Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa
File:                     323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa (raw, json)
Hash identifier:          UXn1Jgww7yUlM6JJHoNemTP+pfmB4em8WtIMCR0B1qA=
Subject key identifier:   8D:4B:56:EE:E0:46:08:68:6F:52:07:3A:3E:FA:5A:C3:5B:6B:13:79
Certificate issuer:       /CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
Certificate serial:       5D05F4B6507DE97CD18ACDD20C736EA99029F0A9
Authority key identifier: 41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa
Signing time:             Thu 04 Apr 2024 00:02:59 +0000
ROA not before:           Wed 03 Apr 2024 23:57:59 +0000
ROA not after:            Thu 03 Apr 2025 00:02:59 +0000
asID:                     263144
IP address blocks:        2804:1768:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl
                          rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:f4:b6:50:7d:e9:7c:d1:8a:cd:d2:0c:73:6e:a9:90:29:f0:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F9151ED2649F5878D0A6F01EEF968AB545A303
        Validity
            Not Before: Apr  3 23:57:59 2024 GMT
            Not After : Apr  3 00:02:59 2025 GMT
        Subject: CN=8D4B56EEE04608686F52073A3EFA5AC35B6B1379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:1b:1a:70:6d:3c:a1:b0:bb:d9:6a:b3:06:
                    f9:ea:92:4e:25:56:2b:35:e4:48:87:eb:34:66:36:
                    ef:9e:4d:c8:01:c4:51:60:42:b5:01:e8:9e:94:f7:
                    60:2c:5f:35:73:07:92:12:65:2e:10:44:2f:ab:90:
                    bb:39:ca:12:53:cc:0f:dd:c3:1c:49:75:28:45:fb:
                    15:f0:54:dd:f8:4d:8d:0c:48:8b:d4:7a:4a:dd:69:
                    24:e5:af:be:6a:51:84:2f:12:3c:45:82:69:3e:00:
                    de:c6:b0:ba:2f:cd:f0:05:97:33:33:86:01:2b:71:
                    0e:c3:1d:34:c5:55:8c:be:10:3a:b7:19:4d:34:4a:
                    02:2a:79:9d:df:04:f8:e9:6b:90:01:00:02:16:ba:
                    cb:6e:ae:1a:58:ea:fe:2e:ea:4e:94:c8:d4:4b:17:
                    2a:5a:93:43:2f:74:63:75:4c:a5:97:5f:66:ef:01:
                    26:01:32:e4:87:4d:84:c2:7f:af:94:40:a8:7d:b4:
                    ba:e3:ab:23:8c:9f:55:08:d2:93:30:3f:b7:33:ad:
                    87:b2:6f:fe:f3:a5:7f:d5:fe:9f:6e:14:1c:2f:8a:
                    7e:81:6d:b7:f5:da:1b:97:28:db:a6:ee:1b:5a:4e:
                    32:b9:4e:34:86:34:2e:d8:88:b8:a6:70:68:df:89:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4B:56:EE:E0:46:08:68:6F:52:07:3A:3E:FA:5A:C3:5B:6B:13:79
            X509v3 Authority Key Identifier:
                keyid:41:F9:15:1E:D2:64:9F:58:78:D0:A6:F0:1E:EF:96:8A:B5:45:A3:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41F9151ED2649F5878D0A6F01EEF968AB545A303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErR1SBgMX1CvzEX1iiQs33ySdndB23UGuooUDrC6wNQb/1/323830343a313736383a383030303a3a2f33332d3333203d3e20323633313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1768:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:69:f1:2f:e0:9b:9f:33:38:e8:de:c8:3c:2c:57:03:8c:e6:
         97:bf:46:bb:5b:0d:13:f2:b2:8d:23:52:9e:05:db:4a:09:8b:
         33:04:63:21:03:0e:41:36:19:64:fb:b2:c6:0a:2a:a9:bb:66:
         be:6e:5b:70:ed:55:06:8b:24:6c:46:6c:05:64:94:c4:2f:eb:
         02:d3:ff:87:cf:7c:74:4a:b1:67:f3:42:ee:8c:f3:4e:2c:20:
         de:05:2d:56:14:15:8e:bd:df:bf:84:2b:02:ff:e5:e3:cc:33:
         56:36:20:6a:22:4f:10:20:aa:4f:52:da:bd:ae:56:09:d7:0d:
         46:8f:b2:8a:0c:a8:39:0f:2b:b1:0e:8b:7a:92:50:e3:15:60:
         91:75:7c:55:8e:45:45:5e:b5:05:ef:fb:2f:2a:cb:6b:26:8d:
         45:d5:2d:ee:03:aa:6d:a8:df:32:18:31:54:6c:21:b5:11:8d:
         a6:0a:b1:ce:35:28:4b:6c:04:c4:71:70:cf:71:bb:e7:3c:c7:
         a9:b0:20:9d:3c:67:95:ad:d0:af:82:77:98:76:0b:30:a8:b9:
         a9:76:cc:c0:2c:68:73:56:ff:4c:31:22:1e:84:e3:ac:33:46:
         4a:45:f0:04:4f:11:59:83:52:05:be:0f:56:c3:1c:3c:ff:c1:
         fe:e3:d5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 04:37:19 2024 by rpki-client on console-ams.rpki-client.org