Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa
File:                     323830343a333364633a3a2f33322d3438203d3e20323635343231.roa (raw, json)
Hash identifier:          tJ57NvFADt9k89BFKH0BAiUOCUa7z9MLxdiSJejVBC4=
Subject key identifier:   7A:77:DB:76:45:CF:58:27:32:87:53:96:4F:7B:B2:7B:90:DA:88:15
Certificate issuer:       /CN=D903348767481BAEFE2C4B534D22308FC61456DE
Certificate serial:       2BB562751A263F7EDAFB60B171AE2EC81CD0604C
Authority key identifier: D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa
Signing time:             Thu 04 Apr 2024 18:45:14 +0000
ROA not before:           Thu 04 Apr 2024 18:40:14 +0000
ROA not after:            Thu 03 Apr 2025 18:45:14 +0000
asID:                     265421
IP address blocks:        2804:33dc::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl
                          rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b5:62:75:1a:26:3f:7e:da:fb:60:b1:71:ae:2e:c8:1c:d0:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D903348767481BAEFE2C4B534D22308FC61456DE
        Validity
            Not Before: Apr  4 18:40:14 2024 GMT
            Not After : Apr  3 18:45:14 2025 GMT
        Subject: CN=7A77DB7645CF5827328753964F7BB27B90DA8815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:e8:76:41:64:c7:99:14:49:aa:0d:2a:8c:
                    5a:5b:be:6e:ec:ea:ec:58:19:78:37:7f:a3:ad:59:
                    b0:76:49:2b:d5:4c:09:de:d9:05:64:43:c4:f7:bf:
                    95:2d:c3:ca:3b:0a:e6:91:26:85:78:65:a5:ea:b5:
                    79:c2:8a:78:a7:33:08:0a:2c:10:30:9a:92:80:4b:
                    85:0f:76:92:97:ba:eb:f8:46:33:f8:11:16:6a:31:
                    5e:ed:4c:eb:65:fe:5a:47:9c:67:a5:d3:79:19:7d:
                    3f:26:c1:e8:5a:55:6a:e3:1c:b6:e1:d1:8a:b3:ad:
                    c6:c1:85:1a:d5:69:4b:12:ba:ea:2a:7a:fd:e0:ab:
                    64:dc:80:df:fc:dc:55:ef:0f:fe:75:22:a6:a6:f4:
                    0c:43:14:86:dc:ae:1c:fa:bb:6d:da:66:58:69:c1:
                    21:ec:f6:c8:3b:32:76:22:28:47:0d:77:07:2f:fd:
                    5d:9c:ca:9a:4a:9e:71:0a:77:bb:60:a3:1b:f9:77:
                    97:ce:fc:e9:68:8e:de:ae:3f:af:5a:95:69:4c:ac:
                    ed:cd:b6:42:0a:0e:d3:7a:f0:85:58:0f:bf:d0:62:
                    a8:27:76:6a:9b:cb:a7:d7:21:e8:da:48:7b:3a:8a:
                    4b:0c:47:4b:c7:64:0e:11:e3:b0:37:a3:6b:a0:f7:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:DB:76:45:CF:58:27:32:87:53:96:4F:7B:B2:7B:90:DA:88:15
            X509v3 Authority Key Identifier:
                keyid:D9:03:34:87:67:48:1B:AE:FE:2C:4B:53:4D:22:30:8F:C6:14:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/D903348767481BAEFE2C4B534D22308FC61456DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D903348767481BAEFE2C4B534D22308FC61456DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFV4jGGCzjh6vU593SYeq3dVjwFDoseWYhTiAg3hwFdN/2/323830343a333364633a3a2f33322d3438203d3e20323635343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:33dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:aa:3f:06:80:a3:32:01:39:65:65:b5:1e:0c:36:a3:e6:
         5f:76:7d:ad:98:fb:8e:e7:e2:36:d5:1b:c9:b2:54:1d:74:94:
         e1:42:06:74:40:2d:46:62:f7:51:32:67:7e:07:53:02:59:9e:
         64:b2:d3:2c:cd:63:ce:e5:89:0c:c2:fa:5f:b8:92:89:f9:fc:
         74:e7:fa:c1:9a:6c:8c:db:af:bb:34:53:b0:8d:2a:3c:6d:39:
         13:d3:e0:29:32:93:de:e1:3b:1d:13:00:e6:5c:9c:cc:bc:5b:
         08:75:6f:75:be:bb:92:d4:8c:c4:f2:21:d8:e1:f3:21:98:03:
         f8:0c:22:eb:05:10:4f:25:a2:70:85:3c:75:f9:e2:9e:94:4b:
         c0:66:e3:0b:ea:f9:6a:5b:15:bf:f1:4b:3c:37:cd:8b:1c:1b:
         c9:6d:31:66:09:8c:4e:6b:39:20:84:d7:99:ac:03:49:bd:69:
         e6:79:c7:4a:f7:ef:f6:54:22:02:5e:4c:5a:16:af:16:f9:f4:
         29:30:2d:2d:08:8c:3c:03:12:62:32:49:64:01:a5:ec:2c:a9:
         fb:6d:f7:14:a3:c3:10:fb:ef:11:f8:31:cb:0a:7e:68:c8:34:
         56:96:8d:f7:ab:3a:91:1a:da:bc:08:eb:0b:e1:ec:3c:ec:39:
         d2:42:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:10 2024 by rpki-client on console-ams.rpki-client.org