Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
File:                     323830343a353137303a3a2f33322d3336203d3e20323638343532.roa (raw, json)
Hash identifier:          Cwqsr+CChx1WoFqoUK9JScqEAxS8sDPqgeB0EUdc8pw=
Subject key identifier:   31:FF:F7:A5:CC:EA:F2:D8:45:3B:F8:49:CA:62:B8:63:7F:14:AE:DD
Certificate issuer:       /CN=84398976322691988CABA640BBB2854AECDF6B87
Certificate serial:       4DE050B4FCE621E5EF09B67867BFF7B070DE0DCB
Authority key identifier: 84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa
Signing time:             Thu 04 Apr 2024 08:39:49 +0000
ROA not before:           Thu 04 Apr 2024 08:34:49 +0000
ROA not after:            Thu 03 Apr 2025 08:39:49 +0000
asID:                     268452
IP address blocks:        2804:5170::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl
                          rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:50:b4:fc:e6:21:e5:ef:09:b6:78:67:bf:f7:b0:70:de:0d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84398976322691988CABA640BBB2854AECDF6B87
        Validity
            Not Before: Apr  4 08:34:49 2024 GMT
            Not After : Apr  3 08:39:49 2025 GMT
        Subject: CN=31FFF7A5CCEAF2D8453BF849CA62B8637F14AEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:ca:4f:ba:ca:16:42:5d:ff:71:e8:9a:a0:
                    ec:f4:69:2a:f3:3b:30:08:5c:3b:84:cd:e9:ec:3b:
                    e8:76:20:b3:ea:0e:ce:55:53:5e:b7:c8:ec:fd:9b:
                    58:86:5a:f4:92:8a:a1:98:5e:58:df:e2:74:61:28:
                    86:bc:eb:ea:ac:d3:19:91:34:d5:98:c9:ae:dd:fb:
                    c1:60:2e:05:22:65:d4:44:6c:a2:f8:99:61:42:a7:
                    d5:af:c2:c1:2c:72:fd:08:52:d7:14:f8:92:a8:70:
                    09:56:5a:41:93:b6:68:92:ef:e9:ce:be:ce:08:db:
                    42:47:5a:f6:6b:5e:f2:50:6b:36:f8:c4:d4:74:7f:
                    9f:97:29:67:4c:06:fe:be:46:c8:63:8c:b8:5e:41:
                    b6:37:1d:4d:12:df:22:90:4e:1d:4b:38:62:06:17:
                    e8:2f:f0:b7:42:d4:ed:d4:d7:28:fb:82:7c:79:bf:
                    8e:81:93:82:1b:ac:b0:e7:e0:6d:b0:08:2c:f4:be:
                    78:16:1f:c9:e1:f8:a7:e6:54:42:f4:ae:08:ef:7a:
                    df:eb:aa:b2:71:db:41:eb:42:99:22:21:cc:85:26:
                    fd:03:25:4c:0a:ab:f4:79:e8:2d:30:d1:6c:4b:8b:
                    9e:70:b2:7e:74:b6:1d:78:a0:27:78:ee:37:df:8f:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FF:F7:A5:CC:EA:F2:D8:45:3B:F8:49:CA:62:B8:63:7F:14:AE:DD
            X509v3 Authority Key Identifier:
                keyid:84:39:89:76:32:26:91:98:8C:AB:A6:40:BB:B2:85:4A:EC:DF:6B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/84398976322691988CABA640BBB2854AECDF6B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84398976322691988CABA640BBB2854AECDF6B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/1/323830343a353137303a3a2f33322d3336203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5170::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:49:2e:97:80:23:68:0b:8d:65:9b:70:bc:65:ba:e4:14:bf:
         6e:2b:77:fd:66:8e:ce:f3:fe:5f:54:76:d3:e8:c8:92:13:47:
         90:29:d4:2d:f6:ea:02:b0:e0:3a:43:05:86:87:b4:2a:42:d6:
         99:f8:7c:a6:b8:64:11:93:7e:3c:c8:1e:48:bf:92:8d:ef:4c:
         07:45:10:60:a6:98:37:b2:b7:b2:68:a4:d6:48:b6:ba:b6:bb:
         36:32:b4:82:95:44:39:2f:7d:d0:2f:81:73:cd:f1:25:0f:06:
         37:60:38:a4:fb:d6:26:0e:3b:e5:15:7d:7c:af:e6:fc:06:8b:
         1e:68:a1:c1:94:79:21:76:44:cc:98:9f:26:68:29:f5:5f:08:
         a0:54:c4:f3:03:00:89:b4:c4:c3:ad:fc:44:25:a4:3b:29:8c:
         b4:8f:4a:e9:e5:5e:f1:e3:9a:99:23:d8:41:74:7e:c8:66:f0:
         0f:bc:d7:0e:21:28:cc:36:c1:bc:28:4c:3e:8a:76:6a:cd:68:
         4a:4d:b9:dc:d7:0f:87:1f:e9:85:a4:1e:6f:32:4f:81:41:a6:
         a5:a8:33:03:6d:7c:1c:95:78:e6:ec:09:29:22:00:12:92:b2:
         38:28:7c:79:4e:cf:f4:d6:86:ea:ed:3f:fa:c8:a3:9b:0e:74:
         30:72:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:12 2024 by rpki-client on console-fra.rpki-client.org