Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a383030303a3a2f33332d3333203d3e20323632363131.roa
File:                     323830343a326663383a383030303a3a2f33332d3333203d3e20323632363131.roa (raw, json)
Hash identifier:          QT/CZS6ceCUSieS6KZ3dZqsEutwnyeCAvVa6PoK4ens=
Subject key identifier:   74:93:9F:DE:13:92:AD:FC:D1:64:CA:4B:79:89:A7:65:4F:DE:49:35
Certificate issuer:       /CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
Certificate serial:       4E8BCAA99F55A01B905BEC7B74824011286448CF
Authority key identifier: D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a383030303a3a2f33332d3333203d3e20323632363131.roa
Signing time:             Wed 17 Apr 2024 14:20:27 +0000
ROA not before:           Wed 17 Apr 2024 14:15:27 +0000
ROA not after:            Wed 16 Apr 2025 14:20:27 +0000
asID:                     262611
IP address blocks:        2804:2fc8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl
                          rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:ca:a9:9f:55:a0:1b:90:5b:ec:7b:74:82:40:11:28:64:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B24673AF94F6E8A7171887B60BF4EBE9D15E73
        Validity
            Not Before: Apr 17 14:15:27 2024 GMT
            Not After : Apr 16 14:20:27 2025 GMT
        Subject: CN=74939FDE1392ADFCD164CA4B7989A7654FDE4935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c6:c0:0c:53:d1:ea:8e:46:7c:dd:d9:f9:d0:
                    b9:9f:ca:eb:58:54:a8:83:a6:2e:5e:c7:75:db:d7:
                    76:b9:e6:b6:31:5b:a3:d9:75:85:b2:4e:ce:92:c6:
                    28:32:17:eb:be:cb:f1:52:86:68:44:41:a6:8a:cc:
                    94:87:99:72:8b:76:28:03:01:c5:83:86:b2:22:c8:
                    00:93:b3:32:a1:5d:18:22:d1:29:32:3e:3b:80:46:
                    39:9d:7a:68:13:d1:ff:c6:51:1b:82:93:e5:00:01:
                    c3:25:f8:ab:e7:4c:3c:a3:40:32:17:ae:27:b8:b4:
                    d6:cc:6d:ee:5a:33:5a:7c:83:5a:e3:c8:72:b1:c7:
                    8d:b0:a4:bb:f3:84:2d:dd:98:da:dd:3d:49:be:ea:
                    47:2f:df:e8:49:6a:6f:ac:e1:32:5d:47:61:b6:0c:
                    d3:43:6c:7b:63:4b:1c:c9:6d:5b:c1:f4:a4:cd:24:
                    d5:74:d7:8a:f9:df:3f:8c:f4:2f:2a:c6:f1:39:f8:
                    90:20:bb:c4:7f:55:7e:03:0e:5a:1c:15:6f:7b:2c:
                    c5:38:1f:3c:a2:79:66:81:92:25:9b:54:a7:9e:3d:
                    88:14:03:4c:fc:50:f9:d5:ba:5e:c9:2a:29:06:7a:
                    53:e2:07:bc:f8:dd:2b:18:08:d1:00:b7:83:8a:85:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:9F:DE:13:92:AD:FC:D1:64:CA:4B:79:89:A7:65:4F:DE:49:35
            X509v3 Authority Key Identifier:
                keyid:D2:B2:46:73:AF:94:F6:E8:A7:17:18:87:B6:0B:F4:EB:E9:D1:5E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B24673AF94F6E8A7171887B60BF4EBE9D15E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/323830343a326663383a383030303a3a2f33332d3333203d3e20323632363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:53:c1:02:7a:a5:f8:2f:71:3f:86:73:03:7c:02:b7:ca:b8:
         90:9b:cf:81:26:3e:76:b9:ca:ae:fb:13:6b:ad:7d:08:fe:35:
         40:81:fc:a9:25:63:e0:5a:d3:bb:4e:fb:1e:45:7e:08:bb:65:
         ba:29:d5:a6:80:1c:e3:47:2f:aa:1a:7e:51:33:55:75:e1:e6:
         3f:ec:cf:53:1b:b1:c2:c3:96:92:eb:7a:76:e1:a3:ed:a7:a8:
         70:a0:14:cb:3b:40:5a:9c:13:50:91:bb:57:e2:a7:ba:f9:32:
         ff:f7:03:d3:1d:54:6c:96:e5:c9:2f:83:55:6a:83:dc:ec:26:
         c8:f0:fc:cd:2c:5b:96:83:db:6f:51:b4:ca:2b:b0:d5:2f:1e:
         29:77:b4:e3:08:f4:3d:bd:7a:15:d0:ff:5d:bd:53:0d:3b:9d:
         b7:20:12:c8:b7:ba:01:c1:60:d3:ef:de:ef:21:84:2d:d4:1f:
         37:b2:53:8e:da:9e:56:c5:75:77:4f:60:d3:a1:1c:49:6a:da:
         70:94:4e:be:92:35:12:77:a5:78:07:b0:4c:40:b8:7c:dd:9b:
         c2:f6:bd:3e:1c:1d:f4:e5:b3:a3:c4:e5:c3:b8:56:42:17:10:
         4c:6c:a3:8a:b1:e7:15:e2:8b:92:75:2a:71:97:04:ab:87:b1:
         b7:1a:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:07 2024 by rpki-client on console-fra.rpki-client.org