Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3438203d3e20323634333638.roa
File:                     323830343a316437303a3a2f33322d3438203d3e20323634333638.roa (raw, json)
Hash identifier:          nCj+uef3jvOiGltKvHy9gZf9NXUi7s4FzucsTmVL0rA=
Subject key identifier:   25:E7:F7:1A:CB:BA:30:B9:95:45:49:0D:A0:D6:82:36:32:F1:F5:37
Certificate issuer:       /CN=00099678E157EF4EBF18B52B07C133567D365A04
Certificate serial:       33E473EF2B61060D08D6B9BD8545302416E4F2DE
Authority key identifier: 00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3438203d3e20323634333638.roa
Signing time:             Wed 03 Apr 2024 20:48:42 +0000
ROA not before:           Wed 03 Apr 2024 20:43:42 +0000
ROA not after:            Wed 02 Apr 2025 20:48:42 +0000
asID:                     264368
IP address blocks:        2804:1d70::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl
                          rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 20:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e4:73:ef:2b:61:06:0d:08:d6:b9:bd:85:45:30:24:16:e4:f2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00099678E157EF4EBF18B52B07C133567D365A04
        Validity
            Not Before: Apr  3 20:43:42 2024 GMT
            Not After : Apr  2 20:48:42 2025 GMT
        Subject: CN=25E7F71ACBBA30B99545490DA0D6823632F1F537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:24:93:2a:17:d6:95:9f:24:d3:17:64:85:
                    a3:0e:00:03:af:98:2b:ab:1b:82:94:fe:36:65:20:
                    76:94:67:c1:c9:f5:a0:05:ce:7d:e5:a2:c3:ca:95:
                    67:64:8c:be:5f:39:e1:e6:86:89:93:59:d8:cb:68:
                    1b:a5:76:b6:df:0c:9b:cd:1e:da:93:08:9f:2f:49:
                    84:1f:85:9d:1f:1b:3a:36:8a:0a:78:52:d9:5e:72:
                    14:b1:37:8c:01:34:b5:a3:52:4f:4d:f6:0a:9e:3e:
                    ee:e6:8a:88:56:75:4b:ee:fb:b7:6c:17:63:67:a5:
                    15:fb:8c:cd:87:13:16:42:8e:03:ed:ee:9d:07:19:
                    35:45:21:3b:4b:d5:58:42:37:10:f5:b4:22:57:3b:
                    44:90:da:6f:6e:eb:d3:f5:3b:ba:71:e6:5c:e4:78:
                    1f:5d:f3:34:f4:66:66:2a:0b:e3:96:96:c7:b2:90:
                    48:4e:de:9a:74:35:fd:16:a7:9d:40:4f:f4:99:02:
                    4e:77:eb:68:bf:62:8b:d8:b5:a0:a1:54:a4:44:7f:
                    03:24:71:bb:02:2c:07:71:a5:c0:3e:ec:88:fc:49:
                    b8:79:f4:b9:0a:cb:09:09:a7:9f:5f:aa:eb:43:58:
                    0f:a2:11:ac:a5:ec:96:9a:e9:bf:e4:bf:94:6a:2f:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:F7:1A:CB:BA:30:B9:95:45:49:0D:A0:D6:82:36:32:F1:F5:37
            X509v3 Authority Key Identifier:
                keyid:00:09:96:78:E1:57:EF:4E:BF:18:B5:2B:07:C1:33:56:7D:36:5A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/00099678E157EF4EBF18B52B07C133567D365A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00099678E157EF4EBF18B52B07C133567D365A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtoCc5VgpzwkJP3f8swB5TcceXLBMHPjuXZwH4TsZLPo/1/323830343a316437303a3a2f33322d3438203d3e20323634333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d70::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:81:56:b1:28:56:7b:0b:3c:73:23:7a:45:c6:bc:8b:6b:c5:
         82:43:ef:3d:a4:59:d5:a8:14:74:6c:2f:ab:90:f2:78:b4:ae:
         a2:c7:1a:3e:8f:09:c0:46:da:61:b1:ff:8b:19:29:14:cd:c2:
         eb:e5:73:1c:b0:ab:78:8b:2e:f5:10:3f:18:63:59:03:0a:0a:
         0a:0d:e1:da:26:e4:6d:a1:73:30:5a:f4:2e:11:e0:0c:10:0c:
         a0:a7:8c:e5:24:96:37:b5:15:20:42:25:f6:e5:6d:c1:7d:99:
         77:86:66:de:06:d7:3a:9e:1b:5c:99:0e:1f:87:21:10:4d:34:
         bf:4f:80:fd:dc:8b:d4:de:f1:b2:7b:76:5b:ea:99:ca:f6:72:
         04:3c:b1:00:3c:7b:0a:09:e7:ae:8c:27:15:88:ca:88:cb:2c:
         cb:9f:f4:3a:d8:a2:ce:ab:ab:15:17:15:ae:2e:8a:e2:b7:bc:
         23:9d:47:cd:86:6b:35:09:65:7f:72:ee:47:83:f1:22:c0:7f:
         b8:be:cc:05:f4:4e:d5:66:0b:f5:f9:ea:cb:32:2d:06:59:f9:
         e1:52:b8:75:1a:d8:9e:d5:25:20:70:42:81:a1:da:8e:ac:6a:
         0b:c5:4f:de:64:85:65:c8:68:a2:41:2a:a7:b4:7d:46:a2:0d:
         cc:0f:4e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:44 2024 by rpki-client on console-ams.rpki-client.org