Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
File:                     323830343a376264633a3a2f33322d3438203d3e20323731343539.roa (raw, json)
Hash identifier:          ViVPIRTQQcFjXofv42R1lbD5QSnphGGfLy7fLjGPJPk=
Subject key identifier:   34:D0:8F:6B:8E:F8:D1:32:58:14:46:1A:94:3B:6C:1C:1D:D9:23:AB
Certificate issuer:       /CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
Certificate serial:       3E1F7903EDB9EA5F471887182F10583367B2D9C9
Authority key identifier: 9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa
Signing time:             Wed 03 Apr 2024 23:59:56 +0000
ROA not before:           Wed 03 Apr 2024 23:54:56 +0000
ROA not after:            Wed 02 Apr 2025 23:59:56 +0000
asID:                     271459
IP address blocks:        2804:7bdc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.crl
                          rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1f:79:03:ed:b9:ea:5f:47:18:87:18:2f:10:58:33:67:b2:d9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B57A6172822ADD9870A24E746B19FCFAD78E2E9
        Validity
            Not Before: Apr  3 23:54:56 2024 GMT
            Not After : Apr  2 23:59:56 2025 GMT
        Subject: CN=34D08F6B8EF8D1325814461A943B6C1C1DD923AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:b1:22:f4:f2:87:0c:3b:13:da:33:15:48:
                    c5:5e:d7:8b:cd:e6:f1:5d:f3:78:96:c9:00:cd:81:
                    e2:da:db:03:51:c7:69:18:00:b0:62:57:c0:7d:06:
                    3a:c0:90:2f:24:07:8a:a2:17:eb:a8:72:7f:f5:d4:
                    6e:b3:c8:8c:7a:24:12:49:11:c0:38:3c:4a:50:27:
                    93:63:bd:81:5d:eb:22:34:b1:27:11:e3:17:21:17:
                    7c:3d:6d:9b:8d:82:be:8a:ce:13:08:1f:99:81:1b:
                    4f:9c:e1:59:db:00:99:de:48:c2:81:fd:35:f3:c5:
                    e2:21:7f:25:20:c7:b1:93:7a:21:f1:ab:d0:76:cf:
                    22:81:31:45:9d:71:dc:2c:c0:5f:0a:ad:1c:3e:67:
                    1b:6d:2b:8c:20:ce:dc:be:86:39:8d:a6:84:0b:58:
                    c4:86:42:54:b0:c8:e0:6e:3a:53:61:ff:50:53:5f:
                    af:98:df:63:66:42:f4:b7:56:a9:8e:4d:14:01:9f:
                    28:f5:02:86:48:df:2d:e4:c2:bd:13:66:cb:01:b7:
                    3f:44:91:d7:20:bc:90:2c:f5:7b:08:53:f0:54:69:
                    4c:c7:3b:6b:d3:c3:74:e0:e6:11:3a:c3:46:84:9a:
                    20:69:e5:e2:c5:f3:65:07:bb:eb:d1:88:41:09:3c:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D0:8F:6B:8E:F8:D1:32:58:14:46:1A:94:3B:6C:1C:1D:D9:23:AB
            X509v3 Authority Key Identifier:
                keyid:9B:57:A6:17:28:22:AD:D9:87:0A:24:E7:46:B1:9F:CF:AD:78:E2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B57A6172822ADD9870A24E746B19FCFAD78E2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFGrK8RodyYfdZVv2hdamZPzQF6jJiaReZ6nMqdYkEnu/2/323830343a376264633a3a2f33322d3438203d3e20323731343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bdc::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:60:11:c4:a7:81:aa:1e:d2:71:07:4f:e1:a5:02:b9:b9:a9:
         4a:48:72:ee:16:2d:59:ff:78:db:d1:0c:08:63:65:6d:2f:45:
         f9:94:16:8e:0e:35:3f:e4:4f:dd:f3:67:e2:30:74:04:a7:d6:
         fa:c5:ea:d1:7d:85:81:45:db:d9:b8:81:b4:8e:e4:ee:f6:77:
         2d:e9:98:05:45:91:f2:2a:87:6d:38:77:01:a3:af:30:10:29:
         3c:7b:d6:0a:31:f5:8e:6a:4b:53:81:7d:43:0e:67:f7:3f:6f:
         6a:1c:1b:a4:c0:86:8d:5d:41:a7:3e:ea:1e:8c:fb:0e:14:ab:
         7c:ba:73:32:3e:18:1c:a8:66:30:05:f2:e6:43:23:c1:1a:6e:
         93:2a:39:8d:18:3e:9b:73:8e:e7:41:59:b3:d0:73:1b:e1:ed:
         62:79:6e:77:01:9c:c7:f5:d9:44:8c:81:e1:a1:b1:ac:a8:39:
         75:7c:fa:37:05:85:df:59:e0:a7:f2:55:11:d2:4a:41:a6:ac:
         3b:b2:8a:02:e8:af:ef:fb:09:e1:bb:53:53:bb:3f:9f:df:91:
         82:24:93:de:e9:15:44:c4:44:bf:8d:7a:6e:8a:b7:f6:41:cf:
         ea:23:da:29:2b:41:22:0e:81:34:ee:2c:09:fd:4d:b7:6b:15:
         9f:8f:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org