Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
File:                     323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa (raw, json)
Hash identifier:          PlllJ4cvjZp42Ns+leS2Rk+JEDs9AEGQtgGmi/0Kg5g=
Subject key identifier:   FF:84:4C:97:6D:6D:23:7E:FB:ED:A6:E3:08:B0:E6:5C:63:B0:F8:9B
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       3DC3D08B2B2A62F900E5ED76C9276CC39E813036
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa
Signing time:             Thu 04 Apr 2024 08:08:36 +0000
ROA not before:           Thu 04 Apr 2024 08:03:36 +0000
ROA not after:            Thu 03 Apr 2025 08:08:36 +0000
asID:                     264137
IP address blocks:        2804:2304:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c3:d0:8b:2b:2a:62:f9:00:e5:ed:76:c9:27:6c:c3:9e:81:30:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Apr  4 08:03:36 2024 GMT
            Not After : Apr  3 08:08:36 2025 GMT
        Subject: CN=FF844C976D6D237EFBEDA6E308B0E65C63B0F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:49:1f:cc:57:b1:3b:2a:e6:c5:37:72:59:
                    23:be:20:a8:ed:08:ab:af:80:1d:fa:71:cc:19:7c:
                    e8:d3:0e:84:46:d7:34:3d:34:16:58:18:cc:5c:ae:
                    d5:17:05:c3:35:18:a2:06:69:65:cd:48:9c:81:62:
                    f2:d5:24:61:6d:1f:72:76:49:7c:6a:94:03:80:97:
                    23:ff:f7:da:06:3c:e6:79:f3:31:13:79:af:09:08:
                    91:d3:87:fb:69:7f:a7:b8:81:4c:38:fc:b8:d5:58:
                    0d:c8:11:03:36:b4:0a:93:d9:60:9e:f6:bb:e7:9d:
                    b4:67:e4:bf:28:fc:80:4b:2b:a8:6c:fb:34:9b:93:
                    00:b6:75:6a:ca:53:9e:71:d5:a8:20:68:f7:1b:7e:
                    71:d8:5b:65:c8:63:df:3f:1e:42:79:33:d9:0f:48:
                    8e:8f:4c:a7:1d:0c:3b:ad:15:99:90:74:9f:59:3e:
                    cd:d7:ee:35:b4:6b:f8:52:1c:5f:42:de:e5:c9:85:
                    19:c1:12:32:f9:6a:d6:0f:36:23:c2:4f:7b:65:0f:
                    79:7d:70:8d:74:f3:41:af:8d:4e:7a:47:39:e8:dc:
                    59:dd:a5:2a:e1:ac:4b:dd:93:c8:ba:92:a3:18:12:
                    c6:5f:8e:66:c1:9c:b0:5e:ba:91:ac:9c:a3:60:1e:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:4C:97:6D:6D:23:7E:FB:ED:A6:E3:08:B0:E6:5C:63:B0:F8:9B
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a383030303a3a2f33332d3333203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:84:fa:64:b7:aa:6d:3e:9d:82:c1:ca:47:76:61:66:ce:cb:
         9a:34:d9:d5:4b:88:36:31:f3:e3:1b:c3:45:10:92:1e:13:f9:
         1a:20:e6:50:e6:84:7c:9f:08:fb:7f:7e:51:23:20:7f:4f:fb:
         67:75:21:1d:9f:d9:c6:11:83:b3:e3:09:59:31:c9:d9:de:93:
         da:5d:ba:36:68:de:86:58:9c:1f:21:24:92:3a:c0:79:58:34:
         ef:cd:f3:4d:3a:7a:e1:c2:5b:f4:b6:e6:a7:ab:31:78:c7:b4:
         82:d3:53:26:a5:8c:be:c3:f8:94:0d:4a:68:cf:b4:12:cb:97:
         1b:b5:59:71:29:10:c6:64:54:b8:30:84:75:a2:91:5b:43:02:
         b4:6f:7a:57:b0:e2:fe:a2:97:a8:3e:e3:9b:11:4d:63:5a:a3:
         05:c9:9c:b2:a9:d4:0e:ea:0a:70:2a:2f:47:92:04:a2:66:7e:
         bc:56:de:38:66:18:a3:59:b7:bb:19:82:7b:9e:fc:ff:2d:f2:
         54:99:99:2d:d7:ca:1e:2e:cd:73:17:e4:c3:7d:d6:64:ca:8d:
         c8:ab:31:b5:12:e3:f1:9d:4f:db:d4:3c:45:96:4e:29:a0:0f:
         d1:d0:22:63:34:ec:ce:9a:ee:0c:22:22:1b:47:35:05:89:ba:
         59:e3:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:15 2024 by rpki-client on console-ams.rpki-client.org