Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          XtjqUf9cPnAmr2/B1aFGwIL11sWqUYRO1zVw8+Igqmc=
Subject key identifier:   44:60:A8:76:81:83:4D:C4:45:5A:97:D2:D2:D3:27:3A:CC:9D:B2:5B
Certificate issuer:       /CN=A231E2070327B78340403E3C1D060C59505210CE
Certificate serial:       5B781EAE01C8054733EA91D527BADC5EEF282540
Authority key identifier: A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Wed 03 Apr 2024 22:53:26 +0000
ROA not before:           Wed 03 Apr 2024 22:48:26 +0000
ROA not after:            Wed 02 Apr 2025 22:53:26 +0000
asID:                     263940
IP address blocks:        2804:2818:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:78:1e:ae:01:c8:05:47:33:ea:91:d5:27:ba:dc:5e:ef:28:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A231E2070327B78340403E3C1D060C59505210CE
        Validity
            Not Before: Apr  3 22:48:26 2024 GMT
            Not After : Apr  2 22:53:26 2025 GMT
        Subject: CN=4460A87681834DC4455A97D2D2D3273ACC9DB25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:89:7e:c9:f6:18:c2:36:bd:e7:f2:d7:7b:
                    67:b6:01:a0:b7:64:be:bd:80:d1:15:99:9b:d5:51:
                    61:11:4c:31:5f:b2:5d:ed:07:92:67:8e:2c:20:41:
                    73:33:2b:e9:67:27:db:5b:fe:4a:ce:d4:e7:05:4c:
                    32:8d:fe:2b:ea:9e:0b:0b:5b:3e:cf:1e:38:31:ee:
                    41:c4:a9:23:d3:6b:01:76:2b:4a:4b:be:31:76:35:
                    45:07:be:99:7b:aa:4b:f9:1e:4d:ef:76:61:d0:21:
                    10:cb:a9:c1:53:40:5a:f5:1d:86:5a:bd:07:71:c3:
                    79:cf:18:56:0f:2c:c2:b3:5f:96:e1:9c:00:eb:ae:
                    f5:29:9f:62:17:9c:57:12:9f:b2:76:cf:31:d2:08:
                    2a:82:de:db:1b:aa:5a:01:52:bb:a7:09:5d:88:c6:
                    95:aa:df:f9:73:f3:d7:4a:ae:78:d5:5a:e3:f7:cb:
                    c5:fe:07:92:1f:3c:5b:b3:7e:a3:fd:1f:98:a6:ad:
                    bb:36:a1:44:52:86:40:ce:dc:fa:8a:ee:95:8f:34:
                    cb:75:fa:ae:08:bb:4f:3d:54:7e:5d:c3:d6:8c:a9:
                    ff:f7:77:44:a0:09:fb:b9:2d:d5:2d:1f:15:24:ef:
                    c9:a6:7c:a5:8e:87:88:15:4f:cf:88:97:6c:55:5b:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:A8:76:81:83:4D:C4:45:5A:97:D2:D2:D3:27:3A:CC:9D:B2:5B
            X509v3 Authority Key Identifier:
                keyid:A2:31:E2:07:03:27:B7:83:40:40:3E:3C:1D:06:0C:59:50:52:10:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/A231E2070327B78340403E3C1D060C59505210CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A231E2070327B78340403E3C1D060C59505210CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/1/323830343a323831383a383030303a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         75:bc:39:5e:df:5d:83:0b:11:62:ca:2f:e2:1f:d4:53:a9:e2:
         0c:1f:69:00:81:9f:b7:69:84:ee:68:d4:bc:80:c4:f3:b2:21:
         9f:c6:37:bd:ee:47:23:74:52:cf:6f:28:b1:08:fb:0b:0a:12:
         cf:e3:02:54:2e:94:5f:f0:90:b7:df:62:1e:ef:8d:50:94:4d:
         79:27:3d:73:d6:c0:da:b3:ed:5f:f1:7e:09:e2:b4:f6:ab:89:
         98:27:26:91:62:b4:86:12:12:e4:f6:35:9d:5b:0a:aa:80:2d:
         a7:06:4a:18:d7:8a:f9:72:5e:bd:e4:23:36:4c:83:3d:38:48:
         03:23:01:c5:91:a1:e9:5c:f0:aa:e6:c8:93:99:30:35:75:e1:
         f2:77:58:c7:44:7a:e7:ae:60:f3:3c:6a:eb:4a:7b:24:85:33:
         25:2a:f9:a3:d2:f6:fd:00:0a:d4:dc:9c:dc:db:b6:de:bb:c5:
         b4:25:f0:21:c4:66:3b:60:b7:3c:b7:cf:6b:20:d4:f4:f1:80:
         b1:db:13:4e:9b:09:b6:91:92:fc:a8:c0:b8:ee:b5:04:43:e1:
         79:c9:6c:ed:d2:6c:2c:71:14:c0:05:4f:f9:8f:e9:73:a0:aa:
         c5:0e:d9:1d:8c:bf:3a:17:2a:7b:f6:cc:09:3a:86:5c:47:7c:
         e5:ed:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:07 2024 by rpki-client on console-fra.rpki-client.org