Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/323830343a3233633a3a2f33322d3336203d3e20323632373937.roa
File:                     323830343a3233633a3a2f33322d3336203d3e20323632373937.roa (raw, json)
Hash identifier:          crUAt9ZS3/G5ti0UvUDpdTsO7GtEbXlb6JnMAxTVAqc=
Subject key identifier:   17:C0:26:7A:22:59:3D:CD:F6:58:8B:8E:79:62:75:78:04:73:36:0D
Certificate issuer:       /CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
Certificate serial:       67AA2065F7EB950E107134C8A843809647814EF1
Authority key identifier: 67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/323830343a3233633a3a2f33322d3336203d3e20323632373937.roa
Signing time:             Thu 04 Apr 2024 18:30:12 +0000
ROA not before:           Thu 04 Apr 2024 18:25:12 +0000
ROA not after:            Thu 03 Apr 2025 18:30:12 +0000
asID:                     262797
IP address blocks:        2804:23c::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:aa:20:65:f7:eb:95:0e:10:71:34:c8:a8:43:80:96:47:81:4e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C
        Validity
            Not Before: Apr  4 18:25:12 2024 GMT
            Not After : Apr  3 18:30:12 2025 GMT
        Subject: CN=17C0267A22593DCDF6588B8E796275780473360D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:f1:ef:05:ac:59:8f:f5:d3:bc:f2:14:9d:
                    82:6f:c4:83:d2:cf:c0:15:49:e2:53:16:87:38:bb:
                    df:d9:54:4c:64:b0:ce:09:60:17:79:54:2b:3c:49:
                    20:27:71:61:80:95:58:46:bf:9a:3e:5f:99:ef:f3:
                    6e:c8:a5:5a:f1:d5:b6:cf:91:19:8e:d7:fc:93:04:
                    2a:47:60:9d:16:2f:99:15:b7:65:fc:94:fc:60:ac:
                    2b:12:8e:41:a7:3a:8d:34:46:bb:95:9c:29:5e:c8:
                    d3:a9:a2:d3:5f:db:a2:0a:81:97:50:28:a9:77:10:
                    75:a3:c6:61:a4:60:94:b5:9f:d9:16:1b:c5:6d:14:
                    16:6d:ca:ac:73:9c:b1:51:e0:68:84:49:0f:37:0a:
                    d6:aa:da:7d:12:40:97:63:7a:02:11:ad:0f:b4:9b:
                    d7:77:78:2b:a0:4c:3f:2a:83:36:3c:7f:57:fe:1f:
                    8b:5e:74:74:f9:d7:f2:30:6f:30:4e:70:af:d5:c3:
                    aa:1a:52:a9:64:3e:35:7a:ab:a1:21:ca:25:d8:64:
                    c5:42:37:72:13:e6:a1:cf:ab:a2:a8:b4:92:80:d8:
                    dc:dc:01:d4:cc:c6:7c:53:27:7a:d6:ca:6e:ce:16:
                    fc:71:38:49:f6:89:32:95:c2:38:58:54:85:65:5a:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:26:7A:22:59:3D:CD:F6:58:8B:8E:79:62:75:78:04:73:36:0D
            X509v3 Authority Key Identifier:
                keyid:67:E5:A9:4F:91:91:C4:9A:9C:B7:F9:CC:8C:AA:EF:CC:6E:6C:67:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67E5A94F9191C49A9CB7F9CC8CAAEFCC6E6C676C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/1/323830343a3233633a3a2f33322d3336203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23c::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:03:7c:7b:51:59:10:09:7f:7b:94:11:fc:14:2e:c7:5d:43:
         52:de:af:0e:14:68:74:9c:a5:f3:f0:5d:1e:c7:bc:2c:b7:77:
         ec:45:40:78:de:0e:e8:7a:ff:98:3b:40:e8:c5:52:d8:ca:55:
         f3:da:51:fb:de:a8:e6:3d:84:42:1c:7b:7e:c1:5d:52:b1:b5:
         38:03:1c:21:bc:03:60:85:04:5c:2b:e0:00:c2:88:b9:5e:93:
         21:0b:20:f0:a7:c3:22:5e:c2:a1:96:a2:66:2a:6b:03:43:8c:
         fa:7c:77:3e:8b:90:76:d6:01:3a:f0:40:3b:b2:72:75:46:1e:
         e1:04:1c:d1:09:27:87:22:76:64:cc:7c:f1:cb:bf:b8:3c:64:
         1a:52:9d:b7:fd:09:21:0b:9a:3b:0d:67:e2:6e:b5:22:53:17:
         d6:59:1d:de:fa:c1:f2:37:b3:30:fd:76:76:1e:19:0b:51:a9:
         71:2f:45:cc:54:6b:0a:05:19:14:00:03:6d:46:f9:a3:71:ff:
         46:bf:1a:08:66:d2:68:b2:fc:f0:60:fa:96:de:f8:c9:b6:80:
         a7:e5:e7:dc:dc:f3:03:00:0d:f5:a2:72:0f:aa:79:d1:fd:c5:
         3d:af:c4:d5:f4:0f:fa:2f:d1:fb:8e:54:22:bd:1d:81:7f:38:
         3e:99:db:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:01 2024 by rpki-client on console-fra.rpki-client.org