Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
File:                     323830343a346564383a3a2f33322d3438203d3e20323638323836.roa (raw, json)
Hash identifier:          GEQ/zc8/7LtjKiuD1Edl55rV4vYIygqXYEkvIqSndr8=
Subject key identifier:   8C:91:2B:A8:5B:24:0E:EE:CB:16:34:29:AB:1E:C8:56:E4:86:EB:C0
Certificate issuer:       /CN=5BE4378A5E0B1629852BDD255130076ED843FD31
Certificate serial:       7915D0B6A5562456E713CA9FBA087B7160FEC98E
Authority key identifier: 5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa
Signing time:             Thu 04 Apr 2024 18:34:52 +0000
ROA not before:           Thu 04 Apr 2024 18:29:52 +0000
ROA not after:            Thu 03 Apr 2025 18:34:52 +0000
asID:                     268286
IP address blocks:        2804:4ed8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl
                          rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:15:d0:b6:a5:56:24:56:e7:13:ca:9f:ba:08:7b:71:60:fe:c9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE4378A5E0B1629852BDD255130076ED843FD31
        Validity
            Not Before: Apr  4 18:29:52 2024 GMT
            Not After : Apr  3 18:34:52 2025 GMT
        Subject: CN=8C912BA85B240EEECB163429AB1EC856E486EBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:b8:58:99:d1:bb:50:ac:3f:73:15:92:74:
                    c7:43:7b:2e:a9:17:dd:13:ae:93:bc:de:59:e4:ba:
                    94:04:b6:76:bc:cb:78:af:72:b4:e2:6c:55:3d:cf:
                    b9:bc:19:d0:92:c5:83:55:05:e8:8c:60:54:84:35:
                    ab:8b:13:85:34:dc:f9:7b:f4:56:c6:9e:3b:13:42:
                    9c:d4:e2:2e:91:14:0f:bd:7b:a2:09:f9:50:6f:cf:
                    42:99:51:9b:a5:8c:36:1f:83:da:63:98:9a:26:35:
                    5d:65:df:35:f6:de:ba:cd:63:75:7b:e8:f3:8d:9a:
                    c5:a3:98:b2:c8:4b:cb:73:e6:96:7d:a9:27:bc:60:
                    0e:b9:69:fc:1a:65:d1:e5:95:ea:56:fa:dd:8d:5a:
                    7d:3e:e8:9c:16:1a:3f:de:8e:cd:a9:07:e9:dc:86:
                    56:d4:0e:60:6f:36:ba:d8:e8:7f:e5:df:b9:7d:33:
                    71:ca:f9:1e:0f:da:00:7a:a0:91:c6:9a:62:51:b9:
                    ec:16:90:58:cb:87:79:cd:17:da:e4:52:83:14:48:
                    eb:56:64:03:43:f4:4a:3a:c6:62:b9:b2:3c:db:c4:
                    4f:9c:06:1b:02:17:63:71:31:81:ea:3b:b5:e6:77:
                    d9:09:f3:b1:fc:a2:a9:a2:25:d2:ae:ef:f6:70:bd:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:2B:A8:5B:24:0E:EE:CB:16:34:29:AB:1E:C8:56:E4:86:EB:C0
            X509v3 Authority Key Identifier:
                keyid:5B:E4:37:8A:5E:0B:16:29:85:2B:DD:25:51:30:07:6E:D8:43:FD:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/5BE4378A5E0B1629852BDD255130076ED843FD31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE4378A5E0B1629852BDD255130076ED843FD31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT9YCFV2hMqyvGM5KVHunGyrjgbXPUMpWhHLPJzbdhC3/1/323830343a346564383a3a2f33322d3438203d3e20323638323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d0:9d:95:07:ac:30:78:0b:e8:4a:45:68:03:25:26:62:29:08:
         31:d6:ed:35:c4:5a:9f:be:44:02:f3:46:d1:7a:d4:d6:93:d8:
         c2:e9:f6:7b:86:96:ed:87:78:41:53:02:08:93:0c:b3:4a:12:
         41:2a:2e:06:47:e3:40:1a:03:c5:10:a6:2e:a2:f0:00:37:45:
         8d:35:6d:85:3d:95:17:b2:bd:9b:36:fe:ea:80:90:1b:ab:25:
         bd:75:6a:f1:f8:76:64:93:91:6e:f3:8e:88:1c:ae:b3:aa:a9:
         ed:d5:3d:a6:2f:98:f8:23:25:66:a3:91:34:e0:fa:e8:29:b5:
         41:9c:30:f7:bb:d6:54:d2:df:25:6b:68:98:d2:3c:f2:ae:ac:
         50:24:40:3e:21:eb:a0:dd:a7:25:ab:3a:96:38:fd:85:a5:b1:
         ae:31:cf:b5:2a:0a:84:a6:17:2a:14:e1:08:da:b5:d7:41:5b:
         d9:ce:80:57:e4:81:30:2d:28:78:53:c0:6e:58:73:dc:a6:a2:
         bd:78:85:8f:00:88:c5:43:77:da:4f:46:3c:b3:fd:17:6f:dc:
         fc:ea:bf:5d:d4:05:0c:31:a8:b8:41:c5:9a:73:94:60:8d:32:
         09:0c:72:00:f0:14:44:a3:e8:0b:f1:7a:0d:49:02:d3:69:91:
         ca:da:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:54 2024 by rpki-client on console-fra.rpki-client.org