Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
File:                     323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa (raw, json)
Hash identifier:          vl4mFjQHOkMdsCVwJv0j+pCY8P79/vP56TTcOaBpLAw=
Subject key identifier:   B0:51:2A:42:47:E6:12:B5:A3:69:D3:CE:13:8E:CF:13:0A:55:92:17
Certificate issuer:       /CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
Certificate serial:       0974F7A4BA3881ECB97DCBCA8E811A40763324DB
Authority key identifier: 73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa
Signing time:             Thu 04 Apr 2024 21:01:00 +0000
ROA not before:           Thu 04 Apr 2024 20:56:00 +0000
ROA not after:            Thu 03 Apr 2025 21:01:00 +0000
asID:                     263897
IP address blocks:        2804:2760:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl
                          rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:74:f7:a4:ba:38:81:ec:b9:7d:cb:ca:8e:81:1a:40:76:33:24:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7309159F56A47754EF99E9F4F55BD61B99CCD644
        Validity
            Not Before: Apr  4 20:56:00 2024 GMT
            Not After : Apr  3 21:01:00 2025 GMT
        Subject: CN=B0512A4247E612B5A369D3CE138ECF130A559217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:27:a2:06:3f:72:a1:a1:f8:10:6d:da:53:
                    77:95:d7:61:d2:39:0f:23:78:06:27:88:1c:58:02:
                    93:9c:ef:ea:34:b5:f5:42:2e:82:f6:ab:0e:12:ea:
                    30:a3:80:d8:b3:c0:70:b0:4a:6e:43:f5:2c:be:82:
                    83:5d:30:99:8c:a1:90:ac:1f:a4:6e:83:9d:59:0f:
                    19:dd:f6:67:d7:d2:ab:e9:62:25:a0:94:0e:7d:71:
                    67:16:c5:40:16:7e:02:c4:0c:79:18:85:75:bb:65:
                    ab:88:e2:81:26:49:b6:5f:72:0f:7d:eb:b6:8b:4f:
                    77:fa:93:d0:24:ea:a3:2b:c6:e5:ac:e0:7b:3b:81:
                    86:60:9f:8c:0d:a4:cf:c4:16:70:ca:d8:2b:7c:71:
                    e6:5c:9b:9c:fc:7c:83:32:ad:06:09:06:b2:65:5b:
                    0a:bb:53:e3:cc:c4:b7:b3:4c:b3:87:6d:77:40:9b:
                    5b:9b:54:87:82:1c:c1:e9:0f:fa:8e:9e:5e:3f:13:
                    41:b0:8e:21:f7:5e:16:bd:69:34:af:66:a3:b9:c3:
                    77:8b:c4:f2:0a:08:ab:f1:42:d7:25:84:f7:e8:c1:
                    8e:01:85:e1:6d:94:6b:15:b2:ea:f1:79:4e:5d:79:
                    cb:65:70:24:dd:24:d4:3a:9f:9f:4a:bf:14:66:8b:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:51:2A:42:47:E6:12:B5:A3:69:D3:CE:13:8E:CF:13:0A:55:92:17
            X509v3 Authority Key Identifier:
                keyid:73:09:15:9F:56:A4:77:54:EF:99:E9:F4:F5:5B:D6:1B:99:CC:D6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7309159F56A47754EF99E9F4F55BD61B99CCD644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/1/323830343a323736303a383030303a3a2f33332d3333203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2760:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ad:32:ee:0a:8d:10:3d:6c:37:03:3e:a3:5d:c0:8a:fd:e5:5a:
         77:aa:33:e8:65:b4:56:52:4d:a7:3e:c4:18:62:0e:5e:74:ff:
         03:cd:70:ec:9e:e6:71:67:5c:9e:25:76:48:0e:20:27:9e:d8:
         4d:0e:36:88:9c:0d:c5:34:c0:21:29:43:a3:c6:fc:d3:38:87:
         08:00:f9:e5:36:f6:f6:34:8f:79:cc:f3:84:77:cc:ca:46:7b:
         8d:dc:6f:c1:cc:50:42:46:bb:89:fe:5b:c1:c7:09:16:6e:80:
         6a:50:d7:c9:70:da:75:2f:69:7c:3b:f2:c9:9b:c2:1b:17:65:
         ec:4d:36:18:e8:95:b1:0f:2c:32:5f:86:32:9a:45:f8:80:d9:
         e6:24:25:0b:2a:08:d6:4a:18:0f:7e:e4:e5:03:f4:84:c3:49:
         e4:be:92:71:4b:e9:29:c4:29:4d:06:fc:44:89:55:47:d1:36:
         ea:77:92:ee:ab:01:16:83:0e:ac:ef:1e:5d:9b:0d:76:25:50:
         f3:9f:f8:bc:70:87:1b:82:90:c5:56:e1:b4:a0:af:b1:8a:4f:
         39:fd:3f:10:84:96:b1:12:11:1a:ba:b0:21:a0:00:b6:e6:9a:
         6b:80:a7:83:e3:aa:f6:9c:e7:d2:db:06:63:83:bd:6d:2b:c2:
         39:0d:50:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:19 2024 by rpki-client on console-fra.rpki-client.org