Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d313238203d3e203532353237.roa
File:                     323830343a6465633a383030303a3a2f33332d313238203d3e203532353237.roa (raw, json)
Hash identifier:          LqcTbjzyc6Fz0hSC/mba36mxGduHOVyS8iKyBoALRKM=
Subject key identifier:   BF:5F:DA:79:DF:8D:2D:A3:39:C9:B7:1F:4D:77:F6:8E:BA:5F:9C:25
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       42285416B4B6F842A3E57CF52802BBA8DD0F828E
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d313238203d3e203532353237.roa
Signing time:             Thu 07 Nov 2024 13:59:59 +0000
ROA not before:           Thu 07 Nov 2024 13:54:59 +0000
ROA not after:            Thu 06 Nov 2025 13:59:59 +0000
asID:                     52527
IP address blocks:        2804:dec:8000::/33 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 14:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:28:54:16:b4:b6:f8:42:a3:e5:7c:f5:28:02:bb:a8:dd:0f:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Nov  7 13:54:59 2024 GMT
            Not After : Nov  6 13:59:59 2025 GMT
        Subject: CN=BF5FDA79DF8D2DA339C9B71F4D77F68EBA5F9C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f8:cc:84:4e:f2:60:ce:f3:0b:1c:59:39:32:
                    e1:b4:62:5c:55:c9:41:e4:90:f0:1c:b1:c4:74:c2:
                    5f:c9:9b:28:de:e2:4e:65:b4:e1:b4:5d:d9:d2:be:
                    8d:00:9a:f9:c4:af:f7:58:2f:c2:e7:9d:b7:6e:b2:
                    6f:74:c1:2a:45:3a:e2:be:25:3f:24:d4:42:80:62:
                    b4:07:d7:b2:65:ab:6c:1b:ee:a9:97:0f:5d:7c:e4:
                    30:ea:1f:62:78:11:a8:3c:43:2f:9e:88:03:f9:be:
                    0f:2e:07:c4:d6:48:61:53:73:45:37:53:6e:e8:57:
                    46:1c:c2:bd:fb:00:4e:78:d6:06:49:4c:c7:db:c3:
                    aa:a0:86:7c:35:ab:8f:3b:82:f9:2d:6c:fc:87:fe:
                    a9:bb:b4:d0:c5:e4:87:0f:d2:b7:60:35:47:0e:31:
                    9f:62:6a:be:b9:f0:1b:55:29:e0:71:42:a2:a0:2a:
                    83:09:de:cd:1c:73:c2:a0:11:3a:2f:26:df:0c:8f:
                    d9:c7:50:d5:50:1d:e9:93:dc:a6:9b:6d:a8:35:f4:
                    f3:ca:36:0d:7e:e8:09:84:e7:b8:80:0f:91:e8:7e:
                    46:3b:37:c8:ef:bf:57:ef:f7:72:9e:7e:94:e9:f1:
                    c5:4c:2c:8d:cb:fc:4c:c0:3b:e0:01:1f:c9:b9:4f:
                    ab:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:DA:79:DF:8D:2D:A3:39:C9:B7:1F:4D:77:F6:8E:BA:5F:9C:25
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a383030303a3a2f33332d313238203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:9c:0b:6a:bc:40:a3:8c:63:9d:01:a5:a9:db:37:ab:cd:
         e2:eb:ad:6e:6e:a0:e4:6f:1f:72:2f:20:25:f2:96:a2:33:29:
         6b:3a:e9:60:7e:2d:8e:a9:a6:5a:7b:e9:cc:e4:97:5b:00:20:
         a2:54:67:ca:91:cd:2a:4d:3d:a7:ac:b3:db:3a:38:52:2a:2c:
         b4:ea:87:5c:5c:ea:59:11:c6:14:8f:ed:bb:9a:f6:69:2d:30:
         0d:d2:5f:d7:fb:1c:35:e9:a1:ad:b4:fa:1f:26:a8:46:1d:41:
         06:6f:71:15:3c:13:80:6a:14:05:b1:3e:b6:83:f1:1b:9c:99:
         c6:a5:b7:46:bd:68:a1:56:33:08:29:1b:84:6b:6e:1d:d0:cc:
         80:ed:81:87:7e:ec:2c:7d:2a:65:51:e3:fa:62:b8:89:0b:60:
         70:9d:f3:d9:82:6b:19:d3:12:54:b9:bb:9f:35:e4:4d:44:a3:
         d6:96:92:db:b3:aa:5f:8c:a8:74:ad:0c:ec:8e:e6:75:80:d4:
         e4:26:22:1d:d5:7c:78:01:3f:f2:26:d7:2f:81:d6:23:67:a8:
         f5:9f:b1:c5:79:92:3c:26:d2:ff:73:d0:31:ef:0c:bf:c0:75:
         8c:d5:38:7a:6b:02:28:c6:d3:1c:91:fd:6a:5c:af:2d:c9:2d:
         69:a4:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:50:07 2024 by rpki-client on console-ams.rpki-client.org