Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33322d3332203d3e20323635303136.roa
File:                     323830343a333137343a3a2f33322d3332203d3e20323635303136.roa (raw, json)
Hash identifier:          3fS2uNRi8Oe2xrcdGccGCxZO8N8TyIe6tbo+ZWZYwKE=
Subject key identifier:   6D:9A:6B:10:15:11:41:3F:E9:03:01:A1:2C:21:91:CF:50:C9:3B:12
Certificate issuer:       /CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
Certificate serial:       367C8591C264725B241FDDC3EF5FD99C6C5CF51F
Authority key identifier: EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33322d3332203d3e20323635303136.roa
Signing time:             Mon 10 Jun 2024 14:05:17 +0000
ROA not before:           Mon 10 Jun 2024 14:00:17 +0000
ROA not after:            Mon 09 Jun 2025 14:05:17 +0000
asID:                     265016
IP address blocks:        2804:3174::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl
                          rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7c:85:91:c2:64:72:5b:24:1f:dd:c3:ef:5f:d9:9c:6c:5c:f5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56
        Validity
            Not Before: Jun 10 14:00:17 2024 GMT
            Not After : Jun  9 14:05:17 2025 GMT
        Subject: CN=6D9A6B101511413FE90301A12C2191CF50C93B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:36:2f:6a:88:7c:b5:51:04:7e:7b:a8:ab:
                    92:ef:57:eb:c8:80:a0:65:22:de:8a:2c:29:1c:0e:
                    8d:e5:59:b1:4a:d3:ae:b9:9e:01:7d:5d:b2:75:45:
                    d5:70:9a:c7:a8:fa:74:6d:d0:21:c9:a8:8d:dd:b5:
                    24:97:f2:0e:7d:46:e4:69:03:41:d7:cb:1e:03:13:
                    54:03:c3:77:43:5d:8d:dc:ab:05:2f:e3:93:2c:01:
                    62:90:eb:71:3c:63:c0:23:24:6a:05:1e:0b:df:53:
                    5a:04:1a:05:cd:f4:9c:fb:5b:51:d5:72:1d:5f:f9:
                    5e:54:ed:83:89:05:3e:49:7d:04:a2:19:cc:c3:8c:
                    50:2b:7d:d8:71:3d:c1:c9:e9:90:a4:2c:36:30:a1:
                    44:e9:48:23:7d:01:ff:a7:51:89:53:d0:6f:fc:f9:
                    ca:42:69:dd:07:c3:59:39:90:54:24:a0:a2:96:1e:
                    e1:d6:b0:09:96:c0:63:af:bd:2a:b3:42:01:67:6d:
                    ab:98:cb:b4:ac:8a:30:94:73:af:42:37:89:5e:b0:
                    95:25:09:2e:ec:2b:0a:85:a9:48:bf:a7:58:8d:3b:
                    c7:97:c6:c0:89:2a:7e:3c:66:71:db:bd:5e:5c:ce:
                    40:fa:cb:7e:85:95:f0:c0:d6:c0:d8:54:3b:23:fe:
                    22:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9A:6B:10:15:11:41:3F:E9:03:01:A1:2C:21:91:CF:50:C9:3B:12
            X509v3 Authority Key Identifier:
                keyid:EA:B8:84:B7:08:23:F4:FB:D6:D5:A6:BC:30:F2:4E:63:D0:B0:CE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAB884B70823F4FBD6D5A6BC30F24E63D0B0CE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/2/323830343a333137343a3a2f33322d3332203d3e20323635303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3174::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:52:2b:07:c9:98:cf:29:d2:b4:cd:e4:03:55:5f:c0:16:b6:
         ed:21:b5:4f:44:b7:6c:fe:60:db:c8:b2:91:5e:a7:11:d7:72:
         fe:1c:61:f5:39:3d:72:b2:a5:92:a9:1c:57:ec:f1:d7:2e:c5:
         73:27:c5:e6:2f:6d:92:4d:25:dc:36:4b:32:46:ef:c0:ba:12:
         25:a1:5b:40:d4:1d:56:35:5e:10:ab:b9:cc:75:f6:af:b3:47:
         28:18:bd:08:77:3c:ee:2d:5b:88:dd:7d:5c:74:2a:6f:79:12:
         47:21:be:0c:04:5d:50:68:2d:20:6a:bf:30:36:a6:44:fe:a1:
         b6:9c:2f:4e:36:12:5c:fa:ac:db:be:23:33:ec:54:fa:3f:df:
         8c:25:92:c8:37:08:8b:42:02:a5:da:5e:3e:da:77:56:a3:b2:
         9b:1e:f1:d2:3b:1a:aa:8f:47:54:57:22:a8:d4:ef:ac:24:d6:
         91:56:f9:33:6c:4e:dc:29:3a:db:1e:f6:12:9f:7b:5b:7c:5e:
         d2:62:7d:80:57:7b:06:1d:ad:86:f6:eb:d4:6a:8b:a4:d8:f2:
         73:df:be:7e:22:9e:6b:c8:5b:77:a4:9c:a7:89:e0:21:ac:93:
         99:47:25:ea:cf:f5:42:e2:7b:59:79:a9:89:73:49:6e:0c:a6:
         7d:9c:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:34 2024 by rpki-client on console-fra.rpki-client.org