Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa
File:                     323830343a343331303a3a2f33322d313238203d3e20323637353436.roa (raw, json)
Hash identifier:          XWO5cq2lW+0P/hRFzjfukYhOeMs1T+o49xcfeI+QNPI=
Subject key identifier:   EE:7D:A8:DF:19:9B:48:B0:69:72:44:3D:56:E7:E8:6D:A2:E0:5F:B2
Certificate issuer:       /CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
Certificate serial:       5D0B7C81360D0D64DA08B0CB959660ADC0AE226B
Authority key identifier: 98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa
Signing time:             Fri 05 Apr 2024 03:20:25 +0000
ROA not before:           Fri 05 Apr 2024 03:15:25 +0000
ROA not after:            Fri 04 Apr 2025 03:20:25 +0000
asID:                     267546
IP address blocks:        2804:4310::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl
                          rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0b:7c:81:36:0d:0d:64:da:08:b0:cb:95:96:60:ad:c0:ae:22:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D707DA0F6D721CA9056AE0B7126EDD214AD7D5
        Validity
            Not Before: Apr  5 03:15:25 2024 GMT
            Not After : Apr  4 03:20:25 2025 GMT
        Subject: CN=EE7DA8DF199B48B06972443D56E7E86DA2E05FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:92:cb:83:37:fe:05:4b:c7:a2:32:1b:82:
                    e4:71:72:52:fe:c5:55:fa:c2:34:ff:75:ef:2c:c3:
                    b2:fb:fc:4b:95:5a:33:d4:49:ee:8b:0c:a8:70:ae:
                    e3:6d:38:e5:94:0d:a0:69:75:37:b8:34:b1:6d:54:
                    f0:6f:89:27:63:cf:6e:21:0a:c9:3c:3b:f6:f7:9a:
                    ff:9e:bf:ea:7b:13:c7:6e:a3:24:d9:43:3e:52:52:
                    cc:38:10:cf:e9:87:f9:aa:a6:c0:36:41:11:ee:21:
                    70:5d:b1:f3:0e:10:f4:4c:6a:f7:f6:75:47:c9:93:
                    c0:fe:59:4b:af:09:05:bb:ac:64:57:aa:af:fa:60:
                    ef:2e:51:ba:cb:04:8c:a5:ec:43:80:a9:ca:7b:9f:
                    da:95:b8:57:ee:8e:e6:5c:24:b5:c2:40:b8:0d:3b:
                    14:9f:8f:f1:6d:db:c6:d9:c0:b0:15:b7:87:1d:51:
                    3f:a8:d0:8d:d2:ce:7b:ef:4a:21:c7:30:17:c4:35:
                    87:c3:d4:17:9d:fc:5d:2e:2d:1b:15:71:f5:e0:1a:
                    11:00:46:b8:a2:4c:1e:a9:00:fa:cd:8c:4f:89:f3:
                    bd:8c:51:4a:19:70:86:92:00:c6:7b:f1:4a:cf:16:
                    42:e7:57:11:92:96:cb:43:a5:bf:87:73:fa:f8:cc:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7D:A8:DF:19:9B:48:B0:69:72:44:3D:56:E7:E8:6D:A2:E0:5F:B2
            X509v3 Authority Key Identifier:
                keyid:98:D7:07:DA:0F:6D:72:1C:A9:05:6A:E0:B7:12:6E:DD:21:4A:D7:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98D707DA0F6D721CA9056AE0B7126EDD214AD7D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/1/323830343a343331303a3a2f33322d313238203d3e20323637353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:67:31:6b:fe:0a:32:26:98:89:8a:ae:ab:0d:7e:0e:e9:60:
         7c:61:78:50:24:1c:f0:2e:3d:e3:b5:35:40:5f:ec:69:0c:09:
         77:ac:a3:28:99:ca:2a:32:a5:a5:bc:8d:91:39:88:ad:bf:a4:
         46:2c:1b:3a:9b:16:e3:17:db:46:fc:33:00:6e:0a:70:30:31:
         b4:22:1d:3e:10:73:6a:5d:8d:b4:77:2a:b0:2b:4f:cd:e8:9c:
         74:70:13:d6:f1:ae:2c:f0:c9:78:1d:d4:f6:70:0b:a6:c9:fa:
         b6:c3:37:a4:e5:45:9b:2c:f3:36:00:11:d4:a7:36:ed:aa:ea:
         c7:00:25:05:6d:c4:e7:04:e1:bb:0d:3a:31:8e:db:d6:e4:00:
         b5:e5:dc:4f:b5:de:1c:bb:1e:b2:79:5e:d0:4c:e0:95:f2:78:
         2a:63:d0:b3:2e:62:53:6c:f4:9e:36:a9:5e:0e:4a:07:12:9d:
         5c:62:9b:9b:5f:72:68:0a:f7:1b:d6:bd:f9:57:48:06:50:80:
         ce:2b:20:9c:8d:c6:38:1c:d5:ae:14:df:93:a3:96:ef:3f:92:
         db:07:34:9a:19:5a:46:23:f4:fa:69:0f:4e:12:00:3a:4d:37:
         be:1a:8d:20:b7:56:1f:2a:f3:df:68:f7:c7:9d:d2:96:dd:86:
         28:d7:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:46 2024 by rpki-client on console-fra.rpki-client.org