Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
File:                     323830343a353963633a3a2f33332d3333203d3e20323638373236.roa (raw, json)
Hash identifier:          hfnsjuet4mXZQTTC8He/piHp7kMC5wWVlqoNLoGfEoA=
Subject key identifier:   44:2E:B6:9B:4D:4F:5F:61:4C:AA:2E:0E:7C:CA:F0:F8:97:8A:87:C6
Certificate issuer:       /CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
Certificate serial:       6853BCE765165FA95F9F5F52F35D5DC01EBD8BAC
Authority key identifier: 16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa
Signing time:             Thu 04 Apr 2024 16:02:01 +0000
ROA not before:           Thu 04 Apr 2024 15:57:01 +0000
ROA not after:            Thu 03 Apr 2025 16:02:01 +0000
asID:                     268726
IP address blocks:        2804:59cc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl
                          rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 21:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:53:bc:e7:65:16:5f:a9:5f:9f:5f:52:f3:5d:5d:c0:1e:bd:8b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1673CB8E8029AB9119773FC6F638B9264FDF3364
        Validity
            Not Before: Apr  4 15:57:01 2024 GMT
            Not After : Apr  3 16:02:01 2025 GMT
        Subject: CN=442EB69B4D4F5F614CAA2E0E7CCAF0F8978A87C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:38:cb:a6:47:91:4e:f2:d6:35:d0:d6:53:
                    e1:54:14:53:86:39:b0:d7:ff:f2:40:f2:1f:4c:d0:
                    b2:c7:8e:9b:bc:38:a8:e4:58:d3:50:71:bf:3c:e9:
                    7d:b7:d5:24:87:bb:13:f8:44:b7:2f:a0:3c:23:3a:
                    0a:9e:f0:56:20:27:29:57:2e:6e:8b:fd:dc:9e:f8:
                    98:a5:44:8d:86:db:b5:eb:04:39:b1:74:e8:0e:42:
                    46:4d:43:9e:9e:a6:24:2e:73:08:32:c8:4b:ca:e5:
                    f5:42:3d:1a:9b:64:52:b9:00:e8:83:ed:3a:07:75:
                    af:6c:01:a7:f1:3f:5b:ba:6c:06:86:35:f5:d8:13:
                    99:12:8a:95:a3:d7:37:89:e9:88:cb:ab:2f:c5:b2:
                    b9:d4:ba:0f:33:8e:4a:42:89:e7:4f:b5:48:3e:6f:
                    db:94:37:55:e6:4f:18:b0:7b:da:6f:db:42:18:d6:
                    7a:ae:60:02:0b:0c:7d:68:e4:d3:e8:b7:17:fc:4b:
                    e6:8f:8a:ba:21:18:09:2b:f4:f2:15:61:c6:81:7e:
                    ff:67:ec:0c:5b:b6:fc:7d:5a:dc:4d:be:2d:a2:d7:
                    c5:0a:ef:04:76:0d:35:b9:7f:a2:2e:58:89:b1:d6:
                    82:64:05:c6:f7:72:6f:0d:c0:be:3d:63:0d:97:d7:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:B6:9B:4D:4F:5F:61:4C:AA:2E:0E:7C:CA:F0:F8:97:8A:87:C6
            X509v3 Authority Key Identifier:
                keyid:16:73:CB:8E:80:29:AB:91:19:77:3F:C6:F6:38:B9:26:4F:DF:33:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1673CB8E8029AB9119773FC6F638B9264FDF3364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/1/323830343a353963633a3a2f33332d3333203d3e20323638373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         cd:f8:97:62:27:f4:b1:37:94:ca:7d:ae:0b:f3:35:6e:fb:6d:
         50:99:ae:d9:ae:cd:8e:46:46:60:f3:96:3e:08:cf:da:13:08:
         2e:38:ec:2e:b4:1f:8c:ed:e7:b1:f7:20:3f:0a:88:e7:78:28:
         db:a8:18:96:f3:04:db:c0:24:34:7c:5e:46:d8:29:a9:e4:82:
         6d:1a:95:b8:11:28:09:28:6a:4b:c2:3d:01:cd:94:e7:5b:53:
         36:e1:2d:95:95:47:35:50:41:17:e8:67:03:b4:b3:7a:2f:b2:
         3d:e4:7e:74:8a:dc:29:b2:9a:92:51:01:6a:2a:0a:b8:72:77:
         43:48:cf:ca:73:8d:1c:26:ce:98:a6:04:47:bf:cd:34:d1:0c:
         50:d3:ce:d3:7b:73:71:cd:99:7a:c5:74:d1:5a:dd:2e:45:f6:
         0e:39:4c:82:9a:8f:69:71:61:2e:e5:b9:c1:cf:ca:5a:05:b4:
         49:4e:52:2e:d5:87:31:31:fa:4b:b3:e6:76:00:2f:51:ec:27:
         d8:74:0f:ae:0f:4f:d7:92:87:1e:c6:79:11:3b:fd:05:62:de:
         c5:7c:f7:72:09:e3:45:ea:73:db:4b:15:8c:82:9c:f7:27:b0:
         04:a7:58:b4:29:8f:e1:d1:58:b9:1d:d0:d0:7e:30:48:a8:a9:
         3f:63:f6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:50:23 2024 by rpki-client on console-ams.rpki-client.org