Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa
File:                     323830343a313063383a3a2f33322d3438203d3e20323633363439.roa (raw, json)
Hash identifier:          1skydAQrz5jPdxRy/kli+ITVQvUN/7IMgOhPDPetySA=
Subject key identifier:   93:2D:DE:54:CC:50:ED:A0:22:5D:CC:87:A7:95:00:1F:84:79:7F:68
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       6E53321582630C661A0C19B9A42D59ACE60E7523
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa
Signing time:             Wed 03 Apr 2024 20:41:26 +0000
ROA not before:           Wed 03 Apr 2024 20:36:26 +0000
ROA not after:            Wed 02 Apr 2025 20:41:26 +0000
asID:                     263649
IP address blocks:        2804:10c8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:32:15:82:63:0c:66:1a:0c:19:b9:a4:2d:59:ac:e6:0e:75:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Apr  3 20:36:26 2024 GMT
            Not After : Apr  2 20:41:26 2025 GMT
        Subject: CN=932DDE54CC50EDA0225DCC87A795001F84797F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:15:7e:06:ac:58:3a:ad:c9:01:4f:51:06:
                    42:60:07:52:c5:a3:3e:c8:64:59:b3:24:1d:49:80:
                    61:eb:72:fd:91:c4:3e:c7:2d:8d:bc:c5:2b:d2:18:
                    f4:4d:c3:72:14:c7:9c:d5:cd:16:d6:67:71:47:e8:
                    c6:bd:d5:fa:d5:8b:f5:8b:04:ec:7b:08:f6:1f:11:
                    11:a4:55:ae:26:43:d3:27:5d:01:be:d3:71:d0:7c:
                    69:aa:50:44:d7:48:2c:6a:4d:88:c0:c8:c8:3f:2d:
                    fd:02:3d:a5:1f:12:d7:fa:d2:85:fd:7d:ec:2d:67:
                    17:8c:ed:5f:7b:6e:75:1f:e0:db:4f:e6:f1:11:66:
                    48:ec:50:c5:33:89:61:90:39:48:ef:5b:fe:ed:73:
                    1a:cc:2f:97:27:f8:00:dc:88:05:1a:1f:1b:20:d0:
                    b8:5a:70:50:2d:07:83:5f:98:b8:79:39:ab:4c:25:
                    5c:69:b2:e7:77:e5:03:0d:84:de:85:f6:80:5d:0a:
                    52:b2:3a:6e:41:33:ba:2f:85:c2:57:f9:71:f6:eb:
                    dc:0e:e5:0a:45:a9:2b:25:50:5e:86:98:2a:bf:e9:
                    eb:da:a4:25:42:99:5f:2d:11:ff:89:97:a9:bf:0d:
                    7f:53:e6:03:1e:10:3b:d6:0b:aa:01:82:c3:44:60:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:DE:54:CC:50:ED:A0:22:5D:CC:87:A7:95:00:1F:84:79:7F:68
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/323830343a313063383a3a2f33322d3438203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:2e:1d:fe:93:93:9d:e8:2b:35:e7:3d:61:f0:68:66:73:
         9c:cc:f7:68:18:3f:db:0a:d4:7e:9e:c4:0f:6f:ac:c5:ff:a0:
         80:9d:f8:2f:8a:04:5b:13:1c:03:20:ec:0f:71:c4:fe:9d:a7:
         2a:37:41:f1:a4:9b:f7:51:87:13:26:e9:7b:94:88:e0:2f:3f:
         27:fe:87:9e:fb:dc:08:0a:d2:08:3f:8e:bd:e8:cd:62:96:fe:
         68:4e:42:01:52:7d:4c:a1:6c:8e:b5:41:fe:9b:69:32:83:5c:
         27:70:93:cb:66:7c:9c:fc:80:c6:15:2e:1d:bb:62:38:2a:d8:
         6c:25:6c:9c:0a:51:01:6a:57:5a:0c:5a:15:82:d9:5f:14:e0:
         da:f1:47:b9:86:b3:79:e3:ef:41:d5:25:f4:8c:c5:21:a2:8b:
         66:d6:d2:5a:a5:0d:68:3a:94:43:16:60:9c:9e:d7:c0:a5:b8:
         78:fc:29:8e:13:27:99:21:52:4f:5c:57:9d:9b:d9:39:57:4b:
         b9:3f:32:17:c8:a5:b7:f7:6b:43:40:e4:91:70:cd:74:7b:7f:
         38:dc:3c:b2:1c:8d:af:aa:18:b8:84:47:7c:b1:b9:fd:83:a0:
         51:00:28:77:50:ca:b7:75:11:c2:c7:50:3d:a9:56:a7:85:08:
         8c:a1:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org