Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa
File:                     323830343a363338633a3a2f33322d3335203d3e20323639333638.roa (raw, json)
Hash identifier:          szGUNFxfPAjhb7TtAtYrl7brawFzHcat+kUXdseLfek=
Subject key identifier:   5C:13:2C:EA:33:E2:EF:0C:37:E1:A6:D1:94:69:59:F3:64:FF:12:0E
Certificate issuer:       /CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
Certificate serial:       78A8958B68C12CA1C4B4515A0A7ECF6E1ED5F5AF
Authority key identifier: B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa
Signing time:             Thu 04 Apr 2024 05:22:04 +0000
ROA not before:           Thu 04 Apr 2024 05:17:04 +0000
ROA not after:            Thu 03 Apr 2025 05:22:04 +0000
asID:                     269368
IP address blocks:        2804:638c::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl
                          rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a8:95:8b:68:c1:2c:a1:c4:b4:51:5a:0a:7e:cf:6e:1e:d5:f5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5385603A8039C6D836EB9CA1A1442282F0D4F7B
        Validity
            Not Before: Apr  4 05:17:04 2024 GMT
            Not After : Apr  3 05:22:04 2025 GMT
        Subject: CN=5C132CEA33E2EF0C37E1A6D1946959F364FF120E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:54:af:91:5c:de:0f:98:a0:50:9b:2e:77:41:
                    c5:5d:f3:c6:0a:d6:85:a9:49:85:e9:79:c8:ef:bd:
                    10:3a:f2:c4:b7:a5:df:0c:cc:d4:09:83:c7:cc:36:
                    4c:f2:5c:5d:8a:61:aa:48:e1:61:94:17:c6:40:b0:
                    42:53:be:ed:1a:3d:db:d8:4c:bc:6b:7d:11:34:21:
                    5c:c7:80:23:56:b2:3c:a8:1c:80:52:f0:ac:78:75:
                    50:73:69:45:35:60:23:e3:c1:af:6b:3b:5d:f0:b7:
                    31:91:e4:2b:bc:c2:0c:49:fd:c3:8e:66:84:43:0a:
                    b0:63:e1:a2:a2:3c:fb:ab:2c:c4:97:83:5b:28:29:
                    20:00:f1:89:50:27:da:a1:8f:ca:86:ca:b2:7a:65:
                    05:ab:a7:42:c1:cc:93:b3:43:f6:3d:be:43:65:da:
                    16:6d:35:7a:2b:53:7b:03:af:00:da:76:7d:6e:41:
                    ef:00:0b:cb:29:74:90:29:2d:e8:38:21:70:a0:a2:
                    e6:e4:a6:57:ef:de:45:20:e3:c7:07:2e:df:65:6f:
                    b8:00:c9:35:9d:bb:ba:dd:ad:8b:84:ad:11:de:93:
                    5d:7d:db:ed:b3:7e:74:21:c9:4b:a4:45:c9:31:c0:
                    a9:ce:e6:3b:f1:fa:96:f1:d4:57:a5:56:d4:c9:4e:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:13:2C:EA:33:E2:EF:0C:37:E1:A6:D1:94:69:59:F3:64:FF:12:0E
            X509v3 Authority Key Identifier:
                keyid:B5:38:56:03:A8:03:9C:6D:83:6E:B9:CA:1A:14:42:28:2F:0D:4F:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5385603A8039C6D836EB9CA1A1442282F0D4F7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/1/323830343a363338633a3a2f33322d3335203d3e20323639333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:638c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:24:d2:07:bf:b8:af:95:62:e7:e9:b7:b2:22:00:a4:a9:09:
         1a:05:cf:f9:2e:61:64:fe:3b:fc:84:8c:1d:cf:4d:aa:ca:e3:
         c2:9a:c6:40:75:1a:d8:18:cf:26:1e:fd:03:11:d4:a7:cc:6f:
         c6:be:16:ff:a1:fd:9f:14:0b:82:7a:9e:66:54:64:4c:69:18:
         a7:a0:30:be:0a:65:b2:47:0f:8e:86:62:e0:1a:7c:a6:db:2f:
         08:0c:55:96:b7:07:72:d1:01:61:fb:f2:89:61:cc:7d:14:71:
         34:cd:6f:27:4d:82:ac:0d:88:eb:3a:9b:3e:2f:5f:65:21:e2:
         13:d4:14:8e:79:36:ec:39:01:1f:a7:8e:58:96:65:a0:5b:7b:
         87:c6:72:2f:3f:46:90:25:43:52:c9:9e:6e:28:5d:de:7c:62:
         93:37:4e:6f:65:f7:02:a3:83:01:24:35:37:a6:31:76:83:69:
         bd:67:19:b8:ba:ad:1e:eb:ea:ba:9e:f3:5d:92:75:97:91:7b:
         48:c5:a5:45:1b:c3:51:73:37:6c:c4:21:ce:06:fd:85:2d:c2:
         a5:44:79:dd:8b:c0:80:a2:85:19:f2:57:0b:58:fe:68:28:a3:
         1c:ae:2c:2d:2d:e4:7e:7f:0b:56:bd:9b:10:38:5f:ba:c9:8c:
         09:aa:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:25 2024 by rpki-client on console-fra.rpki-client.org