Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
File:                     323830343a346163383a3a2f33322d3332203d3e20323637323633.roa (raw, json)
Hash identifier:          C/JW/5+W67z3bHrJD4GBQa9VrsbU/o7KtfAav89CUFM=
Subject key identifier:   A4:74:88:27:8B:AC:D1:11:A9:E9:9B:AD:2C:59:DB:68:61:08:22:DB
Certificate issuer:       /CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
Certificate serial:       23056C51FB2EA0A1D0782E190339CE1E7F867451
Authority key identifier: 9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa
Signing time:             Mon 14 Oct 2024 19:55:26 +0000
ROA not before:           Mon 14 Oct 2024 19:50:26 +0000
ROA not after:            Mon 13 Oct 2025 19:55:26 +0000
asID:                     267263
IP address blocks:        2804:4ac8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl
                          rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:05:6c:51:fb:2e:a0:a1:d0:78:2e:19:03:39:ce:1e:7f:86:74:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9
        Validity
            Not Before: Oct 14 19:50:26 2024 GMT
            Not After : Oct 13 19:55:26 2025 GMT
        Subject: CN=A47488278BACD111A9E99BAD2C59DB68610822DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:d0:16:54:5c:c4:73:00:04:fe:95:c9:c6:
                    1f:5b:17:63:f0:74:75:2e:8c:72:5c:57:9a:2e:04:
                    68:d4:09:41:58:f3:e0:14:02:58:76:4a:9c:bd:7a:
                    2f:30:c3:1b:42:9f:12:88:3b:48:46:15:27:89:d1:
                    20:b3:49:b4:22:12:f3:82:25:6b:af:4c:c1:47:20:
                    6f:e6:12:f2:1c:05:39:6d:c3:03:a5:02:b8:19:49:
                    01:09:6c:b3:31:cb:ad:9a:98:1e:12:c8:74:20:47:
                    a1:67:3d:55:c2:fc:ae:76:14:aa:bc:c7:d2:b3:07:
                    7b:de:e3:cf:3d:ef:fb:7d:a9:90:dc:c1:0f:f3:b4:
                    27:dc:f7:1e:9e:34:e0:8d:dc:63:ff:de:0b:87:05:
                    04:17:c5:8d:1a:62:7c:bb:d8:91:9d:ef:c0:bb:24:
                    5e:57:b2:e3:02:60:2c:b3:a6:75:1e:d6:3a:ae:1c:
                    5d:2b:25:18:ad:70:11:4c:c0:fb:e6:80:e9:2f:fc:
                    1a:ca:29:33:aa:81:7c:bb:3b:1c:af:22:4f:0d:f7:
                    df:4e:73:4b:6b:e8:3d:3c:fd:7c:d2:ec:18:69:6f:
                    52:74:f3:48:7b:a8:11:97:46:b4:12:7c:55:d9:de:
                    96:fd:19:2c:7a:fd:c8:99:45:23:09:75:c4:6e:b8:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:74:88:27:8B:AC:D1:11:A9:E9:9B:AD:2C:59:DB:68:61:08:22:DB
            X509v3 Authority Key Identifier:
                keyid:9E:8E:1D:B5:C3:3D:3F:C8:F8:E7:C9:93:01:15:80:AA:28:F3:0B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E8E1DB5C33D3FC8F8E7C993011580AA28F30BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/323830343a346163383a3a2f33322d3332203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ac8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:ea:91:cb:dc:99:bd:86:83:22:70:e6:ef:0c:42:2a:dc:
         d9:79:13:28:50:00:2e:cb:3b:be:09:c8:9e:eb:c6:b9:ad:99:
         cc:d4:0c:c9:52:80:9b:38:f5:61:f7:12:8a:7a:22:61:ad:ff:
         69:dd:bf:ea:72:53:fd:53:65:53:b6:24:e1:78:2b:05:22:ef:
         7d:c1:ed:54:d9:80:4c:99:8d:f5:bd:c4:5c:4b:2b:27:fa:8a:
         44:d7:a8:6e:94:0b:b5:55:c0:14:d9:72:c9:3a:3f:bb:46:28:
         87:c3:5a:db:c9:ce:ff:af:89:f2:54:5f:3e:c3:a7:62:ba:a0:
         b7:ce:8c:5f:bf:61:7f:5a:af:56:e2:51:2f:f9:e9:c9:86:3a:
         e1:0c:cb:f7:53:52:99:83:4c:b9:44:7d:69:6a:11:69:ff:40:
         2f:a2:57:21:34:95:57:8c:31:af:2c:f8:cd:21:c6:af:44:96:
         d2:20:f3:51:49:b0:96:65:6a:eb:b2:9f:d3:37:5b:98:e3:b0:
         19:78:91:66:93:85:9e:d5:44:f4:32:b3:02:5b:9f:27:ca:f1:
         ac:f2:01:9c:ff:a0:79:59:4e:1e:f7:60:db:bb:25:76:50:aa:
         28:01:a0:67:75:c4:c3:ac:e3:49:53:48:57:98:72:d7:9f:63:
         8e:49:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:46 2024 by rpki-client on console-ams.rpki-client.org