Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
File:                     323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa (raw, json)
Hash identifier:          PoQFxB8no7+ZwVt1IEQkOfwEOYvLrP051DZoi9nprk0=
Subject key identifier:   E8:14:70:E0:17:1C:32:A1:7E:8D:A2:46:1F:6B:AB:E5:A4:ED:1F:6B
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       23D9B966D74F731F272C81F681CAA2FC6801728B
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:02:17 +0000
ROA not before:           Wed 31 Jul 2024 01:57:17 +0000
ROA not after:            Wed 30 Jul 2025 02:02:17 +0000
asID:                     266165
IP address blocks:        2804:3bb0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d9:b9:66:d7:4f:73:1f:27:2c:81:f6:81:ca:a2:fc:68:01:72:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:57:17 2024 GMT
            Not After : Jul 30 02:02:17 2025 GMT
        Subject: CN=E81470E0171C32A17E8DA2461F6BABE5A4ED1F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:30:d4:b8:bb:43:2f:86:0a:8e:d6:e6:0e:
                    e4:28:0f:fb:74:64:55:bd:88:a7:a9:c3:d5:66:b1:
                    d1:8a:c1:58:47:05:90:a3:05:20:ae:86:e2:b1:e4:
                    56:1f:15:9f:b3:53:5d:e1:41:1e:00:69:a6:e7:31:
                    17:47:e5:4f:32:5e:82:ce:c0:cb:90:9b:b4:9e:5f:
                    b3:cc:44:27:e0:27:82:87:3f:d6:7f:31:e8:64:14:
                    39:58:56:b0:39:09:59:0b:1a:99:a2:3a:4d:0f:40:
                    9f:31:f1:36:4f:53:6c:cd:91:b1:ba:46:34:69:4e:
                    6d:f3:76:4d:88:2e:3b:bc:c6:5d:80:f1:bf:ae:18:
                    83:b5:95:23:74:4d:fa:e8:01:eb:d1:54:72:a7:34:
                    63:1f:fe:74:e8:7e:d3:34:03:3a:27:09:e6:30:77:
                    ce:f1:db:f6:b8:9c:4d:46:eb:d1:dd:9c:7b:df:7d:
                    9b:2e:24:4a:10:94:7e:81:0b:49:f6:65:dc:a0:3e:
                    46:9e:47:15:39:cc:e4:ad:38:59:7a:c4:25:18:96:
                    57:42:71:82:08:4a:cd:77:40:9a:a6:d9:3b:a5:49:
                    eb:4b:db:89:6e:8a:63:cf:36:ae:db:e0:d9:f5:d1:
                    c0:53:cb:0c:f5:9b:8c:16:ae:28:20:79:18:ce:77:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:70:E0:17:1C:32:A1:7E:8D:A2:46:1F:6B:AB:E5:A4:ED:1F:6B
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33332d3333203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:65:83:cf:6d:b6:a9:6d:76:06:32:c2:18:20:22:a0:6a:68:
         d2:f5:99:57:05:bf:ec:77:3b:bc:22:cf:4b:24:51:94:34:b5:
         57:4f:85:41:5b:45:ba:e0:48:99:60:bc:86:26:89:b3:78:87:
         25:6c:6e:4c:a3:4c:63:9d:38:99:13:31:d4:05:56:b0:47:a2:
         a5:39:3f:89:c4:1c:40:fc:2a:16:24:e5:e4:f4:56:94:6e:be:
         c2:be:d5:f5:bc:9a:15:45:91:f5:8a:88:f1:b9:81:44:a9:4d:
         f3:81:16:ec:39:1f:df:38:8c:50:45:5c:cd:f8:16:ab:f1:95:
         ec:92:96:33:be:7c:6e:9e:c6:60:1c:b6:2f:57:26:c4:70:8a:
         4f:bc:49:f1:6e:05:3e:81:c6:7b:71:50:c6:3e:73:7b:24:88:
         f1:c1:e0:00:61:6d:c0:41:e1:77:1d:4c:59:ba:c4:8f:4b:3f:
         86:ee:b0:e3:9c:63:da:58:06:dd:00:11:96:62:56:76:3a:74:
         13:b3:aa:fe:00:b8:fa:51:a9:9c:5f:df:d9:38:d5:61:94:49:
         4a:d2:72:fd:10:8e:c9:9c:a0:ab:fc:f0:c8:e4:77:80:21:95:
         a5:f5:c0:0c:91:ab:b2:03:c0:a8:3f:d3:c6:7a:b1:a4:91:6c:
         e1:c1:90:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org