Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa
File:                     323830343a346364383a3a2f33322d3438203d3e20323637333936.roa (raw, json)
Hash identifier:          Xuq5ianxWUyixGg7RexSho6Nqw6OST4J4fA0T+KRD9o=
Subject key identifier:   F2:59:3D:D3:F1:30:E8:64:21:EC:B9:24:0C:43:F6:02:8B:8F:0D:F7
Certificate issuer:       /CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
Certificate serial:       5834E86BB53F51268899919902F54F1A1FBCE6EF
Authority key identifier: F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa
Signing time:             Wed 05 Jun 2024 19:27:09 +0000
ROA not before:           Wed 05 Jun 2024 19:22:09 +0000
ROA not after:            Wed 04 Jun 2025 19:27:09 +0000
asID:                     267396
IP address blocks:        2804:4cd8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl
                          rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:34:e8:6b:b5:3f:51:26:88:99:91:99:02:f5:4f:1a:1f:bc:e6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DBFF2FE021B3683C0E806DE017C6E31040C6D0
        Validity
            Not Before: Jun  5 19:22:09 2024 GMT
            Not After : Jun  4 19:27:09 2025 GMT
        Subject: CN=F2593DD3F130E86421ECB9240C43F6028B8F0DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:21:c7:3f:72:b2:84:bb:ff:b3:81:0a:33:
                    aa:47:93:97:8a:9f:bd:92:c1:fe:85:0f:aa:21:82:
                    13:4b:56:92:ea:cf:b9:42:2f:8f:1c:b9:10:34:8c:
                    e0:70:63:b3:bf:8e:b9:2c:1a:00:a2:d8:7b:ea:22:
                    14:c0:d2:0f:d7:5d:19:3c:d9:f4:8d:6b:b1:25:90:
                    4e:f2:d7:45:32:81:31:44:65:58:a4:74:ab:24:73:
                    a3:36:c0:26:62:c2:2d:c8:ed:9e:d0:9c:d5:64:21:
                    72:1b:18:ca:80:4e:5d:da:d6:e5:08:16:4f:c0:23:
                    c5:cc:1f:9b:1f:da:4d:11:d8:72:c6:57:e1:ff:51:
                    6f:1f:27:2e:b1:f2:d3:89:02:ad:07:6d:15:9a:16:
                    8a:ae:1f:6e:3b:0a:3b:a9:30:e3:44:af:c3:6b:da:
                    f4:a0:e0:83:dd:22:07:4a:0d:78:ae:24:0a:ae:63:
                    b5:55:eb:bf:dd:86:81:ef:e7:63:45:b0:25:83:16:
                    d6:e2:5c:90:9c:e6:e5:3d:0b:bf:77:cc:c1:af:23:
                    ec:c2:8d:3d:01:09:8e:7a:a0:ea:06:e8:f9:43:9e:
                    a6:2f:03:9d:bc:17:2d:16:3a:da:05:4f:b4:07:dc:
                    60:d9:b8:ea:65:4c:23:7d:a8:eb:ef:3f:29:63:d6:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:59:3D:D3:F1:30:E8:64:21:EC:B9:24:0C:43:F6:02:8B:8F:0D:F7
            X509v3 Authority Key Identifier:
                keyid:F3:DB:FF:2F:E0:21:B3:68:3C:0E:80:6D:E0:17:C6:E3:10:40:C6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3DBFF2FE021B3683C0E806DE017C6E31040C6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/323830343a346364383a3a2f33322d3438203d3e20323637333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:88:f4:75:aa:94:7c:bf:f7:d3:de:a1:ef:c1:9b:fe:45:
         2c:48:02:0e:1b:2a:3e:c7:75:a5:a8:31:3f:2f:30:7e:37:9b:
         70:26:d8:09:16:3c:08:d4:b1:be:a3:66:d1:a4:f7:8e:2d:12:
         0b:c1:4a:ef:dc:64:0a:6b:48:ae:2d:92:45:54:47:e6:c9:bd:
         7c:1d:ae:bc:2b:08:da:a6:ed:90:2b:b4:ef:7a:75:6f:20:2b:
         b2:ba:ec:42:11:41:3a:ca:c6:0e:44:c8:0a:77:41:a2:47:32:
         b8:b0:5e:39:02:43:62:28:53:ee:1a:03:fd:97:74:a0:f1:8a:
         39:46:d7:dc:44:e9:11:0d:da:83:2e:3b:52:1b:52:f8:f6:ab:
         65:b6:30:94:67:78:b6:47:90:40:55:e8:12:10:1e:01:a6:e4:
         12:9a:f3:b2:8e:76:d6:21:88:06:8b:76:31:11:bd:44:9c:6e:
         8e:85:ab:f6:3b:b0:2f:ec:70:df:a3:14:6b:24:ab:3f:17:46:
         b9:4b:f7:ea:7a:23:ac:90:79:ba:5e:69:89:4b:4e:43:cd:13:
         c0:3a:8f:82:0f:33:87:58:08:94:81:32:48:65:c3:1a:3a:1f:
         47:e5:df:01:a0:68:d7:a6:75:8b:9f:ae:68:85:e2:02:71:66:
         e6:cc:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:25 2024 by rpki-client on console-fra.rpki-client.org