Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
File:                     323830343a356131303a3a2f33332d3333203d3e20323638373436.roa (raw, json)
Hash identifier:          WEtxuA7lYVOpKZmSRaWkFyhFxre0OD4How7Jx6d9MYg=
Subject key identifier:   C7:6E:90:19:63:2B:5A:67:78:06:D2:A9:22:6B:F2:FC:1B:19:99:9E
Certificate issuer:       /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial:       586705E23D34E8313F4DEEFDBB0FF09D2E612F75
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa
Signing time:             Thu 04 Apr 2024 00:02:21 +0000
ROA not before:           Wed 03 Apr 2024 23:57:21 +0000
ROA not after:            Thu 03 Apr 2025 00:02:21 +0000
asID:                     268746
IP address blocks:        2804:5a10::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
                          rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:67:05:e2:3d:34:e8:31:3f:4d:ee:fd:bb:0f:f0:9d:2e:61:2f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
        Validity
            Not Before: Apr  3 23:57:21 2024 GMT
            Not After : Apr  3 00:02:21 2025 GMT
        Subject: CN=C76E9019632B5A677806D2A9226BF2FC1B19999E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:64:df:87:7b:cb:da:29:b3:22:41:1f:2e:
                    96:7f:a4:30:1d:b4:f3:b4:6a:c7:a3:db:33:eb:58:
                    70:71:52:fe:64:96:89:03:5c:27:b5:42:75:49:6b:
                    09:de:91:a8:76:42:92:d3:65:1f:00:80:60:f8:ff:
                    d6:ec:e4:3b:bc:47:6d:80:6a:23:41:a9:f1:1c:1c:
                    fd:3a:1a:48:ed:7e:0a:02:94:df:de:d5:69:4f:9a:
                    fd:85:25:d1:aa:df:85:6e:b6:f6:96:69:96:96:61:
                    fc:9a:23:39:c8:c5:d5:ee:df:38:df:29:db:90:f4:
                    28:bd:0d:90:46:57:c1:dc:dd:11:f5:d6:58:4f:a6:
                    5a:ad:aa:73:9d:be:0d:38:8b:ac:b6:4c:07:42:95:
                    c5:47:e5:d7:36:61:6f:78:63:67:a3:89:c1:6a:5e:
                    de:c5:70:02:54:06:13:b8:5b:ef:f7:3a:56:a9:5d:
                    d4:b1:4a:46:64:b9:6b:7d:b1:e2:d7:9b:d0:e3:79:
                    64:67:30:2c:2b:8f:24:57:41:6e:41:11:3d:15:a9:
                    c8:5a:c4:0a:a9:09:2d:79:81:b9:06:76:17:8f:d4:
                    c5:fb:0f:51:42:28:2e:64:9e:47:a1:c8:ac:06:a9:
                    82:4c:37:0e:29:5b:44:da:4d:96:fb:07:c7:2b:41:
                    38:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:90:19:63:2B:5A:67:78:06:D2:A9:22:6B:F2:FC:1B:19:99:9E
            X509v3 Authority Key Identifier:
                keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/323830343a356131303a3a2f33332d3333203d3e20323638373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a10::/33

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:5b:36:4c:79:0a:85:45:66:a0:63:23:36:ea:cd:4a:4e:
         34:0b:83:5a:21:ba:11:94:6c:3c:cf:72:4a:f8:35:23:df:89:
         09:2d:db:b2:4a:51:88:62:ec:02:29:83:ae:a0:77:51:cc:8e:
         1c:32:ed:01:80:b3:60:7a:f5:0c:87:94:7d:ec:68:55:a0:0d:
         79:92:93:5f:88:d0:50:02:d7:7b:e7:b9:e4:22:ae:f0:76:b6:
         2d:f3:62:22:44:fb:a7:91:4a:7a:44:7e:94:47:00:40:c0:cc:
         76:3c:f9:15:bf:5d:9d:29:3c:02:19:95:fd:4f:3e:0f:c0:12:
         3d:5a:c1:5c:93:7d:13:e3:e5:92:ae:75:fa:d7:b9:8d:7d:6c:
         b5:ac:75:1f:4a:bd:ab:fb:86:e4:b3:57:79:0e:34:47:f8:5b:
         1b:00:96:f7:04:73:83:b3:9b:c7:5d:96:14:cb:7a:bb:de:36:
         a1:cd:17:86:59:f1:a1:4b:11:25:3a:45:73:f4:2b:db:d4:22:
         9b:ed:e1:0c:58:03:cf:68:9f:6f:06:a6:84:0f:7a:ed:77:58:
         7d:78:32:a8:69:19:14:b7:96:09:90:86:b9:5f:7b:c0:8e:2d:
         2b:a6:ac:e5:f5:50:f8:23:52:9d:e0:2e:06:69:39:19:a7:c1:
         5d:8c:6f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:45 2024 by rpki-client on console-fra.rpki-client.org