Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa
File:                     323830343a333137383a3a2f33332d3333203d3e20323635303137.roa (raw, json)
Hash identifier:          LDx3OpWUekzONUUDQ+Feb8csy1di0PslmFYUIvo+SHc=
Subject key identifier:   FF:E6:80:2D:C3:47:F1:BC:F8:03:AD:45:3E:16:43:31:A5:D5:0F:19
Certificate issuer:       /CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
Certificate serial:       64982252D87AAC7C4F28489DF91544D6807C21F6
Authority key identifier: DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa
Signing time:             Tue 12 Nov 2024 14:14:38 +0000
ROA not before:           Tue 12 Nov 2024 14:09:38 +0000
ROA not after:            Tue 11 Nov 2025 14:14:38 +0000
asID:                     265017
IP address blocks:        2804:3178::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl
                          rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:98:22:52:d8:7a:ac:7c:4f:28:48:9d:f9:15:44:d6:80:7c:21:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC222A62D59E22735410EC6F4D5BD74D575FAD95
        Validity
            Not Before: Nov 12 14:09:38 2024 GMT
            Not After : Nov 11 14:14:38 2025 GMT
        Subject: CN=FFE6802DC347F1BCF803AD453E164331A5D50F19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:3a:2a:2a:fd:f0:1a:cc:d6:20:66:64:6d:
                    9b:8b:ec:ee:50:10:4b:19:6c:43:1c:fd:e4:f3:74:
                    1c:0a:ab:31:06:32:bb:4c:2b:63:62:4b:ce:ff:be:
                    58:07:47:bb:20:5e:44:4d:9b:aa:eb:ff:2c:a6:c7:
                    a2:37:94:8e:e0:f2:7d:03:1f:44:1c:f3:ff:54:b2:
                    33:0d:b6:51:51:02:7e:5e:f9:84:39:4e:d0:7c:df:
                    56:9d:14:75:02:99:32:ba:a1:9c:bb:0b:f6:10:d7:
                    30:f4:cc:d1:c8:33:12:d2:14:9f:b4:6b:de:ca:09:
                    1a:b7:a5:3e:03:39:21:40:a0:f6:80:ce:85:22:5d:
                    7a:e5:8d:22:39:20:64:47:d7:31:5d:b0:0e:7e:d0:
                    a3:da:11:f8:37:ae:90:f5:e3:12:98:c4:b0:f1:d2:
                    b5:0e:5d:74:ea:aa:a2:b9:09:f6:6b:cb:ff:64:b1:
                    1b:47:59:98:bf:ae:68:48:6a:88:27:2a:cc:6b:1d:
                    4f:3d:bc:5a:f2:9f:83:13:47:6d:9a:ff:a5:40:6d:
                    b3:13:34:48:91:b1:de:b9:00:5a:e4:9d:b8:a6:43:
                    0e:16:f4:0b:be:40:28:84:8a:78:11:f8:b4:8b:1b:
                    40:64:80:02:6a:a7:9e:b7:7a:5c:2b:d6:92:29:f8:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E6:80:2D:C3:47:F1:BC:F8:03:AD:45:3E:16:43:31:A5:D5:0F:19
            X509v3 Authority Key Identifier:
                keyid:DC:22:2A:62:D5:9E:22:73:54:10:EC:6F:4D:5B:D7:4D:57:5F:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/DC222A62D59E22735410EC6F4D5BD74D575FAD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC222A62D59E22735410EC6F4D5BD74D575FAD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/0/323830343a333137383a3a2f33332d3333203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3178::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:71:7f:53:c5:5a:19:e1:44:94:93:9d:fa:aa:14:93:f8:aa:
         c2:22:95:dc:14:2c:7b:3f:16:4f:71:c3:bb:e3:37:c8:aa:e9:
         6f:7c:05:33:97:0a:48:f5:85:13:c2:84:91:22:80:85:0a:77:
         10:4b:00:25:67:ca:1b:49:57:94:67:49:bd:0d:29:ed:1c:2f:
         0e:e6:1b:a7:e6:ca:fe:d0:8f:5c:95:f7:b5:9d:ea:86:d9:4c:
         15:9b:40:01:87:b1:02:1d:63:a0:1f:e6:1f:4d:a3:9a:3d:59:
         c9:1d:53:97:20:a8:49:47:6f:94:c8:ab:c1:d6:b8:e7:a1:72:
         fe:94:07:95:4c:f9:97:1a:87:7f:3d:22:94:d1:76:32:b9:db:
         18:65:4c:aa:86:54:dd:66:fe:ba:b6:f8:b0:c9:54:ee:e1:6e:
         08:2d:12:42:7b:6d:35:a9:47:38:db:d8:31:96:cf:08:ac:22:
         91:1a:18:88:ab:a6:e7:09:5e:3b:57:03:b0:d0:b7:c8:f5:f2:
         a0:ee:1e:38:26:df:e5:30:ec:84:30:27:f0:1e:c3:5c:5f:21:
         60:29:30:9f:25:28:c7:06:83:3d:e7:13:4e:39:9b:af:6c:d2:
         1f:11:8f:3a:cf:cb:d3:ab:25:3c:85:86:67:48:37:8f:9e:ce:
         f6:e0:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:17 2024 by rpki-client on console-ams.rpki-client.org