Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa
File:                     323830343a323766383a3a2f33322d3438203d3e20323633393332.roa (raw, json)
Hash identifier:          FwzkBVJudTUJ99AGhQaSOQSKW+LfibwVsfMPPGi561Y=
Subject key identifier:   C8:1A:E8:D7:AF:45:D8:5A:CB:D7:A2:6A:BA:1E:DF:B0:90:70:28:67
Certificate issuer:       /CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
Certificate serial:       48C0A800E90DC89179DDF169A2FF8E6E7B254F3A
Authority key identifier: DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa
Signing time:             Thu 04 Apr 2024 13:28:26 +0000
ROA not before:           Thu 04 Apr 2024 13:23:26 +0000
ROA not after:            Thu 03 Apr 2025 13:28:26 +0000
asID:                     263932
IP address blocks:        2804:27f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:a8:00:e9:0d:c8:91:79:dd:f1:69:a2:ff:8e:6e:7b:25:4f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
        Validity
            Not Before: Apr  4 13:23:26 2024 GMT
            Not After : Apr  3 13:28:26 2025 GMT
        Subject: CN=C81AE8D7AF45D85ACBD7A26ABA1EDFB090702867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:53:ac:31:6a:97:52:f4:42:0e:65:5c:3b:
                    09:7d:31:99:e9:61:56:93:5f:97:76:2e:9a:87:c1:
                    89:05:c6:bc:1b:4c:10:58:ec:e4:a4:1d:ae:7f:2d:
                    27:dd:ad:01:50:29:ea:78:b7:1e:ac:fa:9c:81:fe:
                    87:c7:10:49:bd:cb:69:71:af:4b:b5:80:05:6d:87:
                    c7:21:f1:4d:f7:fa:0f:c4:cd:ab:9d:4e:3d:95:21:
                    ed:57:3f:8c:a2:ce:b5:2d:df:62:f3:9a:5e:26:cf:
                    0e:04:d5:4d:a2:d0:b7:a1:bf:eb:e2:ac:21:56:41:
                    fe:8d:72:0f:92:b3:5c:5d:8a:1f:2a:cd:ff:f0:86:
                    35:8e:8c:d3:ed:6c:1f:5e:9a:5b:dd:2c:a6:43:33:
                    59:c9:bb:40:83:78:2e:75:30:31:c1:2c:ba:c7:d6:
                    99:5e:74:37:ef:06:79:79:20:d5:40:7f:86:7f:0a:
                    87:c9:4e:42:77:14:3b:c9:9b:8c:90:ba:1b:48:cd:
                    08:74:2b:ec:e6:f2:96:55:bf:ee:95:40:a7:fa:a2:
                    a9:a2:ea:fd:73:9b:50:1e:b6:8c:5d:e5:1d:d2:23:
                    78:1a:5d:bf:b8:c1:de:da:de:a5:5a:96:03:0b:37:
                    7e:1b:03:6f:b9:d2:a0:45:83:0a:a8:10:83:ae:9b:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1A:E8:D7:AF:45:D8:5A:CB:D7:A2:6A:BA:1E:DF:B0:90:70:28:67
            X509v3 Authority Key Identifier:
                keyid:DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:03:d1:28:30:77:82:13:bb:c5:ab:7f:b0:58:aa:92:f8:32:
         02:a3:d6:f1:f4:80:58:1e:37:35:39:0d:f7:87:2e:09:88:0c:
         a4:d2:1f:bc:e5:2f:89:e8:4c:4c:61:37:cf:c2:99:92:44:a7:
         b7:26:05:be:ec:ef:53:34:cd:7f:13:6d:03:6e:d8:c0:3f:35:
         b6:e7:de:6c:9f:f8:c5:f5:b0:e3:bc:5c:f8:0b:dd:ee:dd:91:
         f8:c2:d3:10:de:b2:a3:df:31:ca:8a:02:ed:bf:24:37:11:91:
         e1:b6:81:6d:f8:d9:a3:00:7d:4b:96:4c:7b:fb:76:53:ed:8a:
         6b:41:d9:07:aa:20:9f:79:b7:c5:6a:b6:1c:69:89:ff:09:9d:
         7a:63:33:43:9c:3e:1b:11:ef:f4:76:61:db:9f:f1:8b:e8:9b:
         40:7e:35:f6:46:e3:25:a7:e4:b6:dc:34:12:87:5c:a3:63:f9:
         94:1c:b8:a8:31:7f:c6:27:93:e4:c8:94:a5:8e:49:a3:b1:cf:
         cc:c4:16:60:8a:d7:5a:7d:50:f9:7a:68:b8:f0:65:56:32:19:
         1e:6b:b2:07:81:29:a4:ab:e4:7f:27:95:e6:d7:52:70:6c:f3:
         33:44:0a:18:67:b7:14:01:52:b8:9d:d6:05:b5:2f:9d:bc:ff:
         8d:a5:d1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:20 2024 by rpki-client on console-ams.rpki-client.org