Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
File:                     323830343a363863303a3a2f33322d3334203d3e20323639373133.roa (raw, json)
Hash identifier:          PbvUByJm9H/0rYm80dTkilsYf6mPF1/ZI7d1lw8aUGI=
Subject key identifier:   32:3A:74:10:62:7B:D2:F4:19:87:84:F6:F1:28:60:A4:E4:19:E4:AE
Certificate issuer:       /CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
Certificate serial:       715A8CF5C1FE78623B5245B1B347B250CF850DAD
Authority key identifier: 71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa
Signing time:             Tue 23 Apr 2024 11:37:50 +0000
ROA not before:           Tue 23 Apr 2024 11:32:50 +0000
ROA not after:            Tue 22 Apr 2025 11:37:50 +0000
asID:                     269713
IP address blocks:        2804:68c0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl
                          rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:5a:8c:f5:c1:fe:78:62:3b:52:45:b1:b3:47:b2:50:cf:85:0d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714DBA4ABCB1DE4B97627125F21027C00193E5D9
        Validity
            Not Before: Apr 23 11:32:50 2024 GMT
            Not After : Apr 22 11:37:50 2025 GMT
        Subject: CN=323A7410627BD2F4198784F6F12860A4E419E4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:cc:b9:85:c4:9f:95:e3:b6:28:dc:b6:93:
                    25:56:15:36:7b:0b:66:9e:2d:a1:ba:05:2d:4c:0f:
                    e6:ef:23:57:b1:bb:35:69:57:b9:64:35:78:a4:57:
                    a3:31:a9:6b:30:13:a6:7c:a5:84:a5:4f:5e:72:97:
                    aa:f7:79:ec:da:23:2f:06:5a:e3:ea:dd:f4:97:e8:
                    7f:c7:40:84:03:53:8e:90:bc:be:ab:a3:3d:18:66:
                    32:a1:46:2f:f2:de:f8:d4:06:3e:13:97:11:fb:1a:
                    54:fd:2e:83:a7:b9:36:16:f8:b7:4e:06:f0:fd:80:
                    5a:01:41:cc:29:14:6f:45:d4:42:71:fc:12:2d:b4:
                    85:a5:f1:da:7c:9d:cd:f0:64:dc:87:eb:77:b7:c4:
                    cf:cc:34:fb:a8:36:d4:44:3a:fc:aa:f1:d1:ec:26:
                    bd:0c:b4:9f:1a:25:39:e7:df:2a:92:19:11:23:51:
                    6f:1b:5a:8d:50:e8:3a:39:45:99:60:ea:a5:e4:ec:
                    c3:fb:f1:dc:e0:8d:7b:e8:55:f2:29:80:26:c9:49:
                    65:d1:03:e8:d5:b1:c2:e1:ea:71:69:d0:6e:a9:b6:
                    46:e5:db:71:24:06:75:ab:ca:32:8f:9d:97:33:37:
                    c7:f5:1a:4b:28:85:36:98:a1:38:0a:f9:99:84:0a:
                    05:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:74:10:62:7B:D2:F4:19:87:84:F6:F1:28:60:A4:E4:19:E4:AE
            X509v3 Authority Key Identifier:
                keyid:71:4D:BA:4A:BC:B1:DE:4B:97:62:71:25:F2:10:27:C0:01:93:E5:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/714DBA4ABCB1DE4B97627125F21027C00193E5D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/714DBA4ABCB1DE4B97627125F21027C00193E5D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HKpSasfyKDDZ4LMnbdkiaUafqFq5JazURcXrUhw45QCP/2/323830343a363863303a3a2f33322d3334203d3e20323639373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:6b:99:25:65:73:59:9e:8c:88:36:fc:e0:e2:24:fc:ab:3b:
         94:2a:d9:07:5d:03:1d:b9:83:a8:f6:e4:df:84:d2:20:d0:e5:
         77:b2:4d:2d:60:d2:e5:f3:06:39:75:68:49:32:7d:94:48:dd:
         d8:c1:b9:37:f3:d2:ca:bc:29:fa:ba:73:5e:38:9a:a6:64:1e:
         e6:09:4d:bf:67:cd:fe:1a:b9:de:6b:63:b3:c8:cd:a7:2b:5f:
         53:6c:94:28:0a:88:cb:19:f1:43:34:e6:42:01:0b:24:cd:40:
         ff:e7:c4:cd:fe:a7:c4:66:9b:86:61:e1:06:9a:a9:07:7d:1f:
         64:0a:a0:67:7d:5d:e6:1a:44:85:49:00:3a:cd:9c:8e:cf:eb:
         05:1a:6b:0c:bd:40:9c:e1:8a:7e:8b:af:65:d9:c8:79:ca:07:
         d6:35:6e:24:46:9e:db:c2:6f:b6:6e:c1:94:a5:c8:2d:8e:23:
         36:20:85:84:7c:62:f0:b0:26:6a:26:7d:db:26:c8:5d:39:4c:
         0d:65:29:97:89:de:46:0f:86:38:d5:af:32:b2:38:be:1a:9a:
         7d:3b:b4:c3:94:f9:d5:66:70:06:c3:a3:59:9f:64:53:06:ff:
         dd:f4:17:7a:fe:93:65:d8:30:31:2f:ba:46:e2:6b:03:08:ac:
         ba:d8:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org