Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          L31bYpP1OzrTVESDnCFTsxrBFun53IGLNz2Xky6CixM=
Subject key identifier:   92:46:C7:54:DB:18:2E:40:AB:7D:92:70:4A:1A:5A:65:F8:EC:58:C9
Certificate issuer:       /CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
Certificate serial:       20E83D077B46B14CB98A1676C586C6E49DE84D36
Authority key identifier: 63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Fri 01 Nov 2024 23:15:22 +0000
ROA not before:           Fri 01 Nov 2024 23:10:22 +0000
ROA not after:            Fri 31 Oct 2025 23:15:22 +0000
asID:                     269053
IP address blocks:        2804:5ebc:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl
                          rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 23:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e8:3d:07:7b:46:b1:4c:b9:8a:16:76:c5:86:c6:e4:9d:e8:4d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0
        Validity
            Not Before: Nov  1 23:10:22 2024 GMT
            Not After : Oct 31 23:15:22 2025 GMT
        Subject: CN=9246C754DB182E40AB7D92704A1A5A65F8EC58C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:8f:e1:4c:3c:1d:29:7f:0e:12:2b:e0:52:
                    85:e0:74:88:17:b6:04:77:49:30:b3:91:f5:15:79:
                    39:64:95:d2:09:81:80:d6:b2:5e:7d:a5:0d:c8:6a:
                    0d:98:48:46:6b:0f:c9:aa:7e:01:ca:88:8c:6d:52:
                    da:c3:17:e5:eb:bf:1b:60:53:3c:66:9c:2f:04:5a:
                    1d:e3:3d:f7:c6:ad:7c:32:b3:12:c9:3d:50:89:4e:
                    8b:6c:06:89:38:d2:73:53:e5:4d:dc:95:0f:af:c1:
                    5e:d1:9e:2b:3d:70:01:2d:c4:ad:fd:f6:18:b3:4c:
                    a4:29:8a:55:54:62:06:91:0e:93:73:94:f6:88:d9:
                    43:34:d2:75:d8:d9:f9:d0:11:f3:9f:31:a3:ec:57:
                    9c:6d:95:e5:8a:af:70:64:d9:d2:1e:96:18:96:a6:
                    3a:48:26:dd:f7:94:d4:8a:83:5e:5d:85:0b:b0:47:
                    7f:fe:5a:84:e2:14:80:be:7f:80:69:da:58:d0:d7:
                    69:53:13:6f:3f:fd:d3:43:4e:a6:9d:e2:0e:d3:9d:
                    fd:97:fe:ca:41:af:e3:9b:b9:42:ad:bf:58:19:49:
                    ee:13:50:c7:98:fe:11:25:30:7c:b6:c0:32:76:e2:
                    e9:ac:5c:ca:8c:07:65:07:98:7b:f9:03:46:43:7c:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:46:C7:54:DB:18:2E:40:AB:7D:92:70:4A:1A:5A:65:F8:EC:58:C9
            X509v3 Authority Key Identifier:
                keyid:63:3B:DD:34:75:47:5D:9C:8D:62:32:CB:1F:D9:0F:D5:2C:D8:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/633BDD3475475D9C8D6232CB1FD90FD52CD8CFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a383030303a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:03:03:f2:ee:f8:69:6f:91:74:33:65:8b:28:15:99:eb:4d:
         7f:95:17:6d:bd:62:7a:86:7d:51:4f:ad:9c:1f:1e:c9:60:f5:
         f1:8b:c7:20:2d:86:6d:e8:84:d2:05:b0:68:ea:08:e5:98:e4:
         78:7b:1f:46:bd:54:2d:7c:45:70:df:53:92:9c:8e:33:e4:b5:
         24:0e:f1:7e:d5:ea:8e:17:82:d0:1b:54:99:0b:07:9c:23:71:
         dd:b5:8b:ba:91:4f:33:a5:5a:bd:06:7c:0a:90:b3:e3:fb:8a:
         5f:a1:33:a9:39:a5:8a:79:48:40:7a:18:48:73:03:57:af:26:
         46:bd:0b:04:f7:1a:00:f2:70:3f:b0:4a:32:2e:ab:af:8b:62:
         53:d2:51:c5:b0:30:dd:15:64:fb:7d:9d:b5:65:4a:27:94:22:
         3c:2b:1b:46:1b:b8:d7:82:5d:23:d1:5c:65:1b:9b:6c:4e:b4:
         05:93:d5:86:c9:75:da:85:08:29:b2:50:90:f1:16:1a:46:71:
         9c:44:66:33:bf:9a:7a:c2:0e:5c:88:93:9c:0a:82:eb:9d:1a:
         d7:37:eb:8e:84:8f:cb:3c:24:32:a8:1f:30:35:10:0e:67:7e:
         da:3b:8e:73:74:7b:a1:90:e7:5f:92:53:07:c0:82:dc:d8:ba:
         c5:43:e0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:21 2024 by rpki-client on console-ams.rpki-client.org