Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3336203d3e203533323336.roa (raw, json)
Hash identifier:          iVjyuVE9enplxkkmHUWInjUVqiSjMgHzELR7ZUlk2Eo=
Subject key identifier:   1D:2C:43:9C:F0:2D:96:39:C2:34:5F:D9:39:04:F8:C8:FB:C0:1D:FD
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       5DCC63876CCFB9921926CF0433517FD0843741F9
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
Signing time:             Wed 03 Apr 2024 18:30:42 +0000
ROA not before:           Wed 03 Apr 2024 18:25:42 +0000
ROA not after:            Wed 02 Apr 2025 18:30:42 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:cc:63:87:6c:cf:b9:92:19:26:cf:04:33:51:7f:d0:84:37:41:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Apr  3 18:25:42 2024 GMT
            Not After : Apr  2 18:30:42 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:92:da:c6:8e:b8:ab:23:13:1c:43:71:ed:9c:
                    9a:6e:a6:7c:37:ce:de:ba:0a:1c:8e:0c:bb:9a:69:
                    49:40:b7:83:1d:a7:46:08:68:22:2a:a9:8d:ad:71:
                    5a:0a:f7:33:0a:5a:40:55:2d:c7:3a:d5:6e:d5:cd:
                    83:5c:3b:b8:95:2d:e7:00:a6:ff:95:79:c5:67:be:
                    6e:b0:37:a3:e7:15:41:a3:45:80:83:a5:39:3d:50:
                    e3:c9:a6:7c:c7:be:21:34:98:ff:3a:a3:31:5c:66:
                    46:2b:c4:1f:c5:a2:52:ec:1d:58:7f:84:14:fa:8a:
                    d2:4d:41:49:72:36:68:d2:7d:95:ce:65:2e:8b:c8:
                    c9:52:77:5b:95:2d:e1:2c:3a:26:0a:3e:38:59:cd:
                    81:c9:b8:83:ad:73:21:df:b0:05:49:0c:e5:e8:46:
                    45:fd:30:f8:10:8e:7c:2b:f2:91:f8:ae:a8:43:6d:
                    49:8a:27:7d:98:8f:da:05:a8:d4:70:d5:a0:08:36:
                    e1:83:26:ea:17:2e:d3:37:2f:93:01:98:da:e5:7e:
                    e1:8e:bd:e3:cf:b6:cd:7c:9d:0d:64:20:41:bd:6e:
                    75:76:17:fa:fd:78:7d:cf:fa:0c:3c:41:ee:71:5b:
                    da:36:95:1b:49:4b:27:9b:25:7c:3a:e9:4a:43:a8:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2C:43:9C:F0:2D:96:39:C2:34:5F:D9:39:04:F8:C8:FB:C0:1D:FD
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:c8:42:9b:17:f7:e0:f6:0a:14:a0:6f:2b:e8:5e:bd:74:6e:
         e7:16:cd:80:79:ea:24:b6:f7:b1:c0:a1:43:05:65:47:02:59:
         b9:11:7e:d9:6f:1d:46:ec:d6:c1:ce:e1:44:e9:87:ea:81:1c:
         0a:b9:7a:b9:99:4a:e1:1e:2f:77:4b:65:21:48:5a:b5:09:35:
         16:ae:94:dd:e0:75:5a:92:27:54:60:ad:cf:d4:99:19:55:58:
         eb:ad:c8:6b:29:1f:8a:51:39:27:1c:1d:d6:63:69:b7:4e:71:
         f2:c0:96:1a:d6:d1:8d:90:58:32:25:58:8b:3c:a4:76:dc:fc:
         54:94:79:bb:63:6c:a8:80:2e:ef:fa:d8:63:62:a7:6a:c6:c4:
         94:ff:e6:a6:05:a6:1a:00:c4:dc:ef:5e:d9:63:7a:a1:4b:66:
         72:07:7b:7f:37:38:12:72:a6:5c:71:a0:a2:ef:c5:b5:a7:2f:
         73:94:90:4a:df:01:63:26:ce:ae:3b:65:ad:d5:00:07:d0:6a:
         5a:ef:7a:72:41:bb:61:2c:8d:4e:ef:7c:df:1d:b5:84:5c:72:
         b1:bb:84:03:72:75:04:f8:d0:e3:47:e1:a2:c7:1f:21:20:28:
         5e:9c:5b:7b:ba:91:fc:62:4c:d3:14:5c:4b:98:36:d4:c0:77:
         ea:80:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:43 2024 by rpki-client on console-ams.rpki-client.org