Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa
File:                     323830343a353236633a3a2f33362d3336203d3e20323638353137.roa (raw, json)
Hash identifier:          eO9l5Asgyn3jXzBTQZJgjHj4ipibEG/4AFj/+JDRCME=
Subject key identifier:   A5:7F:B3:97:8F:E5:96:48:F8:CF:C9:65:EA:23:31:F4:A6:95:4B:2C
Certificate issuer:       /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial:       4629DBAE060BE12EE65666A1D2B39B4A41D4E5C9
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa
Signing time:             Sat 27 Jul 2024 20:05:03 +0000
ROA not before:           Sat 27 Jul 2024 20:00:03 +0000
ROA not after:            Sat 26 Jul 2025 20:05:03 +0000
asID:                     268517
IP address blocks:        2804:526c::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
                          rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:29:db:ae:06:0b:e1:2e:e6:56:66:a1:d2:b3:9b:4a:41:d4:e5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Validity
            Not Before: Jul 27 20:00:03 2024 GMT
            Not After : Jul 26 20:05:03 2025 GMT
        Subject: CN=A57FB3978FE59648F8CFC965EA2331F4A6954B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:70:56:9c:ab:50:e3:6a:aa:e7:cd:47:fc:
                    98:c1:a6:72:44:1c:86:9c:ab:3a:6f:41:e5:30:80:
                    96:ca:18:e3:94:d6:4b:61:f3:70:22:7d:f2:e6:5d:
                    10:b6:bd:94:2f:16:bb:8c:b9:c5:11:a9:de:21:33:
                    6a:d7:42:06:a4:03:76:27:b8:f7:cc:c9:79:1d:3f:
                    d9:21:26:8c:63:21:df:b1:5f:ea:d4:1d:d5:c8:f9:
                    f3:47:0c:89:42:c6:22:fe:a2:bf:be:1b:78:46:39:
                    f3:fc:93:80:21:c1:50:0d:8b:16:ce:89:a9:ac:54:
                    81:c1:65:c8:b8:fa:1d:ce:8b:7c:03:ac:f1:de:17:
                    ac:81:23:4a:4e:0e:40:16:76:56:84:42:a3:16:eb:
                    5c:a1:42:e0:58:53:03:20:a9:db:14:ac:51:e0:e2:
                    04:56:d8:b9:64:a0:b3:8b:0c:3a:e6:ed:67:29:31:
                    e5:37:47:a1:09:e4:07:a7:d2:77:ab:34:56:47:92:
                    90:ad:db:c2:89:21:6a:fc:d6:ca:84:9c:37:7c:ba:
                    33:bb:8d:cc:41:47:78:54:fc:4b:7d:f7:42:91:b5:
                    91:12:fb:a2:56:c1:13:bc:18:30:3c:38:9a:cf:00:
                    18:7b:b5:71:4b:3c:d1:29:18:f8:15:1e:ea:70:b8:
                    30:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:B3:97:8F:E5:96:48:F8:CF:C9:65:EA:23:31:F4:A6:95:4B:2C
            X509v3 Authority Key Identifier:
                keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:526c::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:21:42:af:de:15:fd:a7:c5:0f:67:75:92:18:55:9d:b7:2f:
         01:84:5c:3a:2f:3f:30:34:13:b7:93:00:96:83:32:bc:eb:ac:
         d7:50:eb:e0:21:66:22:2c:1f:b3:75:93:73:f9:18:3f:25:bd:
         98:24:63:1e:de:cd:ee:d1:4b:42:b7:cf:70:7f:c7:17:b8:73:
         82:bb:e8:93:4a:dc:e5:83:34:2b:b9:3b:55:e1:78:8e:c8:cc:
         3f:84:3e:76:c3:c4:24:12:93:7e:26:d3:2c:f9:74:97:c6:27:
         7e:68:5c:1e:ae:37:31:c4:6a:5e:8e:b8:33:54:39:eb:0b:b2:
         44:84:7e:0b:ed:c5:50:89:db:d8:61:59:a2:bd:83:70:85:64:
         cd:e6:68:1c:0c:4f:4f:b7:89:f5:02:ad:98:43:d4:5c:f9:fa:
         ea:fb:f0:60:9f:74:38:ad:33:35:a4:34:97:89:e6:b6:4c:eb:
         93:ea:9c:e7:37:c4:82:cb:28:59:e5:52:57:48:8e:90:9a:ec:
         0b:c2:8f:6e:5f:d2:2a:ed:d6:fd:85:ea:47:42:af:40:aa:2c:
         fa:63:93:76:83:d8:ba:5c:5c:50:d8:db:7c:6d:a3:63:e8:ca:
         b0:2b:cf:0b:83:91:54:22:ab:ec:ff:fb:9f:39:fc:14:2d:b1:
         1f:ed:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:01 2024 by rpki-client on console-ams.rpki-client.org