Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
File:                     323830343a323439633a3a2f33322d3438203d3e20323634323333.roa (raw, json)
Hash identifier:          b3JTWQUSQE1/rbQ1eeqm5HLAiFF9LKywTMbbIJCtFss=
Subject key identifier:   88:87:7D:DF:09:51:C9:25:BA:3F:C8:9E:59:F2:53:85:31:48:AB:5C
Certificate issuer:       /CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
Certificate serial:       558A96066721BFDB4BA40356617D7EA6E2B1CD86
Authority key identifier: 2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa
Signing time:             Thu 04 Apr 2024 15:27:03 +0000
ROA not before:           Thu 04 Apr 2024 15:22:03 +0000
ROA not after:            Thu 03 Apr 2025 15:27:03 +0000
asID:                     264233
IP address blocks:        2804:249c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl
                          rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8a:96:06:67:21:bf:db:4b:a4:03:56:61:7d:7e:a6:e2:b1:cd:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D59905C3FCA5BDA34D7101B088D80451D026C47
        Validity
            Not Before: Apr  4 15:22:03 2024 GMT
            Not After : Apr  3 15:27:03 2025 GMT
        Subject: CN=88877DDF0951C925BA3FC89E59F253853148AB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:69:99:52:af:37:e4:dd:b9:5f:43:a4:96:
                    19:94:a4:bf:c5:c8:9b:e6:75:65:85:de:17:20:6b:
                    20:e0:eb:0e:c0:39:ab:9c:29:b2:5c:29:b3:6f:38:
                    c3:9c:60:a2:72:5b:49:cc:a0:4b:e5:67:70:b3:eb:
                    ab:9d:c4:a0:a3:6e:4e:51:e6:7f:40:50:a7:05:94:
                    0e:79:2e:11:69:00:3c:10:5f:d7:43:25:af:b1:63:
                    48:f1:c7:29:cb:5e:dd:87:85:e4:43:83:d8:b5:24:
                    2e:e0:21:75:d7:f7:da:85:07:b6:d2:99:c1:0c:59:
                    ef:08:7a:6a:5e:31:73:0d:8a:16:98:0d:fc:47:fd:
                    42:c4:5f:a9:2c:7b:92:89:4a:0e:fe:d3:3e:fd:15:
                    0b:80:0d:4d:4f:6b:1f:93:26:59:af:be:47:91:6d:
                    25:e6:dd:10:8b:8e:8a:67:ae:60:f2:d5:36:a9:3e:
                    fc:43:f7:b1:0d:c1:1e:03:f8:69:38:fc:34:7b:f0:
                    13:6a:5a:ee:4f:00:37:57:01:e3:40:3c:94:16:f8:
                    0c:ca:45:4e:ba:df:85:f9:45:e4:16:f6:fe:45:e6:
                    7f:af:d6:79:46:9e:db:64:57:11:a5:97:57:b2:5d:
                    25:05:19:e2:76:d4:58:3e:b9:93:15:fa:14:0d:50:
                    3c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:87:7D:DF:09:51:C9:25:BA:3F:C8:9E:59:F2:53:85:31:48:AB:5C
            X509v3 Authority Key Identifier:
                keyid:2D:59:90:5C:3F:CA:5B:DA:34:D7:10:1B:08:8D:80:45:1D:02:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D59905C3FCA5BDA34D7101B088D80451D026C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/1/323830343a323439633a3a2f33322d3438203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:249c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:68:0a:98:26:1f:cd:89:58:3d:d4:71:1d:01:7f:f4:17:a0:
         bc:99:c2:a8:ba:b9:cd:a3:b1:24:d5:c9:2d:59:25:ec:88:d5:
         72:b4:82:d8:6b:3b:e6:c4:cc:8a:31:98:df:a7:6d:e1:e8:83:
         12:e3:7a:a8:e6:f0:37:12:69:5b:5c:76:1a:ad:9f:07:78:cf:
         48:fb:18:09:75:59:67:5c:d1:13:2f:f7:2e:c5:a6:a4:3b:69:
         99:f4:71:b5:3a:74:33:a9:57:a8:0f:82:84:b2:13:c2:ea:01:
         d3:f8:b3:ab:57:f5:5e:89:f3:d1:79:a5:a4:a0:9a:3d:e9:9a:
         63:69:ec:33:4d:79:dc:f9:46:fc:47:77:df:49:c2:ff:f1:1c:
         22:d1:fd:db:68:58:a7:ca:8b:3a:27:a0:65:d9:db:bb:5c:6b:
         99:14:d3:94:33:39:7c:85:e1:4e:7d:6a:57:65:5e:4c:a0:73:
         dd:c9:35:27:48:7b:2f:60:f2:ba:d7:f5:f5:05:fa:1f:7c:f3:
         32:65:74:0f:f3:e4:82:64:ff:8e:d5:4d:1a:54:78:65:57:b1:
         0e:5f:5f:58:1a:02:71:21:a6:62:4c:73:f5:96:ce:93:1a:33:
         6d:2a:ef:d5:48:28:5b:c1:23:6a:ff:37:2a:c1:05:e3:8e:4e:
         b1:3c:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:57 2024 by rpki-client on console-fra.rpki-client.org