Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa
File:                     323830343a386437633a3a2f33322d3438203d3e20323733333630.roa (raw, json)
Hash identifier:          Q/oN9vVs/AWJArwDKKN1+XgJX50g/mb7UPTHRvN9Ugk=
Subject key identifier:   24:E8:97:D9:EA:FF:88:4B:95:EF:16:8A:D6:20:7A:2A:B0:FB:F5:93
Certificate issuer:       /CN=1A7B76C05455AAE8EC63DEB880E0E825CA35DC54
Certificate serial:       44D73970E5B1A99E31BFB0435A063AECA01DFE66
Authority key identifier: 1A:7B:76:C0:54:55:AA:E8:EC:63:DE:B8:80:E0:E8:25:CA:35:DC:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa
Signing time:             Tue 06 Aug 2024 11:42:44 +0000
ROA not before:           Tue 06 Aug 2024 11:37:44 +0000
ROA not after:            Tue 05 Aug 2025 11:42:44 +0000
asID:                     273360
IP address blocks:        2804:8d7c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.crl
                          rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 13:27:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d7:39:70:e5:b1:a9:9e:31:bf:b0:43:5a:06:3a:ec:a0:1d:fe:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A7B76C05455AAE8EC63DEB880E0E825CA35DC54
        Validity
            Not Before: Aug  6 11:37:44 2024 GMT
            Not After : Aug  5 11:42:44 2025 GMT
        Subject: CN=24E897D9EAFF884B95EF168AD6207A2AB0FBF593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:c2:b5:14:22:13:ee:d0:88:fa:be:dd:5b:
                    7f:57:ae:20:11:5b:c5:0d:c1:56:d1:55:df:a3:12:
                    ed:47:fa:ff:23:13:ce:9f:ed:19:c4:79:21:f5:40:
                    1a:0d:e7:77:ea:7a:37:f2:0f:d8:f0:ac:27:b0:91:
                    f8:2e:51:ae:58:4c:11:34:5d:3e:33:8b:3f:20:60:
                    b4:9f:94:d5:58:62:fe:f6:cd:5e:ed:37:df:a4:a4:
                    20:3e:e1:86:12:30:5f:53:a0:fe:a3:51:d5:35:bc:
                    2e:48:4d:09:23:55:44:86:eb:56:58:d8:ef:11:cc:
                    35:06:f9:02:31:60:f8:5a:49:9b:e2:3f:20:31:29:
                    8e:64:6d:16:3d:7b:4b:be:29:67:7f:8a:ed:80:d7:
                    ab:96:51:8b:4a:bd:5e:c2:e8:ae:bd:55:06:31:2b:
                    54:28:52:30:37:5b:5b:50:34:ba:ff:4a:90:f9:9a:
                    65:16:a4:d9:e2:9f:e1:88:64:35:89:c3:08:0b:dd:
                    05:7d:da:04:29:a6:cb:87:a0:4e:f0:94:1b:6a:86:
                    d9:9b:9e:2c:fd:3c:f0:89:0a:6c:64:13:3a:69:5b:
                    52:c3:a8:b0:02:69:4a:8d:91:c7:01:a0:4f:ad:6c:
                    bb:49:8f:de:bc:84:ae:f1:97:dd:1c:de:3d:bc:9e:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:97:D9:EA:FF:88:4B:95:EF:16:8A:D6:20:7A:2A:B0:FB:F5:93
            X509v3 Authority Key Identifier:
                keyid:1A:7B:76:C0:54:55:AA:E8:EC:63:DE:B8:80:E0:E8:25:CA:35:DC:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A7B76C05455AAE8EC63DEB880E0E825CA35DC54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJJxRp9rkH4yMJJ6rDu1TNqKjpAzaSmmY7s3zpbgDP6X/0/323830343a386437633a3a2f33322d3438203d3e20323733333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:a1:f8:b9:ea:e2:7a:72:90:dd:a7:d0:b1:21:cc:f0:6a:7e:
         9b:96:ff:56:27:29:4a:1c:bc:91:8d:f5:fd:0c:e1:37:1d:8b:
         05:09:ea:44:f5:bf:c5:ae:4f:ec:0e:0a:12:8b:51:b6:91:bc:
         ac:29:89:6a:86:ec:ab:9c:25:3b:e9:67:73:f4:01:1d:da:55:
         fd:3c:23:c5:7c:9b:c3:bf:46:ea:06:00:e6:83:cf:34:cc:7d:
         51:b2:4c:f8:34:56:31:e4:82:4f:65:df:52:41:2c:13:f6:cc:
         a1:3d:bb:00:b8:50:08:47:1c:33:09:66:22:45:44:23:ed:56:
         4a:67:d2:3a:be:cf:7f:3b:18:9e:0c:02:ac:4c:ed:e3:4e:87:
         08:0e:73:91:72:27:d9:c7:51:35:d6:0f:97:8b:dc:71:ee:4f:
         1d:3f:eb:38:a7:98:af:b5:46:49:f3:4e:42:66:88:1c:64:47:
         47:66:be:23:8a:f8:b6:df:a3:5e:07:f1:f8:bf:e8:71:bf:c6:
         8e:c7:a3:a5:b0:85:3f:7e:58:41:b2:79:bd:02:3c:70:06:2e:
         7f:2a:50:1b:42:b5:75:0c:f3:49:05:11:b3:ea:c6:d3:31:24:
         c4:c1:d0:36:0d:15:b6:5b:1f:31:26:c2:b4:a3:44:b4:d0:28:
         ca:3f:4b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:49 2024 by rpki-client on console-ams.rpki-client.org