Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa
File:                     323830343a373738343a3a2f33322d3334203d3e20323731313833.roa (raw, json)
Hash identifier:          r6Hj5jfB34uaNvMpGJOIqIqao1w2ZSRS/H6W1pfE/CY=
Subject key identifier:   41:DF:46:7E:5E:8C:9E:40:9D:17:61:57:5B:4C:FD:D6:38:03:DC:58
Certificate issuer:       /CN=44D3F1577250CA6E2174DFB39A484561766D6292
Certificate serial:       1BC3E10CF1229E629372B3F5E355D346B7550A18
Authority key identifier: 44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa
Signing time:             Wed 03 Apr 2024 22:32:16 +0000
ROA not before:           Wed 03 Apr 2024 22:27:16 +0000
ROA not after:            Wed 02 Apr 2025 22:32:16 +0000
asID:                     271183
IP address blocks:        2804:7784::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl
                          rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 08:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:e1:0c:f1:22:9e:62:93:72:b3:f5:e3:55:d3:46:b7:55:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D3F1577250CA6E2174DFB39A484561766D6292
        Validity
            Not Before: Apr  3 22:27:16 2024 GMT
            Not After : Apr  2 22:32:16 2025 GMT
        Subject: CN=41DF467E5E8C9E409D1761575B4CFDD63803DC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a3:86:74:8f:8f:f0:21:d5:53:a5:f9:08:1c:
                    66:85:b8:cd:bd:01:83:39:3b:ed:ef:83:8d:90:ea:
                    51:cf:0d:ad:ad:f0:85:62:85:30:d0:5a:40:81:f8:
                    17:7b:ad:6a:78:f2:31:09:d0:d0:f7:9c:68:3c:e4:
                    3f:86:42:1a:74:73:d3:a0:64:96:6c:35:2f:85:f3:
                    c6:50:8f:56:a5:c2:fd:bb:35:9b:c4:c2:de:e9:5e:
                    31:0b:b9:63:b0:b8:2e:65:0d:cc:ab:57:3e:8b:1f:
                    9f:ce:30:38:40:a9:23:31:9b:2e:b9:ea:7d:29:94:
                    67:ed:c6:ca:b5:3b:7c:df:66:00:1f:28:ec:c9:40:
                    29:93:33:54:b7:69:86:53:58:4a:6f:d4:9a:95:1b:
                    45:83:92:0f:c9:d2:77:52:a0:56:5c:31:de:8a:9e:
                    c6:ec:76:ad:73:c7:e8:23:f8:4f:e6:db:eb:64:30:
                    c3:4d:ad:37:b9:35:08:63:ef:9c:4e:5f:56:5e:99:
                    86:bb:c9:b0:0b:67:f5:f0:52:35:41:a5:f7:c2:91:
                    60:3d:3a:0d:22:d2:17:f1:f8:78:dc:ba:37:fb:88:
                    33:90:67:dd:67:4c:d9:e4:5c:90:47:af:a0:99:0a:
                    c2:f5:7d:9c:bd:dc:63:cc:fa:55:f8:1f:5d:4d:5f:
                    70:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:DF:46:7E:5E:8C:9E:40:9D:17:61:57:5B:4C:FD:D6:38:03:DC:58
            X509v3 Authority Key Identifier:
                keyid:44:D3:F1:57:72:50:CA:6E:21:74:DF:B3:9A:48:45:61:76:6D:62:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/44D3F1577250CA6E2174DFB39A484561766D6292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D3F1577250CA6E2174DFB39A484561766D6292.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HS5t3Q1b7PRtSTz9qHJgigwnD5fpKe3K3EBE9sNwop2P/1/323830343a373738343a3a2f33322d3334203d3e20323731313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7784::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:fe:29:c4:ce:06:28:43:97:23:e2:7e:ac:df:73:ac:b6:51:
         55:9c:e5:2d:03:08:be:66:8d:35:44:96:e4:f0:bf:dc:67:f9:
         08:43:01:70:0b:8f:c5:16:f0:c1:f4:fd:87:40:62:f8:a1:84:
         cb:42:a5:0b:a2:84:ed:00:53:6d:3b:c7:b5:b0:c8:10:db:98:
         ab:a5:83:43:09:aa:44:d7:f1:46:43:7c:fd:ba:45:64:a2:e4:
         53:58:83:bc:25:9f:e8:00:3e:f5:ee:17:ad:3b:23:d9:e9:b5:
         c4:be:2d:61:e3:ea:e6:a2:ed:a0:03:f6:46:e0:f9:ae:b4:92:
         b5:08:8a:c8:e1:cc:a8:0c:26:26:79:46:34:41:ca:5e:ae:b5:
         58:01:a1:39:f1:50:4c:eb:dc:0c:8f:c4:22:9e:1a:56:f7:a0:
         38:4f:32:3c:9e:43:93:65:77:15:47:a6:21:f1:cd:26:88:25:
         bc:e4:c0:08:2e:0d:da:b8:5c:8a:cc:92:68:f6:c0:1d:af:b0:
         e7:3a:21:78:22:41:60:3d:9f:5e:e0:40:c1:f8:db:0c:1c:db:
         d8:8d:6b:e7:7c:c1:34:17:1f:42:a3:8a:1d:4e:c2:16:da:07:
         81:a8:86:b7:dd:d2:6d:8b:00:32:bc:45:b6:28:1e:4b:22:fe:
         36:c7:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:38:56 2024 by rpki-client on console-fra.rpki-client.org