Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa
File:                     323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa (raw, json)
Hash identifier:          BImaNmq9aOaNgppY1ppvYXLTEvgw2Cs19zRiQ2FHLVA=
Subject key identifier:   BC:15:B4:24:08:64:5B:29:F6:4A:3B:8F:05:3B:4E:DD:CE:A8:B9:68
Certificate issuer:       /CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
Certificate serial:       60B1521D99E909BB5F2984BE26DCA824DA2C1675
Authority key identifier: F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa
Signing time:             Mon 08 Apr 2024 16:22:38 +0000
ROA not before:           Mon 08 Apr 2024 16:17:38 +0000
ROA not after:            Mon 07 Apr 2025 16:22:38 +0000
asID:                     266952
IP address blocks:        2804:45d4:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl
                          rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b1:52:1d:99:e9:09:bb:5f:29:84:be:26:dc:a8:24:da:2c:16:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8017B5E805C4A715B0DA978F817ABB4B74EEB52
        Validity
            Not Before: Apr  8 16:17:38 2024 GMT
            Not After : Apr  7 16:22:38 2025 GMT
        Subject: CN=BC15B42408645B29F64A3B8F053B4EDDCEA8B968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:21:d3:5e:9f:6e:3c:a4:ca:d7:8d:a4:26:
                    cc:39:6e:5b:37:54:7a:63:b9:15:31:e0:b8:91:da:
                    93:b6:35:59:d7:80:f9:84:dd:13:47:17:d3:53:d4:
                    f9:39:36:2c:55:83:2c:a7:21:70:14:52:7e:bf:f7:
                    59:82:20:ba:d4:84:2e:57:69:7c:23:c1:8e:39:71:
                    34:1f:1f:b0:f0:2d:28:ba:2a:56:50:3d:16:38:1c:
                    e6:39:76:c8:4a:35:d2:ab:05:8d:51:2b:5e:4c:9f:
                    a1:06:f8:89:e4:77:4f:f3:1c:dc:27:2b:1b:97:32:
                    9f:af:36:e9:60:b7:9b:b9:f3:ec:9d:de:fa:3b:68:
                    06:fe:d6:14:7d:52:80:08:4b:c4:86:a0:ae:d9:5e:
                    42:96:73:45:41:8e:f9:e1:5a:7b:b0:0f:21:ea:e4:
                    7c:a5:a0:e0:11:30:e4:ff:e6:a9:05:24:fa:67:23:
                    31:23:fe:c4:d4:69:74:b5:6b:f0:2f:c3:61:5c:f9:
                    0b:ef:7f:f9:d8:06:c4:2b:9a:0a:61:d4:e0:66:39:
                    40:3c:7b:e3:62:cd:af:14:da:1a:2e:39:01:77:22:
                    cf:b6:b7:44:24:63:58:6b:ef:af:76:3e:b1:58:a1:
                    31:45:88:7e:4d:0a:08:2d:1b:bb:3c:0a:cd:e0:25:
                    60:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:15:B4:24:08:64:5B:29:F6:4A:3B:8F:05:3B:4E:DD:CE:A8:B9:68
            X509v3 Authority Key Identifier:
                keyid:F8:01:7B:5E:80:5C:4A:71:5B:0D:A9:78:F8:17:AB:B4:B7:4E:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8017B5E805C4A715B0DA978F817ABB4B74EEB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg2TSwtTn4giCfsQ8JZWFSDd4MZsq564rVFCftmPB4cT/0/323830343a343564343a383030303a3a2f33332d3333203d3e20323636393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:45d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:b5:24:67:ba:67:18:5c:a6:f7:fd:a0:2f:98:10:16:59:2a:
         a5:7c:c8:6f:5b:2a:5b:8a:3d:8c:eb:c8:3f:e7:fc:16:70:ff:
         c3:70:42:7f:56:dd:c1:c7:4f:e6:1b:18:6a:20:38:44:8b:5a:
         7b:2d:2c:15:37:cc:75:7e:25:ba:20:23:b4:47:57:13:c0:09:
         66:3e:7a:e7:b0:51:64:02:5b:d0:0a:71:55:d5:09:31:cf:b7:
         c2:2a:e7:af:32:ec:38:bd:c4:96:35:8e:34:2d:38:fa:5e:31:
         28:85:5d:77:e9:9b:b2:25:b4:ec:d8:b6:66:4d:87:ea:4d:3c:
         ad:38:7f:47:53:ce:be:7e:d1:51:74:66:ef:cb:81:62:87:05:
         2e:e6:e1:7e:fa:8e:1a:b4:a4:42:e6:d7:a7:07:2a:6b:ca:e2:
         9a:6e:d4:62:0b:23:c6:e9:46:c8:26:a4:d7:7e:a5:5c:a3:dd:
         66:17:ff:c7:00:90:13:24:f3:36:7d:7d:9a:1a:49:95:93:5a:
         53:ab:31:64:41:10:78:73:f7:47:8b:9e:7e:67:4c:84:8c:0e:
         2c:ff:18:c1:4d:d4:f4:ba:61:36:44:bb:67:5f:bf:50:32:29:
         39:48:85:f2:dc:97:b3:07:49:10:60:3a:2d:88:b3:a6:2c:0f:
         bd:2d:9e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:44 2024 by rpki-client on console-ams.rpki-client.org