Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
File:                     323830343a346262303a3a2f33322d3438203d3e20323637333234.roa (raw, json)
Hash identifier:          ZmLJk6aq7jD7NRdmYHnuoNMOX3AvV5rBmI6Z8a396mk=
Subject key identifier:   9E:3D:23:72:C4:BD:FD:88:79:D4:45:FB:F6:21:0D:E1:C9:86:68:AF
Certificate issuer:       /CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
Certificate serial:       16CD13D9D9803AFFE05011042F399B17E8103E64
Authority key identifier: CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa
Signing time:             Thu 04 Apr 2024 03:01:16 +0000
ROA not before:           Thu 04 Apr 2024 02:56:16 +0000
ROA not after:            Thu 03 Apr 2025 03:01:16 +0000
asID:                     267324
IP address blocks:        2804:4bb0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl
                          rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cd:13:d9:d9:80:3a:ff:e0:50:11:04:2f:39:9b:17:e8:10:3e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD681825A75F3DF3B033D3544F8826488F3FA8A4
        Validity
            Not Before: Apr  4 02:56:16 2024 GMT
            Not After : Apr  3 03:01:16 2025 GMT
        Subject: CN=9E3D2372C4BDFD8879D445FBF6210DE1C98668AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:b5:46:4c:aa:95:ce:4e:52:26:82:28:95:
                    83:06:03:7e:9f:3b:6a:65:bf:03:71:02:ca:22:7f:
                    bc:b7:71:27:20:90:fa:e8:ba:c7:69:aa:a5:cc:a5:
                    94:5e:aa:67:47:32:89:31:e2:ce:4d:0f:1d:45:9a:
                    2c:43:d4:4b:8e:e5:1e:0d:9f:19:c1:68:a0:82:3b:
                    ea:e0:29:80:cc:e7:1d:dc:cf:75:4d:f9:5c:38:7c:
                    d1:43:aa:6e:86:ca:26:ea:ea:1a:e7:c5:2b:15:93:
                    f1:11:82:74:a6:3b:a7:16:f7:5d:2e:ee:4f:81:92:
                    ef:bf:8e:0b:83:1b:1e:fb:66:be:20:4f:3c:03:0d:
                    e2:2c:02:46:7a:28:b5:ed:96:0e:f8:42:6e:71:ef:
                    7a:1e:f5:7a:e2:6b:25:c2:4d:9d:77:51:59:f6:4a:
                    07:9e:93:2f:b5:2c:c0:c6:86:3b:ad:54:db:f4:82:
                    3c:6a:37:9d:e3:1a:55:c6:3b:01:24:2d:e7:aa:52:
                    4a:fd:df:64:60:91:de:9e:fc:62:29:e9:f0:93:79:
                    2a:b5:61:6f:f4:11:21:71:84:77:db:8c:00:6d:7a:
                    87:bb:ad:39:d7:a9:60:ce:89:e8:c0:e1:4c:c5:2a:
                    ce:70:51:43:a3:52:0f:91:7b:fa:57:80:7d:7a:3b:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3D:23:72:C4:BD:FD:88:79:D4:45:FB:F6:21:0D:E1:C9:86:68:AF
            X509v3 Authority Key Identifier:
                keyid:CD:68:18:25:A7:5F:3D:F3:B0:33:D3:54:4F:88:26:48:8F:3F:A8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD681825A75F3DF3B033D3544F8826488F3FA8A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4ypLUwe2kvnmjgXYnNZDyD2S3Jc6QsygoTaA8MRL9in/1/323830343a346262303a3a2f33322d3438203d3e20323637333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:74:83:e3:ad:4b:f9:cc:f7:97:d1:f6:bb:4d:ed:f3:e6:11:
         7a:e7:35:1d:6a:55:00:6c:50:7b:2f:af:e9:20:c8:06:65:9b:
         78:eb:8a:66:a8:aa:16:69:5a:77:a8:2f:b9:c7:8e:f6:e2:52:
         f7:2b:1c:37:35:2c:15:74:a7:70:01:6d:5a:20:33:69:4c:41:
         b2:e1:62:2e:fe:4c:a9:62:7f:e0:85:f0:e4:a2:99:e2:10:f0:
         28:66:59:08:e4:d1:81:2e:ca:25:4f:a3:0e:da:8b:a9:a4:bc:
         57:bd:4c:ad:ff:90:a4:3f:85:25:2c:59:44:96:43:23:49:f4:
         3a:ca:bd:89:39:ba:11:d6:c6:c6:16:03:1f:29:ba:ae:83:d7:
         63:95:5a:8a:5a:4b:87:5e:31:99:62:8e:74:02:5d:db:ee:dc:
         ca:9f:51:8f:cf:2a:96:a7:9d:48:7c:33:15:8c:60:78:b1:a4:
         cf:01:5d:a3:a4:11:3b:ae:08:2b:9e:ea:09:39:d0:b1:c3:e3:
         8e:6a:09:94:b2:07:83:dc:92:ac:09:23:46:13:5d:a1:05:b1:
         39:cc:9f:d2:b6:e9:f0:dc:0f:42:5b:c5:df:4d:fc:3f:66:12:
         71:e2:b5:f7:00:86:6f:34:ca:1d:07:ba:4c:b4:76:4b:a3:8e:
         93:9a:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org