ac:16:10:de:89:8f:d8:1a:fc:a2:36:8c:23:8e:79:
         f8:ce:2b:bf:cf:83:1c:6d:27:08:13:7f:48:85:f4:7b:6b:a8:
         d1:ef:59:f7:0c:f2:54:76:eb:64:94:8c:f8:c0:b5:cf:1e:b8:
         65:e8:6f:f1:22:f4:9c:96:97:5b:ab:b4:3a:8c:87:f2:68:d7:
         a5:ee:58:f4:8c:a0:b4:0c:5f:00:3d:16:36:2b:fb:a1:fb:31:
         b1:4f:47:1e:a9:13:c6:1a:33:e2:72:d9:aa:5c:f2:7f:98:1d:
         41:92:99:4c:5f:e5:c5:58:77:48:93:3e:09:ce:45:3a:2f:dc:
         af:33:97:2b:95:8c:a6:da:81:9d:5f:4d:c7:dd:90:23:c8:d5:
         30:52:b9:52:e5:ea:8d:3c:8c:c7:22:33:07:13:fb:c7:a8:d1:
         37:77:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:33 2024 by rpki-client on console-fra.rpki-client.org