Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
File:                     323830343a3632383a3a2f33322d313238203d3e203533303239.roa (raw, json)
Hash identifier:          g0oaMcv5duLmGWbafaBDuKMQDxvNcPTmv0haCBekSjY=
Subject key identifier:   19:25:B9:88:69:0C:FA:FF:E7:0F:D5:76:E0:5E:63:9D:71:8B:29:38
Certificate issuer:       /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial:       575F8EB92DAF949DF50F45555E14977CC74EA92D
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
Signing time:             Thu 04 Apr 2024 14:10:18 +0000
ROA not before:           Thu 04 Apr 2024 14:05:18 +0000
ROA not after:            Thu 03 Apr 2025 14:10:18 +0000
asID:                     53029
IP address blocks:        2804:628::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
                          rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5f:8e:b9:2d:af:94:9d:f5:0f:45:55:5e:14:97:7c:c7:4e:a9:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
        Validity
            Not Before: Apr  4 14:05:18 2024 GMT
            Not After : Apr  3 14:10:18 2025 GMT
        Subject: CN=1925B988690CFAFFE70FD576E05E639D718B2938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:03:2c:1a:ec:69:3b:82:3d:2c:93:ac:1a:20:
                    f3:4e:a2:77:41:36:0b:80:48:90:06:ff:dc:7a:52:
                    22:60:65:f0:77:13:ff:e3:21:47:78:0a:69:a1:69:
                    ce:ec:f5:7a:b8:96:c3:76:7a:c1:65:7e:de:35:80:
                    ed:25:44:22:cd:78:a3:97:07:3f:5c:a0:b5:de:a6:
                    b8:ef:98:7a:68:04:f5:83:fa:13:c5:70:a4:1f:72:
                    3f:8d:b4:fc:75:d9:10:4f:8a:d5:b0:b0:1a:f8:72:
                    32:ec:6c:47:17:68:49:c2:59:07:04:38:32:83:e7:
                    bb:01:4e:53:e9:b8:4a:3b:47:6b:69:8a:d5:7a:0f:
                    e0:aa:80:9b:1b:50:5f:40:06:26:95:6e:4d:ac:dc:
                    8a:3a:3a:46:8d:86:36:82:b1:e9:dd:d2:f5:93:9a:
                    56:dc:ba:99:1b:3c:15:18:fc:14:12:c0:52:b0:6e:
                    c9:c5:93:41:32:b1:fb:1e:a8:e4:fc:a7:2f:a5:51:
                    c8:23:1e:f5:e8:15:a5:50:6e:6f:01:b7:d8:72:9b:
                    8b:1a:36:d8:7f:87:3b:b9:36:94:19:a2:c8:fb:23:
                    65:ce:8b:52:95:05:9d:aa:ff:47:86:e5:04:1a:ce:
                    3c:38:d3:58:3d:37:ab:43:8e:25:7c:6b:21:54:f8:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:B9:88:69:0C:FA:FF:E7:0F:D5:76:E0:5E:63:9D:71:8B:29:38
            X509v3 Authority Key Identifier:
                keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:628::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:b6:f4:e5:71:04:46:7a:85:4a:1d:79:89:ad:73:ba:1f:78:
         64:6a:8f:f6:88:6e:61:89:63:f9:20:42:1a:e4:64:38:ef:b1:
         ba:7a:2b:d2:65:50:b9:7a:85:d0:5a:d9:14:59:ef:76:89:e9:
         52:c8:42:3c:18:53:d5:03:35:7f:0f:3b:51:b7:e8:01:68:e5:
         95:a4:29:c7:87:79:73:c2:fc:fb:1c:66:a0:63:91:2e:e7:4c:
         01:24:c3:5c:df:77:61:04:6f:8e:87:6e:8a:e5:91:3b:42:33:
         ff:62:e6:26:82:3a:e4:f5:e4:11:07:c3:da:f2:4c:95:de:12:
         7c:5e:ef:9b:55:c3:9d:dd:f5:cf:f5:90:2c:4f:4c:0a:45:43:
         77:04:ef:81:49:9c:dd:4a:b3:de:b0:3d:56:69:4c:ca:33:09:
         44:45:cb:30:38:6a:33:68:40:b4:09:3a:c7:5f:c4:ff:30:a4:
         96:af:af:48:16:0e:6b:f9:ca:6a:8b:7f:f1:3b:da:3c:24:16:
         27:a4:1b:73:08:41:10:41:87:4c:4f:b4:2a:57:cf:cb:ad:6a:
         fd:d8:b4:ed:9f:25:de:33:93:fc:b5:31:85:94:01:30:04:bc:
         49:d0:d6:5a:56:59:4a:ec:dc:7d:e1:62:bd:06:3c:09:f6:e0:
         e3:d9:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org