Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a3a2f33332d3333203d3e20323639353535.roa
File:                     323830343a363636343a3a2f33332d3333203d3e20323639353535.roa (raw, json)
Hash identifier:          MGBvObgy9tUX8VepizDzn+MIM0z3DNduWYLsxPAuaQs=
Subject key identifier:   C9:EA:C9:55:58:06:58:FD:39:BD:AC:65:97:C1:20:BA:5D:7E:2D:A4
Certificate issuer:       /CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
Certificate serial:       5247D3CEEC446FC8D6B0E1F1F13F3AFBEDF9C835
Authority key identifier: 41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a3a2f33332d3333203d3e20323639353535.roa
Signing time:             Wed 03 Apr 2024 21:03:47 +0000
ROA not before:           Wed 03 Apr 2024 20:58:47 +0000
ROA not after:            Wed 02 Apr 2025 21:03:47 +0000
asID:                     269555
IP address blocks:        2804:6664::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl
                          rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:47:d3:ce:ec:44:6f:c8:d6:b0:e1:f1:f1:3f:3a:fb:ed:f9:c8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
        Validity
            Not Before: Apr  3 20:58:47 2024 GMT
            Not After : Apr  2 21:03:47 2025 GMT
        Subject: CN=C9EAC955580658FD39BDAC6597C120BA5D7E2DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:39:29:67:2c:f2:50:53:68:23:77:b2:93:58:
                    7a:bc:f2:6e:a1:2c:cb:06:38:e8:35:5b:59:f6:d4:
                    f0:07:1c:00:cf:97:48:4a:1a:79:b0:2f:f7:60:1b:
                    e7:3b:cf:46:81:73:30:69:60:20:cc:6c:47:84:03:
                    af:bf:4a:62:29:cf:55:cf:91:03:5c:84:0e:c0:ae:
                    d1:be:a7:fd:f7:50:4e:84:e8:da:93:de:35:bf:94:
                    87:c0:26:54:30:93:31:c8:f2:78:33:73:fe:ad:54:
                    d0:b0:33:31:84:45:8d:d9:b0:27:17:7b:97:2b:75:
                    4f:fa:50:73:5e:d1:13:4d:f3:1b:41:1e:1d:04:c1:
                    25:6b:ca:b9:27:ce:cd:54:28:32:4a:e7:44:d1:54:
                    b7:92:bc:78:1e:06:c4:1b:e0:26:a8:d5:a8:b5:90:
                    d2:86:29:64:1d:d2:ad:c4:48:b9:23:6f:3c:32:94:
                    0a:bf:a4:24:33:62:69:75:8c:39:ab:6b:e5:df:a5:
                    5e:9a:d4:f0:1a:73:a5:37:6e:e0:6f:97:60:36:d6:
                    a6:7c:a7:c8:3f:b7:9d:f9:77:ad:da:8a:b2:cb:f0:
                    cb:d9:fa:50:0e:09:3f:4a:c9:19:4b:3c:44:db:db:
                    84:89:7f:8c:29:43:48:18:62:46:6b:22:b9:2c:11:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:C9:55:58:06:58:FD:39:BD:AC:65:97:C1:20:BA:5D:7E:2D:A4
            X509v3 Authority Key Identifier:
                keyid:41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a3a2f33332d3333203d3e20323639353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6664::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:99:34:b3:3e:5e:b2:b9:2c:fd:e5:fa:59:a5:34:44:fd:95:
         ea:85:40:56:a0:0e:a7:ea:82:2b:70:2b:ac:8a:db:08:c4:48:
         a0:a4:4d:97:ce:67:b9:07:c5:2a:ba:e2:84:36:d4:97:bd:e4:
         4f:48:21:2e:a6:80:64:79:e5:db:03:0c:40:f0:92:06:cc:cd:
         b2:ae:7d:ba:81:4e:cb:80:d3:1f:d9:cd:4c:26:7a:48:07:e1:
         61:f5:15:fc:bd:ed:04:16:90:a2:65:76:99:e8:2c:d6:ec:15:
         da:13:6c:cb:6b:08:3e:0b:15:77:38:1b:77:8f:b7:76:bb:dc:
         22:22:ba:c5:eb:d9:f8:6b:e9:79:84:66:51:27:f1:0e:8f:30:
         01:9b:fb:df:cd:06:46:de:c5:df:4f:57:17:83:09:c0:49:f7:
         8f:38:9f:74:27:41:47:e2:d8:cb:61:96:25:df:55:50:f7:90:
         6d:18:9e:58:2c:44:95:5c:1f:f8:a4:3d:ed:ed:26:3a:2d:f1:
         dc:75:8e:7e:26:c2:ab:d4:39:a0:43:2b:0b:71:54:78:1f:18:
         d2:3b:fa:9f:ec:7d:20:4a:27:a7:24:be:2c:3a:0a:98:5e:49:
         e3:2f:2f:07:d6:3e:30:fe:b0:e3:7f:a1:25:af:65:68:37:b6:
         3d:db:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:48 2024 by rpki-client on console-ams.rpki-client.org