Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
File:                     323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa (raw, json)
Hash identifier:          ZK/YkOvtVoK7gWyepJYBmoXeRB/LXpj9BrkkQ/rmrIk=
Subject key identifier:   D2:C9:E7:E3:39:5B:EC:2D:AE:E3:40:29:B0:82:40:0C:DA:B1:C7:7F
Certificate issuer:       /CN=2431B91B2498F01C25C009C9345EE622B155100B
Certificate serial:       72B1B475639F1197988A76A6DFEC0D019EE5F62F
Authority key identifier: 24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa
Signing time:             Wed 30 Oct 2024 15:02:54 +0000
ROA not before:           Wed 30 Oct 2024 14:57:54 +0000
ROA not after:            Wed 29 Oct 2025 15:02:54 +0000
asID:                     269416
IP address blocks:        2804:6440:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl
                          rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b1:b4:75:63:9f:11:97:98:8a:76:a6:df:ec:0d:01:9e:e5:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2431B91B2498F01C25C009C9345EE622B155100B
        Validity
            Not Before: Oct 30 14:57:54 2024 GMT
            Not After : Oct 29 15:02:54 2025 GMT
        Subject: CN=D2C9E7E3395BEC2DAEE34029B082400CDAB1C77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:aa:d9:2c:00:35:22:86:90:65:ac:a4:2d:
                    8b:c5:23:29:27:89:63:c7:ba:ad:14:79:28:0b:4f:
                    22:74:fe:c5:f2:fe:44:ea:b1:59:53:dd:ad:71:d1:
                    68:24:7c:17:74:bd:75:6a:0a:22:96:51:af:aa:11:
                    13:0e:aa:42:00:7f:e5:87:e3:f0:ae:b9:89:ad:0a:
                    22:2c:a0:3b:53:54:77:85:ef:b5:b3:3b:13:7e:20:
                    17:b8:c4:24:3e:93:a5:85:35:3b:4d:96:d8:bd:93:
                    ca:89:44:19:0f:36:4e:92:e8:eb:12:0c:9d:bf:95:
                    7c:a2:2c:26:85:76:e0:f3:88:09:45:9b:ca:6c:78:
                    04:b3:0f:9b:01:c5:1c:16:31:1b:ea:59:99:5c:b7:
                    36:74:f6:61:53:85:37:98:6c:2c:b7:4e:f7:b6:5f:
                    d8:86:99:ed:89:8b:b9:a4:ca:63:24:66:61:66:61:
                    d5:93:f6:7b:e8:18:9a:ca:58:74:b3:39:af:86:a0:
                    a2:72:6a:8f:19:28:aa:1b:a1:8e:d7:b8:40:f7:0b:
                    f9:45:20:ef:97:af:e0:81:34:dc:d2:0b:6c:dd:5d:
                    c8:e6:90:c1:29:0e:c4:2e:93:45:96:96:dc:1b:4b:
                    95:74:e8:aa:3c:08:10:36:35:06:e1:aa:e0:d5:0c:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C9:E7:E3:39:5B:EC:2D:AE:E3:40:29:B0:82:40:0C:DA:B1:C7:7F
            X509v3 Authority Key Identifier:
                keyid:24:31:B9:1B:24:98:F0:1C:25:C0:09:C9:34:5E:E6:22:B1:55:10:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/2431B91B2498F01C25C009C9345EE622B155100B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2431B91B2498F01C25C009C9345EE622B155100B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhUX35ZMUCbRhYuECLQuQiyiqCX4z9LvRirJw3bBUwyX/0/323830343a363434303a383030303a3a2f33332d3333203d3e20323639343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6440:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:24:36:c9:61:6b:78:0d:2b:4c:ee:1f:a6:19:d1:b0:72:
         4e:fc:33:d1:ee:43:fc:3f:d3:40:26:0b:34:98:e2:25:2a:15:
         05:46:24:01:e3:61:14:39:6b:20:7f:fd:20:bb:7d:2c:8b:19:
         27:c1:5f:d8:62:00:69:53:76:bc:af:82:47:21:84:b4:32:26:
         5f:1c:95:c6:45:74:a3:76:df:ab:ea:18:1c:7d:b4:04:4c:99:
         11:f4:00:96:06:42:4a:b2:dc:9f:4e:9a:59:29:e8:5c:a1:e0:
         e2:cd:3c:81:4d:a3:ae:5b:65:ac:dc:2b:23:d6:5a:8f:ff:cc:
         86:46:a0:54:63:57:80:6c:92:2b:65:a5:cd:8c:a7:7a:b8:c1:
         2e:62:d4:9f:82:03:c6:1d:29:19:9b:fb:e5:2a:87:95:d0:18:
         07:bd:19:78:a1:f8:d0:04:56:f9:da:2c:ca:11:48:65:ac:eb:
         68:7d:e3:7b:7e:d3:b5:8b:88:ee:75:bf:b5:ab:e5:ff:37:26:
         23:b1:a4:f0:35:c3:14:b1:0f:0c:82:a9:a7:b5:74:47:15:b2:
         58:24:d2:65:a4:a0:30:36:1a:0b:d4:73:37:55:dc:56:b0:90:
         da:5c:36:a7:5e:69:f4:a9:40:97:b0:c0:8f:40:35:b6:87:9e:
         06:69:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:39 2024 by rpki-client on console-ams.rpki-client.org