Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
File:                     323830343a343361303a3a2f33322d3335203d3e20323637353830.roa (raw, json)
Hash identifier:          vzjQ23clUGBdn21voOolZO5AzuRTN4GPvxqsprBho3E=
Subject key identifier:   83:5A:09:8E:59:99:80:7C:8E:06:54:C5:87:BA:50:53:43:A4:7F:51
Certificate issuer:       /CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
Certificate serial:       5156351FF175354923627ACE92C590CC11649D17
Authority key identifier: 23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa
Signing time:             Thu 04 Apr 2024 13:58:47 +0000
ROA not before:           Thu 04 Apr 2024 13:53:47 +0000
ROA not after:            Thu 03 Apr 2025 13:58:47 +0000
asID:                     267580
IP address blocks:        2804:43a0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.crl
                          rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:56:35:1f:f1:75:35:49:23:62:7a:ce:92:c5:90:cc:11:64:9d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
        Validity
            Not Before: Apr  4 13:53:47 2024 GMT
            Not After : Apr  3 13:58:47 2025 GMT
        Subject: CN=835A098E5999807C8E0654C587BA505343A47F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:79:b2:f4:d2:88:94:41:e3:5f:06:2f:7e:
                    c0:42:b0:7e:2a:a0:60:fd:ef:1b:5a:1b:2d:07:33:
                    c9:02:51:1e:ea:fc:e6:07:5f:46:98:b3:45:7f:52:
                    65:10:8e:04:9a:70:83:0c:44:2e:7e:6b:95:64:44:
                    6a:c0:a3:b5:75:4b:b1:da:e6:25:27:4c:ef:b7:67:
                    18:bf:58:59:d0:5a:e1:14:64:4c:cf:43:0b:4c:9e:
                    15:93:ec:4c:34:a7:19:34:41:87:b2:ce:89:6d:fd:
                    24:0c:ab:f5:8b:19:bd:44:bf:6a:fa:2a:d9:39:94:
                    ab:bd:56:bc:63:6f:fe:06:95:fa:47:88:a7:c0:b8:
                    04:60:04:09:e7:54:96:eb:fc:1c:e9:41:c6:0b:3e:
                    e2:3f:5b:ac:c5:06:2d:ee:35:49:72:00:99:d9:a9:
                    63:5d:f9:5d:84:96:de:44:76:81:78:bf:91:33:8f:
                    24:a6:59:8a:54:66:47:e0:d9:63:3c:f6:9c:f9:0c:
                    81:b1:95:d9:4d:5d:14:e5:a4:44:7e:d2:de:e1:31:
                    bc:99:0f:74:4b:9c:e1:d7:e0:71:04:48:a6:cd:03:
                    f8:99:29:e3:17:7d:74:91:f8:46:96:2c:22:b4:e8:
                    72:35:65:0e:d6:ae:9d:46:45:7b:7c:c4:5c:08:99:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5A:09:8E:59:99:80:7C:8E:06:54:C5:87:BA:50:53:43:A4:7F:51
            X509v3 Authority Key Identifier:
                keyid:23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/323830343a343361303a3a2f33322d3335203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:da:a0:8c:5c:e7:e8:d2:96:f2:71:a7:42:32:12:f3:44:
         de:6e:6a:f7:22:c1:0d:6a:29:cc:6f:17:04:71:45:6d:71:07:
         dd:3a:43:ae:2e:6d:59:bf:a6:9e:fb:2e:31:77:c6:08:3f:29:
         e1:c8:4b:b6:16:60:2a:90:67:28:84:fd:87:d5:b4:31:11:a0:
         22:67:68:39:1c:d1:46:e7:b5:7e:74:27:ba:c1:fd:8d:96:a4:
         60:9d:4f:fc:8e:97:14:77:2c:42:3c:52:5c:af:4a:46:4c:40:
         1c:7d:35:34:c4:20:ba:c2:8a:a1:5b:4f:42:e8:35:14:22:c8:
         6a:b9:c7:9e:46:ff:e8:45:12:51:95:ff:bd:57:e5:06:bf:1a:
         1e:06:ce:d7:09:81:c7:66:c0:54:b0:48:97:92:7e:ec:f5:ca:
         bc:01:90:d7:fa:f2:4a:17:7a:8d:2a:0d:34:bf:ae:d0:65:4d:
         d1:d5:0e:b3:87:40:3e:0c:e5:be:a5:de:f0:d9:95:b7:cf:76:
         04:e8:23:b9:81:06:f3:82:fc:7f:1a:2d:59:1d:68:e1:c7:5b:
         18:d9:48:69:41:35:7a:7c:d1:8f:78:12:24:1c:9d:3e:36:da:
         2b:7d:6c:df:a6:64:b4:82:77:71:a9:6a:5c:5a:d3:4a:5e:21:
         10:45:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:48 2024 by rpki-client on console-ams.rpki-client.org