Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa
File:                     323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa (raw, json)
Hash identifier:          jATdGq3APM7OkNmKFSjLoOdlwOnSAzMiliQ2d/A/8ZE=
Subject key identifier:   36:75:0C:29:F7:A6:0C:FC:A4:86:60:82:D8:41:5C:71:2D:B1:4E:58
Certificate issuer:       /CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
Certificate serial:       18F8E04EDB7122D381210856E7BACB1A757B9558
Authority key identifier: A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa
Signing time:             Wed 03 Apr 2024 21:35:08 +0000
ROA not before:           Wed 03 Apr 2024 21:30:08 +0000
ROA not after:            Wed 02 Apr 2025 21:35:08 +0000
asID:                     267548
IP address blocks:        2804:4318:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl
                          rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f8:e0:4e:db:71:22:d3:81:21:08:56:e7:ba:cb:1a:75:7b:95:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A45100954B23E22F367B3D28B2C4F896BEB17A
        Validity
            Not Before: Apr  3 21:30:08 2024 GMT
            Not After : Apr  2 21:35:08 2025 GMT
        Subject: CN=36750C29F7A60CFCA4866082D8415C712DB14E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:8b:be:90:32:dc:2a:d8:f8:37:1e:bc:e5:
                    8d:87:82:8e:23:35:56:7e:6a:ca:65:bd:58:66:21:
                    f3:8b:34:b6:91:9c:c5:ec:a3:24:ef:21:15:52:2a:
                    a6:86:64:48:52:9e:da:65:d0:40:aa:f1:1d:56:35:
                    65:d3:bb:68:d6:96:3d:80:77:13:3d:83:47:f1:84:
                    e8:77:8d:66:b6:83:9d:d2:ef:50:9a:0e:aa:e8:41:
                    a9:33:05:57:9a:df:c2:fb:c7:15:4d:6f:01:0b:6a:
                    ed:e6:44:7d:c1:d4:92:db:de:f5:cc:85:04:74:44:
                    6e:f3:43:16:1e:58:93:8c:a4:2f:8c:38:eb:4e:60:
                    a8:2d:f9:1f:cf:9b:a9:bd:3f:c9:d0:5c:73:fb:75:
                    48:3b:1f:85:d7:7b:1d:50:27:af:c5:02:4b:52:0c:
                    cc:ef:5f:e5:12:12:17:0c:09:72:f8:f1:41:d7:cc:
                    4f:8b:ca:b3:07:cb:eb:2c:a3:a1:d0:04:93:60:80:
                    5a:0b:04:8b:15:59:f9:66:b8:78:1d:39:52:31:c5:
                    a1:f8:11:fc:4c:1d:eb:04:5b:e5:ac:9b:6d:1d:c2:
                    d3:dd:2e:bd:39:47:b5:38:dd:06:35:b4:95:fe:5e:
                    8c:e8:3d:7d:37:3f:c8:93:c9:35:28:d4:41:74:ce:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:75:0C:29:F7:A6:0C:FC:A4:86:60:82:D8:41:5C:71:2D:B1:4E:58
            X509v3 Authority Key Identifier:
                keyid:A5:A4:51:00:95:4B:23:E2:2F:36:7B:3D:28:B2:C4:F8:96:BE:B1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A45100954B23E22F367B3D28B2C4F896BEB17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENj9YHJgPQp4adH7iZ68zZKzFq3ZHamTvVu6xFBbqPvE/1/323830343a343331383a383030303a3a2f33332d3333203d3e20323637353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4318:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:02:3f:0c:5e:33:b1:22:66:d5:e5:d8:e8:50:15:da:bf:
         99:24:10:fe:b5:2e:26:13:87:ea:45:8c:38:97:1f:0e:4b:73:
         00:70:e3:46:b1:aa:15:aa:3f:f6:27:f7:9f:6a:11:57:c9:b5:
         2f:46:38:33:f3:1f:16:45:cd:d9:6c:68:cf:d3:d3:b3:6f:69:
         bb:81:ff:d4:06:e8:c5:e0:87:5b:e2:e8:af:1c:6d:63:68:58:
         12:af:82:5e:39:96:dd:05:cd:a3:1f:d6:62:b1:b4:3f:e4:d1:
         e7:43:08:0f:66:be:50:5a:f4:4e:97:e2:2f:ed:99:11:2d:f0:
         68:d2:c0:0d:96:ea:11:d3:a1:d8:f3:68:cb:12:8a:08:d5:cf:
         ee:38:a7:79:48:de:fb:88:0f:75:73:5b:31:96:c4:4f:04:45:
         0a:aa:b0:f5:59:88:ad:31:5b:c2:f5:8d:76:ac:bb:42:ab:47:
         73:b8:54:90:3b:76:da:72:3d:40:48:4a:ac:2e:48:bc:2d:4a:
         ab:75:b2:73:49:b1:8a:63:eb:0b:37:92:0c:81:fb:4f:57:c3:
         87:98:72:3c:14:e2:6a:94:b3:1c:a3:f2:2e:67:0f:0c:d2:99:
         6f:f5:3d:46:fa:54:18:dc:b6:bc:a7:d7:ac:09:b8:a4:5d:45:
         a1:9d:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:25 2024 by rpki-client on console-ams.rpki-client.org