Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa
File:                     323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa (raw, json)
Hash identifier:          aW9uaehjih4wwoJLQLP0XCZT/2SOubhbVOn/u1JiU2A=
Subject key identifier:   94:7D:21:65:BA:C6:B4:FB:F5:A4:65:5A:D6:B7:B2:78:B2:16:52:82
Certificate issuer:       /CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
Certificate serial:       6EECBB7FA6D5AAFD566A3C3400650E9135A71D60
Authority key identifier: FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa
Signing time:             Fri 20 Sep 2024 19:50:44 +0000
ROA not before:           Fri 20 Sep 2024 19:45:44 +0000
ROA not after:            Fri 19 Sep 2025 19:50:44 +0000
asID:                     268564
IP address blocks:        2804:531c:238::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl
                          rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:38:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ec:bb:7f:a6:d5:aa:fd:56:6a:3c:34:00:65:0e:91:35:a7:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF33C1CFC117A37918D4BD5B64B233AE912A40BA
        Validity
            Not Before: Sep 20 19:45:44 2024 GMT
            Not After : Sep 19 19:50:44 2025 GMT
        Subject: CN=947D2165BAC6B4FBF5A4655AD6B7B278B2165282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:03:b8:fb:ce:af:62:3e:27:4c:69:07:00:
                    00:c1:d1:e1:84:89:42:1b:22:22:a1:c1:3c:3e:a1:
                    cb:8c:f1:cf:b4:85:d3:78:4f:3c:5b:87:55:cb:80:
                    b1:58:d4:74:b8:30:cc:35:6d:52:68:e6:fe:89:3b:
                    c7:9e:fa:82:95:d7:fa:17:46:91:9c:89:2b:30:7b:
                    42:95:aa:dc:ad:63:af:6a:95:24:a7:fa:32:4a:52:
                    48:c9:2b:e7:0c:8a:60:bb:3f:32:b9:9b:96:d5:07:
                    ad:fd:3d:bd:a0:11:a2:c5:22:13:72:33:9b:e8:42:
                    f4:17:ca:d5:a9:35:04:49:5b:c1:09:58:0c:f9:eb:
                    7a:0a:2e:9e:66:54:ef:a9:49:fb:b1:4e:18:d2:e7:
                    5c:1e:ea:a5:45:5c:10:0c:b7:c2:2f:e8:84:31:d2:
                    c7:10:37:bf:be:b5:61:40:4d:84:c3:d8:1b:24:2e:
                    ef:2a:02:56:de:28:2d:f6:71:5f:73:cd:6e:8e:c8:
                    1e:91:e4:e7:f2:97:27:c6:86:08:1b:b5:3b:21:5f:
                    e5:92:36:be:ff:a4:94:3f:14:d0:8a:bf:9d:1c:0f:
                    ae:52:38:27:e9:25:7a:8c:06:f5:be:94:72:e5:66:
                    47:27:88:ae:20:9c:ed:52:02:70:72:5d:08:55:eb:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7D:21:65:BA:C6:B4:FB:F5:A4:65:5A:D6:B7:B2:78:B2:16:52:82
            X509v3 Authority Key Identifier:
                keyid:FF:33:C1:CF:C1:17:A3:79:18:D4:BD:5B:64:B2:33:AE:91:2A:40:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF33C1CFC117A37918D4BD5B64B233AE912A40BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4LXUcdYSd67i7oCyJpVTHU1fyB59JKmhu92Tjp1ghan/0/323830343a353331633a3233383a3a2f34352d3435203d3e20323638353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:531c:238::/45

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:53:72:a9:9a:fc:fe:5e:f2:be:3a:7d:60:a0:73:31:0c:
         54:b0:6f:a7:12:29:47:b1:db:6a:09:51:f1:ca:67:84:e6:12:
         0d:0f:e8:e5:6e:f4:2c:85:df:54:5b:36:23:b1:f9:50:30:ae:
         f4:ac:8d:97:b5:d6:8f:db:df:30:11:ef:6c:7a:3e:d7:24:44:
         b2:94:60:18:d0:97:7a:f3:36:e1:e5:cf:a7:33:b0:d5:2d:76:
         24:6c:95:e5:d1:94:0e:08:69:14:74:ec:5b:46:ce:6c:0d:46:
         26:73:cb:82:96:79:71:02:30:de:e9:4f:cb:ed:9a:6f:7b:a3:
         a8:62:57:e6:fc:23:aa:3d:0c:18:d2:7c:f3:99:a0:28:d0:5c:
         f2:ff:48:bd:4a:a5:7e:07:65:ef:dd:a9:fe:d3:c1:e7:cb:92:
         e4:d8:c2:b8:94:25:9d:3a:fd:ec:d5:43:14:f4:af:0c:e1:8f:
         e3:ab:95:8e:96:ce:2b:3c:8f:26:19:ca:66:8e:41:5c:a4:de:
         23:7a:e6:95:e2:69:dd:5f:ed:26:d5:f0:f4:1e:3f:ad:22:c1:
         7f:2d:a8:f3:3d:39:58:6d:d8:90:d2:96:52:7d:4c:90:15:61:
         ab:e2:96:86:06:73:4a:66:a5:0a:03:50:56:cc:73:ee:6a:8b:
         29:9b:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:40 2024 by rpki-client on console-ams.rpki-client.org