Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
File:                     323830343a343330343a3a2f33322d3332203d3e20323637353433.roa (raw, json)
Hash identifier:          peUUSsfZ3qD5x2c68WeAaUZG2rLmvjr/oLhXWH0NE3Y=
Subject key identifier:   FB:EA:52:62:66:71:F2:EA:33:A6:C4:50:03:97:D3:35:C5:C9:03:09
Certificate issuer:       /CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
Certificate serial:       415930DB55080FFF8B678ED76B3C649E06CA4E45
Authority key identifier: 33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa
Signing time:             Thu 04 Apr 2024 03:59:41 +0000
ROA not before:           Thu 04 Apr 2024 03:54:41 +0000
ROA not after:            Thu 03 Apr 2025 03:59:41 +0000
asID:                     267543
IP address blocks:        2804:4304::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl
                          rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:59:30:db:55:08:0f:ff:8b:67:8e:d7:6b:3c:64:9e:06:ca:4e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B
        Validity
            Not Before: Apr  4 03:54:41 2024 GMT
            Not After : Apr  3 03:59:41 2025 GMT
        Subject: CN=FBEA52626671F2EA33A6C4500397D335C5C90309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:bf:d9:56:0f:5b:32:ad:b4:b1:e5:ae:5e:
                    c0:a6:07:46:e3:ae:d8:f3:6f:3a:b5:8f:6a:5c:b9:
                    c5:81:f3:a5:c9:8e:0d:e2:c8:9c:aa:f7:1e:38:25:
                    57:0d:22:d2:b6:2d:e9:5d:34:10:35:c6:d4:b3:3c:
                    85:e2:c5:35:9f:40:4e:4f:c5:23:52:0d:46:28:6a:
                    8f:5d:47:9c:ca:9c:f6:12:12:95:18:3c:65:d3:98:
                    30:b8:ea:1d:12:f8:f1:8b:91:5f:d4:38:1b:e2:7e:
                    83:22:b2:93:49:6f:f2:02:05:44:4b:03:6c:a6:1c:
                    ce:41:29:b0:93:d9:09:1e:29:6d:49:b4:9c:51:67:
                    1a:65:2d:09:be:fa:dc:0a:24:c1:6a:c1:37:3d:4d:
                    a9:02:bb:58:fb:e6:ff:b8:22:36:83:34:4f:a8:92:
                    b7:f2:05:ce:10:c1:96:6d:6d:af:33:17:db:1d:78:
                    0b:8e:80:71:82:35:ea:34:a0:89:00:99:40:92:1b:
                    4d:7b:5c:f4:20:59:06:61:cb:81:e5:4f:6c:37:e2:
                    d3:bb:89:2a:10:f4:0b:26:db:1b:46:2d:4a:fe:80:
                    92:85:f9:4f:3d:52:5a:31:b5:b7:bc:9e:ad:cc:91:
                    5b:95:d1:28:f1:42:90:59:dc:f9:e7:3f:97:57:f5:
                    c3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EA:52:62:66:71:F2:EA:33:A6:C4:50:03:97:D3:35:C5:C9:03:09
            X509v3 Authority Key Identifier:
                keyid:33:EA:A1:AC:A3:A6:97:8A:EC:2D:2D:F4:D2:9E:B4:B3:59:B3:F6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33EAA1ACA3A6978AEC2D2DF4D29EB4B359B3F69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXXRn5NEM27JgxYpUwzMDzXcsVJXwBweXUWu42SLjiMc/1/323830343a343330343a3a2f33322d3332203d3e20323637353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4304::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:a4:f0:a1:df:72:8f:c3:ae:c4:76:bc:88:7e:e0:40:2b:
         08:9d:03:56:a8:b6:3a:84:3c:e7:80:19:2a:5c:b2:88:6a:c6:
         b0:85:30:c2:e1:bf:cb:6a:a8:41:5f:0e:2b:ab:e5:05:ff:57:
         d8:b2:92:33:39:fc:0a:44:0e:61:80:f9:15:d5:51:02:b9:fb:
         96:e7:96:ad:01:c8:18:4b:e0:e8:b1:dc:89:ff:f2:87:7b:81:
         bb:4c:80:20:28:3c:c6:26:8d:7f:82:35:b7:fe:0a:de:8f:ad:
         a8:88:a6:24:b8:3e:e9:f5:ab:5c:fb:d8:05:b2:a6:bb:6a:be:
         89:96:63:05:4f:0a:ae:52:13:87:ed:ea:c7:45:ab:e8:4b:0a:
         25:20:45:3b:68:ea:eb:70:73:e5:19:65:bd:5a:50:46:ce:44:
         a3:b1:24:5b:4f:3b:1d:9e:63:0f:50:a9:a9:ff:cd:49:65:c4:
         6e:2f:a3:91:83:42:2b:5f:02:6d:81:ad:d3:39:7b:d5:79:33:
         4b:54:6f:fb:d9:84:be:75:b1:98:0b:7c:69:e6:c6:c0:0c:f6:
         16:5e:15:88:55:b0:a8:c8:fa:ac:f0:7b:54:bc:17:e3:10:13:
         4a:0a:8e:be:5e:d8:c1:21:e2:e8:c7:49:7e:ab:5e:97:1d:73:
         a8:99:86:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:35 2024 by rpki-client on console-fra.rpki-client.org