Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33332d3333203d3e20323632373439.roa
File:                     323830343a3138343a3a2f33332d3333203d3e20323632373439.roa (raw, json)
Hash identifier:          vITciX7d5ZSbvYLjYhlF64W1JHFD6kBJ/FVXsp0b8OA=
Subject key identifier:   3D:3E:9B:80:7C:EA:87:92:DC:BF:73:AF:DA:97:67:AB:CF:5A:B4:A2
Certificate issuer:       /CN=9DAC040D005E337E60D8E70413DC135C767316A4
Certificate serial:       730A3A0E46E37CB6420A412981E0A296FF95EA91
Authority key identifier: 9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33332d3333203d3e20323632373439.roa
Signing time:             Thu 04 Apr 2024 06:00:24 +0000
ROA not before:           Thu 04 Apr 2024 05:55:24 +0000
ROA not after:            Thu 03 Apr 2025 06:00:24 +0000
asID:                     262749
IP address blocks:        2804:184::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl
                          rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0a:3a:0e:46:e3:7c:b6:42:0a:41:29:81:e0:a2:96:ff:95:ea:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DAC040D005E337E60D8E70413DC135C767316A4
        Validity
            Not Before: Apr  4 05:55:24 2024 GMT
            Not After : Apr  3 06:00:24 2025 GMT
        Subject: CN=3D3E9B807CEA8792DCBF73AFDA9767ABCF5AB4A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:bb:53:e1:e7:9b:b2:0b:00:55:97:09:3f:
                    76:2c:06:26:02:4d:2d:8e:05:80:57:01:ed:62:61:
                    d9:e1:cb:0b:48:2b:92:5b:98:a0:19:c6:a4:bf:ad:
                    4c:16:60:ff:c5:8a:dd:b2:f2:02:65:a3:ef:13:8d:
                    21:1b:57:d3:54:e9:54:d2:00:78:7f:0c:98:e6:9b:
                    23:e0:e4:ef:a3:37:43:ae:cb:c7:59:21:e2:02:1a:
                    64:2d:cd:60:d8:38:03:98:48:04:5f:93:1b:96:e2:
                    8f:d6:ce:9c:63:16:04:77:d2:a2:65:62:e3:45:3a:
                    8b:7d:af:1f:ab:32:fc:c8:66:10:3f:04:0f:19:7f:
                    f1:4c:b2:bb:20:aa:8f:c4:de:26:46:29:ae:9d:d8:
                    72:51:ea:5b:6e:66:9f:1b:db:82:6f:5e:dc:3d:77:
                    a3:e6:f6:b8:54:09:92:4e:ca:ba:b9:26:44:73:d2:
                    db:c6:61:36:2b:32:dd:8f:d5:a6:71:67:89:fd:be:
                    e6:8f:cb:51:a8:4f:a5:33:60:fb:5a:6e:8f:97:d7:
                    db:ab:1d:0c:e0:55:0c:61:2a:53:a1:7b:f7:8d:9e:
                    46:f9:a3:78:79:58:96:78:3e:c5:8c:d8:09:5b:02:
                    66:b7:40:47:32:a8:f4:a9:c5:f5:33:8b:a4:4b:3f:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3E:9B:80:7C:EA:87:92:DC:BF:73:AF:DA:97:67:AB:CF:5A:B4:A2
            X509v3 Authority Key Identifier:
                keyid:9D:AC:04:0D:00:5E:33:7E:60:D8:E7:04:13:DC:13:5C:76:73:16:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/9DAC040D005E337E60D8E70413DC135C767316A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DAC040D005E337E60D8E70413DC135C767316A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ftq8JpFJqtKw8NsbwhWPWojofXqcTjbtpTwBNPEMc3i/2/323830343a3138343a3a2f33332d3333203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:184::/33

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:d6:f4:05:8c:a2:88:15:ba:98:91:e9:fc:2f:4b:1e:42:
         14:ca:49:13:7f:df:39:fc:d8:30:9d:dc:bd:b9:0b:1c:d7:12:
         d4:cd:42:cd:ae:58:8f:c7:b4:46:f0:c6:88:a1:29:1f:16:c8:
         11:a9:84:69:7b:96:ff:6d:fe:90:7d:f1:71:8b:11:df:75:0c:
         97:59:cf:47:3c:bd:8c:8b:b1:01:40:4f:0f:07:96:4f:23:5a:
         4c:26:30:1e:d7:15:39:7b:16:8a:56:1a:87:ef:83:d0:8a:4f:
         90:a4:17:8a:cc:eb:1f:17:0d:61:eb:39:4b:67:39:0d:d3:70:
         8f:59:9b:91:6a:53:d5:66:88:70:56:9e:b6:77:f9:ea:3a:ca:
         a4:88:25:d6:07:5d:d9:21:3d:92:bf:0f:c9:d2:7f:50:1f:ee:
         83:fc:82:bc:b9:19:49:83:6d:2a:4b:9b:25:11:3e:24:56:49:
         e9:c7:52:f5:e5:1a:a7:af:4b:76:53:95:c9:ba:c8:ad:fb:4c:
         68:f8:db:a7:fb:da:b9:1a:b1:54:21:b4:f5:32:d6:4e:4d:79:
         76:3c:d3:d7:9c:76:29:e2:4d:9c:fa:84:83:90:25:6d:27:70:
         60:e8:33:72:a2:4a:45:3a:87:b3:e4:03:28:7f:23:99:d8:b9:
         ab:74:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org