Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33332d3333203d3e20323731373534.roa (raw, json)
Hash identifier:          rgwPr9RPkT71mp0I863C6xv65IHDFXzGPXSiUI1TMQI=
Subject key identifier:   14:EB:35:CB:6C:F5:90:D0:9B:71:8E:94:5A:9E:DE:75:79:50:70:85
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       045D56F427888FB277B1B41E769281E4E6B958CB
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa
Signing time:             Wed 03 Apr 2024 18:30:37 +0000
ROA not before:           Wed 03 Apr 2024 18:25:37 +0000
ROA not after:            Wed 02 Apr 2025 18:30:37 +0000
asID:                     271754
IP address blocks:        2804:8080::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5d:56:f4:27:88:8f:b2:77:b1:b4:1e:76:92:81:e4:e6:b9:58:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Apr  3 18:25:37 2024 GMT
            Not After : Apr  2 18:30:37 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:20:bd:98:55:98:a8:9c:0f:a5:51:59:13:
                    7c:ae:e8:0f:a0:a2:1b:0c:f4:2e:b5:45:d9:01:32:
                    4b:9e:00:d9:6c:a2:1c:62:26:10:9f:89:53:35:21:
                    bc:5f:11:73:f0:66:4c:d9:ac:7e:b2:5b:de:43:5f:
                    0e:fc:70:9e:55:c7:6a:35:96:9a:ec:0a:9c:16:d7:
                    9e:e8:3a:86:0d:a4:f4:d8:d2:6c:43:b8:cd:41:08:
                    5f:49:b7:16:e8:5d:40:dd:7c:cd:f6:fc:e7:3d:5b:
                    e2:de:c9:7f:24:ce:f0:fa:f9:a3:0a:b6:3f:ba:45:
                    26:88:02:ad:d3:60:1c:f6:c3:6f:f2:24:37:27:e0:
                    16:41:81:1d:3a:a3:54:53:6d:6e:12:2a:b1:44:37:
                    d1:72:cf:41:61:61:2f:0e:cf:af:a0:bc:ab:4a:67:
                    fe:85:05:c2:ba:96:7a:fd:e3:58:6a:0b:81:e7:52:
                    f4:b8:75:e8:2f:a3:1e:61:94:74:14:84:8f:0c:ad:
                    d3:60:62:db:6d:01:e1:b7:3e:a8:9b:d4:fd:b5:72:
                    d2:5d:f1:b1:d8:31:2d:d5:51:1f:ce:81:93:5a:e6:
                    88:04:8b:49:08:22:5f:7b:8c:97:83:3c:23:19:48:
                    94:13:02:8b:86:15:c7:ba:19:5f:72:e4:35:f7:e4:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EB:35:CB:6C:F5:90:D0:9B:71:8E:94:5A:9E:DE:75:79:50:70:85
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33332d3333203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/33

    Signature Algorithm: sha256WithRSAEncryption
         84:48:fa:33:81:3c:70:4b:6b:f6:4c:60:e4:c8:6c:35:92:e5:
         c4:23:48:da:63:b6:93:10:b1:e0:50:3d:c8:8a:1a:44:06:f9:
         cd:80:3f:af:38:bd:89:e0:9d:88:5e:43:d6:fd:db:b5:bc:bf:
         84:50:5c:bc:e9:00:f4:62:3c:48:84:d5:04:2a:ff:f2:bc:31:
         50:40:6c:5f:1f:2b:8c:3f:75:4e:7d:74:8a:84:5e:b9:b8:6b:
         39:6a:8f:38:8c:b5:7a:7c:03:17:b9:cd:b5:6c:75:61:16:19:
         d4:34:6b:82:06:2b:ed:b4:d5:1e:89:8a:bb:e7:96:2b:6a:f2:
         96:14:81:7b:9e:94:4f:01:a5:21:b1:54:78:ab:2c:9e:34:6f:
         97:76:f1:23:68:8a:2c:25:83:9d:63:4e:97:96:2e:fd:e6:3b:
         c6:9b:7d:51:a2:69:51:c5:65:7b:53:3f:6e:33:31:17:1b:17:
         ec:70:92:03:ab:e0:8c:d3:aa:e9:28:69:55:f6:94:2e:53:55:
         4c:70:49:10:7a:cc:40:b2:b4:38:75:65:de:80:c6:ff:f2:bd:
         8e:4b:5d:ed:88:fe:71:85:7f:88:ff:0b:fc:c8:06:23:23:ca:
         4c:91:1b:d1:7d:fe:15:13:46:d2:e0:4b:5c:20:6f:21:d3:26:
         26:bf:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:13 2024 by rpki-client on console-ams.rpki-client.org