Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383034303a3a2f34342d3434203d3e20323634343739.roa
File:                     323830343a323033633a383034303a3a2f34342d3434203d3e20323634343739.roa (raw, json)
Hash identifier:          zyIT/jL6i4XbCYoQ1zylvtPFUYMUPz32MNpaIg/3wBE=
Subject key identifier:   CA:63:6B:07:1B:E2:F5:BA:97:B9:FE:8B:4A:9C:E6:6B:78:1F:11:3A
Certificate issuer:       /CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
Certificate serial:       33FBFD569217F35BA65AFD240942186BC71685A0
Authority key identifier: 16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383034303a3a2f34342d3434203d3e20323634343739.roa
Signing time:             Thu 25 Apr 2024 18:00:55 +0000
ROA not before:           Thu 25 Apr 2024 17:55:55 +0000
ROA not after:            Thu 24 Apr 2025 18:00:55 +0000
asID:                     264479
IP address blocks:        2804:203c:8040::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl
                          rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:fd:56:92:17:f3:5b:a6:5a:fd:24:09:42:18:6b:c7:16:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16BC000CB0A478A70E4FBA552217F242CDF07AE9
        Validity
            Not Before: Apr 25 17:55:55 2024 GMT
            Not After : Apr 24 18:00:55 2025 GMT
        Subject: CN=CA636B071BE2F5BA97B9FE8B4A9CE66B781F113A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:9d:6e:3d:26:e7:70:4e:40:26:2a:46:74:
                    59:11:aa:00:00:8f:04:f3:97:96:10:76:9f:1e:05:
                    40:02:bf:1a:8d:8a:bc:b0:17:0e:57:15:2d:18:94:
                    1d:16:26:2c:4f:ad:de:51:32:ca:b5:90:12:01:d2:
                    f8:4f:55:bd:78:2f:ef:70:83:ef:3d:e1:e5:4e:a8:
                    5d:33:1a:71:90:cf:28:8c:2f:23:d3:49:4f:ad:b5:
                    25:43:b3:b4:e5:16:93:87:93:a1:eb:be:17:5e:00:
                    0a:17:7c:0e:48:20:aa:d0:ec:62:5c:c2:6a:db:8c:
                    0c:29:9e:d1:53:be:8e:0b:6a:83:33:56:f9:ce:be:
                    3e:85:5e:aa:26:d8:c8:06:60:9f:da:d2:cc:f2:7c:
                    a0:29:70:0c:4f:6d:82:75:cd:48:0f:7a:cd:c5:ca:
                    58:fc:ce:4e:80:e7:b3:20:9f:8c:ba:7b:34:0e:78:
                    e3:b0:aa:20:dd:1c:1e:95:38:98:91:cb:bf:e1:df:
                    2a:e4:c8:7b:0b:f7:0e:c3:f7:fe:7b:62:b1:25:2c:
                    0b:e2:29:28:fe:e7:7b:93:73:7d:77:7e:97:ab:8a:
                    0a:2f:27:62:34:0e:4e:e5:c6:c4:2b:32:f6:27:1e:
                    28:43:34:f1:11:71:6f:3d:3d:7b:c9:9a:7b:70:ec:
                    0c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:63:6B:07:1B:E2:F5:BA:97:B9:FE:8B:4A:9C:E6:6B:78:1F:11:3A
            X509v3 Authority Key Identifier:
                keyid:16:BC:00:0C:B0:A4:78:A7:0E:4F:BA:55:22:17:F2:42:CD:F0:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16BC000CB0A478A70E4FBA552217F242CDF07AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEAjYtdxJ3oQw6j6vUDMTXx8XxZqVMKPnryntXBiqnvd/1/323830343a323033633a383034303a3a2f34342d3434203d3e20323634343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:203c:8040::/44

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:e6:4d:e9:d8:01:9f:31:26:a4:e9:66:a1:90:40:4f:b6:
         a5:9e:7e:0b:75:4f:93:cf:c7:3b:c1:0f:12:38:3a:ce:dd:4e:
         e7:79:c4:b9:ff:8e:b0:dd:92:0a:a8:37:6f:4a:a5:5c:41:d8:
         cb:0f:f7:19:a3:c2:df:9c:13:60:14:42:1f:eb:ca:5e:ec:db:
         84:1d:a9:92:85:cc:f7:4c:91:91:f4:be:79:5c:7e:11:e9:8c:
         5a:b0:ca:e5:86:f5:8b:72:5d:c3:f5:06:0b:fd:55:23:58:f2:
         b5:6c:f9:bf:b7:00:be:46:74:a1:7f:c3:6b:03:59:7f:15:c9:
         df:6d:ca:7d:7f:d1:27:f3:6e:49:fb:9e:b5:35:53:0d:67:f5:
         c2:e2:8a:95:13:b9:89:6b:56:d5:28:c1:71:43:83:95:e1:54:
         48:2d:ee:5c:25:fb:2f:3b:d8:04:4f:2b:13:73:d7:eb:21:fc:
         65:f5:3a:83:ae:3e:34:23:f3:ab:75:05:66:6a:5e:6a:de:cf:
         d5:59:74:8e:7f:4b:d5:71:de:48:42:35:f7:be:84:ac:3b:b6:
         5a:62:ae:be:b0:43:6d:82:88:7b:02:ee:82:be:31:44:8a:97:
         b9:a4:f3:88:f8:4f:59:15:93:7a:5b:cd:d7:bc:b8:07:c0:8f:
         b6:5a:27:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org