Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33332d313238203d3e203532353237.roa
File:                     323830343a6465633a3a2f33332d313238203d3e203532353237.roa (raw, json)
Hash identifier:          fzPwUO+RSnh44NWrcXOp5fn2q3aJE7JYfqh8EuGVOQM=
Subject key identifier:   5F:57:F1:1C:92:B8:80:30:D1:86:14:26:08:53:E5:B2:9D:98:93:25
Certificate issuer:       /CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
Certificate serial:       36C20D6D36755B100458CB774B7C2475E46AC1F4
Authority key identifier: 7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33332d313238203d3e203532353237.roa
Signing time:             Thu 07 Nov 2024 13:59:52 +0000
ROA not before:           Thu 07 Nov 2024 13:54:52 +0000
ROA not after:            Thu 06 Nov 2025 13:59:52 +0000
asID:                     52527
IP address blocks:        2804:dec::/33 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl
                          rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c2:0d:6d:36:75:5b:10:04:58:cb:77:4b:7c:24:75:e4:6a:c1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Validity
            Not Before: Nov  7 13:54:52 2024 GMT
            Not After : Nov  6 13:59:52 2025 GMT
        Subject: CN=5F57F11C92B88030D18614260853E5B29D989325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:47:92:f5:13:45:09:0a:c9:d6:93:40:ac:
                    e0:52:08:6e:fd:98:c2:a4:c1:d0:d9:ef:86:1a:3b:
                    9b:ae:4e:bb:f4:96:d1:01:ed:4f:eb:8b:93:c0:12:
                    1b:db:2c:56:67:cd:ca:78:c5:a4:11:89:e3:db:2d:
                    81:2b:80:cb:af:13:50:16:f3:14:93:02:54:33:ca:
                    42:20:c0:c5:9e:86:f4:a8:ef:8f:d3:1e:39:4c:1b:
                    af:56:04:f5:c6:91:18:3d:c2:18:12:bb:fe:e4:bf:
                    3e:bb:28:ba:25:c4:9c:5d:50:45:0a:2f:3c:ae:eb:
                    7f:49:e2:a6:9f:1c:e9:bf:98:d3:27:11:e7:89:ed:
                    87:44:6d:53:20:97:b6:2c:74:8c:62:eb:4b:36:b8:
                    d6:64:56:a6:a8:39:75:e1:a9:61:ff:4f:be:3c:d2:
                    ad:31:62:e6:c2:6e:2c:47:e3:de:cf:f0:2e:cb:5c:
                    56:56:66:1b:73:65:14:d6:36:0a:b9:f1:08:ac:af:
                    e5:cb:6c:bc:94:a5:13:c2:a0:81:5b:c5:05:ee:12:
                    a5:12:88:ee:45:85:7c:d4:42:be:d4:7a:48:e8:66:
                    3b:e0:4b:e9:62:c7:20:15:c2:25:b8:2b:79:07:4c:
                    33:19:e6:1a:f3:95:26:ce:b6:95:b7:d5:61:f8:fa:
                    57:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:57:F1:1C:92:B8:80:30:D1:86:14:26:08:53:E5:B2:9D:98:93:25
            X509v3 Authority Key Identifier:
                keyid:7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/323830343a6465633a3a2f33332d313238203d3e203532353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dec::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:ce:5e:4d:31:57:e9:4c:0c:14:77:69:c2:57:fe:0d:b0:d3:
         4e:3a:4e:e8:5d:d8:2e:60:31:40:c5:a8:d5:17:5a:54:8b:b5:
         1f:2f:12:90:ca:ff:66:d3:dc:c2:6b:17:75:88:54:10:4a:9d:
         c0:56:4b:36:70:27:62:be:f7:86:ee:e2:41:52:34:8a:c0:f6:
         05:f2:24:c5:4f:39:1a:62:47:6c:0c:3b:78:c8:99:b0:a7:62:
         ab:b1:45:8c:12:c3:14:26:56:7e:02:8d:6e:9e:fc:23:9d:45:
         0e:b2:6c:49:d8:34:02:fc:68:71:7e:c3:76:47:21:3e:ab:7d:
         c7:49:cc:e8:0a:1d:04:a5:a4:78:79:61:89:48:59:c2:2f:6d:
         bb:14:10:21:14:03:0e:63:cf:59:f5:d8:dd:7b:2a:62:ec:94:
         35:70:46:7c:6f:71:bc:91:8f:b8:a8:2c:e4:ed:68:f7:7e:19:
         70:be:c8:a4:c1:17:84:8c:19:eb:e9:04:98:ee:49:0f:41:51:
         64:40:c1:d4:1f:96:77:7b:54:7e:e5:57:e6:4d:77:30:4a:f4:
         e2:ab:95:94:02:91:e0:32:e0:59:e3:5d:d7:cb:6a:54:90:ea:
         d5:15:af:00:ab:96:54:76:41:a4:9d:10:c7:56:c4:43:00:39:
         d9:e4:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org