Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/323830343a343535383a3a2f33322d3332203d3e20323636393230.roa
File:                     323830343a343535383a3a2f33322d3332203d3e20323636393230.roa (raw, json)
Hash identifier:          4zw1f0YeaUj9tx7we5lfT0fCGJpxAfif98dvVSCduWg=
Subject key identifier:   23:14:DA:3B:F6:D3:EE:F6:73:BF:A0:CE:A6:E7:0B:0D:CD:B3:08:86
Certificate issuer:       /CN=B7A663920AEF637DF79AA0A99AF488170644C538
Certificate serial:       6D5AA6AAF3CD35CD82A430BFEDC639A80887A993
Authority key identifier: B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/323830343a343535383a3a2f33322d3332203d3e20323636393230.roa
Signing time:             Thu 04 Apr 2024 21:15:11 +0000
ROA not before:           Thu 04 Apr 2024 21:10:11 +0000
ROA not after:            Thu 03 Apr 2025 21:15:11 +0000
asID:                     266920
IP address blocks:        2804:4558::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl
                          rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5a:a6:aa:f3:cd:35:cd:82:a4:30:bf:ed:c6:39:a8:08:87:a9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7A663920AEF637DF79AA0A99AF488170644C538
        Validity
            Not Before: Apr  4 21:10:11 2024 GMT
            Not After : Apr  3 21:15:11 2025 GMT
        Subject: CN=2314DA3BF6D3EEF673BFA0CEA6E70B0DCDB30886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:79:03:77:f4:a9:31:ae:0e:b2:8e:10:ba:
                    01:8f:ef:32:f0:d0:f2:f7:61:ac:6f:b1:76:2e:e9:
                    2c:63:61:9e:71:dd:ee:df:3e:90:18:3a:5e:66:e0:
                    f3:10:c2:ba:40:6b:f9:51:b8:a6:e7:f4:b4:16:e5:
                    a8:81:88:1e:9e:7b:10:3c:8b:ad:6f:2c:f0:42:c6:
                    49:f0:fe:2c:15:2a:2c:98:b0:d9:ba:69:da:a6:f1:
                    54:f1:38:5e:6b:c1:d1:bb:1c:71:0f:75:44:4e:84:
                    df:fd:c6:8e:57:73:59:73:18:3d:f1:07:08:0c:1b:
                    1a:db:60:e1:16:1a:0e:a3:f2:7c:8f:44:db:94:4f:
                    b3:de:5b:19:9b:5f:c4:ff:40:76:a9:25:e1:f4:de:
                    06:ce:59:b2:1f:39:9a:8d:67:6b:10:29:94:4f:e5:
                    c6:c4:bf:c0:5c:bc:f2:46:44:fb:cb:a9:ad:a2:4b:
                    a4:0f:b3:94:6f:90:7e:ab:bb:39:09:9c:46:f4:7b:
                    af:59:53:97:c9:4a:34:ee:3c:81:53:77:97:74:37:
                    8a:0d:6b:46:97:02:7b:b5:50:7c:11:1f:0d:e9:29:
                    d8:3d:aa:d1:40:d1:ed:f3:f0:14:25:cd:b7:03:d1:
                    ce:5c:5d:4f:39:10:33:0b:0e:3f:07:57:55:a0:4d:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:DA:3B:F6:D3:EE:F6:73:BF:A0:CE:A6:E7:0B:0D:CD:B3:08:86
            X509v3 Authority Key Identifier:
                keyid:B7:A6:63:92:0A:EF:63:7D:F7:9A:A0:A9:9A:F4:88:17:06:44:C5:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/B7A663920AEF637DF79AA0A99AF488170644C538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7A663920AEF637DF79AA0A99AF488170644C538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhNYWi3ZXZqPErdRF8ZDXEZTyshGA7CJDTrRZ26AmaCL/2/323830343a343535383a3a2f33322d3332203d3e20323636393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4558::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:09:2d:c8:0f:fe:72:ff:9c:2e:e1:8f:51:1f:b4:92:8b:2c:
         0c:25:3d:38:e8:d0:f4:a7:6c:6d:51:5b:e3:9b:36:0b:8d:9a:
         c3:18:d9:d7:36:dc:40:b9:9e:7b:1c:50:2e:7d:76:22:36:80:
         5c:5e:59:73:27:35:c4:6a:2c:94:67:73:41:a6:2e:4c:72:4c:
         ef:59:62:5f:2e:e2:14:ba:6f:26:15:78:61:1d:05:da:0e:48:
         0a:fe:bf:05:35:56:4b:7b:06:5b:86:41:22:47:ac:21:34:07:
         e5:92:dc:33:e2:ce:02:96:f0:8c:12:44:00:0a:6d:41:d7:84:
         20:82:ee:65:f2:b2:1a:ed:f4:6a:fe:6a:9c:09:5d:41:6b:19:
         30:72:54:f8:3d:45:2e:5a:cd:77:2d:ed:9a:8e:d4:e5:5d:74:
         40:86:64:cb:a2:6c:12:8b:50:05:87:4d:c6:d4:ab:d9:48:a6:
         01:81:7b:96:06:9c:cf:b7:60:c0:b1:aa:92:50:37:84:f2:49:
         af:0e:d7:23:ab:17:31:aa:00:2a:44:3f:eb:4b:0a:ff:7d:f5:
         4a:a5:f6:ae:b7:fe:81:30:1e:1c:93:e5:df:ed:1c:f3:15:0c:
         4f:32:e0:78:de:9f:03:39:2d:3a:7c:96:ca:96:97:ac:9c:6e:
         9e:e6:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:12 2024 by rpki-client on console-ams.rpki-client.org