Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa
File:                     323830343a6238343a3a2f33322d3438203d3e203532373838.roa (raw, json)
Hash identifier:          pIqAHR2ODFKF0xwhCT6S65A5+jVwmYlsCgFqufT9his=
Subject key identifier:   D4:61:C0:5D:98:C0:8F:F4:1C:26:3E:6B:9D:6C:5E:8C:51:A6:DB:B8
Certificate issuer:       /CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
Certificate serial:       40661EED0CE6A4E4A1A27168A6CD24970644FF53
Authority key identifier: 33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa
Signing time:             Wed 05 Jun 2024 19:17:23 +0000
ROA not before:           Wed 05 Jun 2024 19:12:23 +0000
ROA not after:            Wed 04 Jun 2025 19:17:23 +0000
asID:                     52788
IP address blocks:        2804:b84::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl
                          rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 15:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:66:1e:ed:0c:e6:a4:e4:a1:a2:71:68:a6:cd:24:97:06:44:ff:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33D444D18668AFF627287DE909F4EDC258CA9CC3
        Validity
            Not Before: Jun  5 19:12:23 2024 GMT
            Not After : Jun  4 19:17:23 2025 GMT
        Subject: CN=D461C05D98C08FF41C263E6B9D6C5E8C51A6DBB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:9a:9d:d9:dc:fd:ac:90:5a:65:3b:1b:a6:
                    3f:74:11:89:0a:5a:35:1d:40:6c:19:16:54:05:40:
                    9d:c7:7c:97:86:1b:fe:86:07:9e:74:a6:5f:3f:52:
                    91:9c:08:40:7a:e4:f2:a0:3a:05:9d:38:8f:54:80:
                    a5:39:c0:fe:1a:08:ed:97:b2:5e:4e:92:8b:32:14:
                    72:39:05:68:01:de:af:04:46:d9:f1:a9:e1:c3:31:
                    36:54:ae:e5:61:5a:01:d4:2a:42:8e:0a:2e:11:e0:
                    af:74:0d:e4:01:5a:d7:1e:21:86:a0:45:b7:57:cf:
                    26:d3:72:e6:35:53:76:88:c9:d8:8a:e8:34:a7:da:
                    3e:f7:a8:74:84:d8:84:e9:23:27:65:80:84:f5:4d:
                    7c:a7:24:48:f0:16:ef:5a:94:da:00:36:69:cf:bc:
                    cf:5a:31:2c:12:8f:b5:9b:da:ca:05:e0:e6:fe:15:
                    6e:7d:ab:fb:17:0f:00:1c:cb:49:95:e1:e9:86:14:
                    00:ad:2d:f5:61:9a:2e:ec:1f:ef:91:2c:11:cd:51:
                    db:f8:a2:9d:6f:e2:d1:87:3c:3a:29:90:dd:00:67:
                    a4:42:b9:c2:17:86:b3:17:ed:cc:90:3b:a7:0a:4a:
                    4a:95:b7:84:fd:87:d9:9b:57:3f:76:24:80:30:9f:
                    8c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:C0:5D:98:C0:8F:F4:1C:26:3E:6B:9D:6C:5E:8C:51:A6:DB:B8
            X509v3 Authority Key Identifier:
                keyid:33:D4:44:D1:86:68:AF:F6:27:28:7D:E9:09:F4:ED:C2:58:CA:9C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/33D444D18668AFF627287DE909F4EDC258CA9CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33D444D18668AFF627287DE909F4EDC258CA9CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5mNEFAo6D3nQJbxRr9iSKghnMJLnrqvSniWydRZJjBM/0/323830343a6238343a3a2f33322d3438203d3e203532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:21:0a:06:18:fe:7d:c4:de:88:47:4b:c7:9c:82:fa:6c:4e:
         05:b0:b8:3a:af:11:9f:ac:c7:1f:20:92:c0:3b:a3:78:d0:cc:
         62:30:75:aa:a4:aa:c0:4f:a0:11:f0:24:c8:2f:9a:f9:12:e3:
         f1:15:3f:5e:3b:b7:2c:e2:cf:5e:ca:aa:fc:5c:5f:8c:75:25:
         6a:63:15:dc:df:7c:cd:57:65:ee:05:5c:62:d2:2e:8e:fa:5f:
         ef:f5:84:50:82:d9:c0:a3:fd:07:db:d1:37:ce:ed:3e:f3:d9:
         d1:51:57:c1:f4:87:cb:95:90:72:d9:82:ba:b1:9a:af:b9:cd:
         56:70:2c:56:ef:96:a2:84:c5:9c:43:65:cf:b2:9a:6d:ec:28:
         c1:f3:b7:c7:72:ec:29:b7:15:49:6d:77:dd:67:73:31:b1:dd:
         2b:9d:ed:34:85:83:36:c2:33:e9:da:0d:84:17:76:2d:21:43:
         7c:9a:86:d1:be:03:ca:f0:c9:de:24:6b:d5:b2:91:fc:87:7c:
         22:45:19:52:0d:5f:43:a7:f9:f7:4b:86:13:ff:e1:ea:dc:ec:
         25:eb:03:e4:c8:0a:7b:c4:c4:50:22:a0:9e:14:62:2b:aa:76:
         f8:c3:d3:78:7a:d6:bd:0a:1a:ab:da:2a:70:08:6e:57:4e:bb:
         c0:c5:89:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:01:00 2025 by rpki-client