Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
File:                     323830343a343365303a3a2f33332d3333203d3e20323637353936.roa (raw, json)
Hash identifier:          F4SVZwo5pQHEeh5UDsr5/U4xwZ4yABDJbRFBTi6pIkk=
Subject key identifier:   2B:B1:B6:70:72:2B:34:DC:B1:0B:C0:25:62:54:AD:A3:E5:A6:13:DD
Certificate issuer:       /CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
Certificate serial:       596CB80905A5DD1D3B83175AD557EB6680609ECB
Authority key identifier: 01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa
Signing time:             Thu 04 Apr 2024 04:13:37 +0000
ROA not before:           Thu 04 Apr 2024 04:08:37 +0000
ROA not after:            Thu 03 Apr 2025 04:13:37 +0000
asID:                     267596
IP address blocks:        2804:43e0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl
                          rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:6c:b8:09:05:a5:dd:1d:3b:83:17:5a:d5:57:eb:66:80:60:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018A78C592C05C311E7AB3FDA73A9D2663DE4AFC
        Validity
            Not Before: Apr  4 04:08:37 2024 GMT
            Not After : Apr  3 04:13:37 2025 GMT
        Subject: CN=2BB1B670722B34DCB10BC0256254ADA3E5A613DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:55:f8:eb:00:2d:b2:a9:24:e1:87:19:a7:
                    e3:58:f5:2e:61:f5:22:e6:ab:9d:ec:72:e2:a3:26:
                    9e:41:81:05:36:d3:19:b1:1c:3b:7f:c8:ca:8a:f1:
                    95:e3:28:65:38:fd:2a:42:46:e7:ec:f3:aa:da:47:
                    8a:3a:31:4d:8c:c4:0e:b8:f8:cd:48:b3:46:f9:5e:
                    02:3b:d9:cd:2e:c5:5f:00:fd:08:df:73:26:ba:33:
                    9e:42:c0:c5:f3:e6:c8:4e:64:a6:fb:b9:54:6e:13:
                    0a:90:f3:9c:63:ce:1a:1c:32:6c:2a:33:23:7a:bb:
                    a3:6c:f1:20:14:9c:58:30:2e:ca:a5:1d:0a:df:cd:
                    da:75:9e:56:b6:19:ce:db:6a:b2:53:cd:93:3d:f3:
                    c7:9e:bc:52:d5:3e:ee:63:9d:f0:1c:e3:7d:44:6a:
                    2e:46:db:ba:65:ce:2b:26:65:37:6d:2b:db:a7:23:
                    ac:86:65:69:24:8b:da:94:22:08:ef:97:37:4e:ff:
                    78:a9:72:0f:18:ac:cc:70:5c:44:3c:a3:ba:9d:98:
                    78:11:b1:7e:db:a2:1b:48:04:7b:33:a8:ec:04:c2:
                    14:2c:58:22:eb:83:e2:e4:a5:c6:26:00:05:a3:24:
                    8d:44:93:eb:85:af:77:64:06:1f:c3:1b:3b:52:9c:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B1:B6:70:72:2B:34:DC:B1:0B:C0:25:62:54:AD:A3:E5:A6:13:DD
            X509v3 Authority Key Identifier:
                keyid:01:8A:78:C5:92:C0:5C:31:1E:7A:B3:FD:A7:3A:9D:26:63:DE:4A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/018A78C592C05C311E7AB3FDA73A9D2663DE4AFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/1/323830343a343365303a3a2f33332d3333203d3e20323637353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43e0::/33

    Signature Algorithm: sha256WithRSAEncryption
         5c:bb:64:fa:35:4c:7d:17:ff:c5:ca:5a:70:ab:6c:46:f9:82:
         66:ca:7d:1c:11:f6:81:b7:57:43:fb:06:42:86:5e:82:07:e1:
         0a:2f:1a:69:64:84:89:2b:0f:bd:94:84:16:a9:f2:4c:73:1d:
         e1:7a:fd:0f:c1:da:06:19:e6:fb:49:f3:f8:24:3b:ea:e5:a7:
         ef:06:8f:34:1b:2a:55:fe:c3:fd:d8:48:47:e5:89:6a:1f:11:
         7b:0a:bd:35:72:43:38:40:d4:8c:6c:7f:6a:92:20:1c:c6:bf:
         5c:e1:fa:7b:67:ea:48:00:74:bc:73:89:3c:d9:5e:10:80:2f:
         f8:6c:65:f0:e7:15:11:ad:28:cc:08:22:28:5f:91:4a:13:68:
         ba:26:17:c2:4c:fc:ef:d3:9a:8b:3b:88:21:27:76:e6:bc:6d:
         d6:9a:28:8e:58:10:ad:0b:32:28:43:df:be:d0:52:f3:3b:02:
         da:72:95:80:30:62:6d:db:5e:d4:ff:2d:55:3b:4a:41:e2:a9:
         b1:4b:10:b8:f2:34:6e:20:1e:c9:bb:f8:ac:49:f0:b1:77:f8:
         6c:e2:c2:34:d2:2f:5f:4b:da:a7:7b:b0:d3:5f:98:95:d0:8a:
         fa:41:d4:30:ff:85:0f:e2:df:ea:35:10:af:bb:f9:ed:cd:25:
         7d:9c:65:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org