Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
File:                     323830343a3338383a3a2f33302d3438203d3e203232303835.roa (raw, json)
Hash identifier:          W0aY/+B4EJeJWd+bAHxUbjP5fPg3x9nRxXL15p7xbJA=
Subject key identifier:   CA:03:8C:99:4E:DD:75:92:88:80:D5:F2:F2:0E:E8:1A:F6:D8:01:1B
Certificate issuer:       /CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
Certificate serial:       296865CF18D692F39D824C0DC8D6A7998F5EF709
Authority key identifier: D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa
Signing time:             Wed 03 Apr 2024 18:31:54 +0000
ROA not before:           Wed 03 Apr 2024 18:26:54 +0000
ROA not after:            Wed 02 Apr 2025 18:31:54 +0000
asID:                     22085
IP address blocks:        2804:388::/30 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl
                          rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:68:65:cf:18:d6:92:f3:9d:82:4c:0d:c8:d6:a7:99:8f:5e:f7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5EBEEFD45A0D90B5E60CD8D4B4384098353E828
        Validity
            Not Before: Apr  3 18:26:54 2024 GMT
            Not After : Apr  2 18:31:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:72:e7:56:d8:fd:95:59:25:6e:aa:10:2f:
                    f0:82:ee:b8:d6:08:fd:05:7c:f8:c0:2b:d0:df:f3:
                    b7:ea:ee:86:cf:3e:ef:89:68:e0:8d:4a:34:77:68:
                    5a:b8:19:1b:35:fe:49:6c:3e:0e:0c:a2:a5:1d:f0:
                    77:96:64:24:93:0a:05:5a:01:15:98:00:71:05:3f:
                    7a:51:76:4f:6d:17:66:fd:0f:f4:0e:4a:90:4c:81:
                    1b:2f:f6:2b:ee:74:83:5e:a4:91:f3:2a:2a:4c:48:
                    c2:47:b4:aa:6d:c2:c3:15:ec:09:fc:47:42:53:6c:
                    4c:18:3d:92:45:80:a0:8e:0f:80:7e:65:c2:80:58:
                    a3:19:9b:67:65:e2:97:93:dd:db:0a:94:00:ee:53:
                    9d:fa:22:82:e5:06:64:11:13:a5:3b:a3:7e:aa:43:
                    06:be:74:41:d0:aa:ee:1c:84:ea:4e:ff:17:f9:b5:
                    c5:28:58:21:c1:72:b3:27:bc:67:bf:0c:9c:c1:5b:
                    a0:fa:1e:f3:67:ea:19:59:01:ad:0d:11:90:80:f1:
                    44:63:fd:f5:e9:92:05:93:b8:2c:3a:98:6b:18:ea:
                    5a:de:f1:0f:b8:49:84:76:35:7c:84:8f:d7:ab:54:
                    32:b5:60:4d:43:fc:67:0a:b2:e8:03:a3:d4:72:33:
                    d4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:8C:99:4E:DD:75:92:88:80:D5:F2:F2:0E:E8:1A:F6:D8:01:1B
            X509v3 Authority Key Identifier:
                keyid:D5:EB:EE:FD:45:A0:D9:0B:5E:60:CD:8D:4B:43:84:09:83:53:E8:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5EBEEFD45A0D90B5E60CD8D4B4384098353E828.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HFYqcrLVv1JJWzvUFgR8qZzpidLQTtkBkXZs6geQduie/1/323830343a3338383a3a2f33302d3438203d3e203232303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:388::/30

    Signature Algorithm: sha256WithRSAEncryption
         8b:3b:bf:80:76:fa:d6:3b:86:60:6d:87:91:15:81:77:e6:36:
         6b:1e:6e:a6:4a:a2:12:41:ed:01:f6:13:50:78:c7:bf:35:48:
         98:e4:93:ef:cb:14:0d:9b:4b:e3:ea:5a:e9:6e:00:ba:c5:4d:
         e2:e8:be:52:1d:8a:98:22:f2:ed:b5:02:c6:56:37:45:b1:c5:
         7c:7e:7e:95:8c:ea:f3:1d:b9:e6:11:5f:ae:51:7f:c8:67:af:
         09:b5:f3:8a:2c:cb:6b:34:f5:c0:34:0e:8b:ea:5c:32:18:d4:
         5c:4a:da:44:cd:df:4a:0b:cb:fe:0f:21:6b:95:b9:cc:9a:3f:
         33:f5:22:89:6a:d6:63:67:79:40:23:42:86:4a:3e:53:08:11:
         77:7d:87:46:64:2e:ca:20:ff:d8:f3:3e:54:07:f3:c3:dd:a0:
         41:05:a0:62:30:61:c5:ce:21:bd:ec:78:d0:95:dd:d2:f1:16:
         c7:c7:c7:24:b9:c6:f8:26:ca:7b:82:74:60:7a:74:4a:0b:8e:
         67:90:19:03:0d:7a:da:9a:26:6c:94:4b:13:d7:c2:53:5c:f8:
         03:c3:9f:2f:c1:38:48:de:a6:76:99:82:8c:55:13:88:02:91:
         85:a3:af:1a:47:39:14:fa:72:94:e7:8a:5f:61:48:1a:b5:3a:
         ca:2b:08:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org