Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa
File:                     323830343a333039383a3a2f33322d313238203d3e20323634393633.roa (raw, json)
Hash identifier:          QqEUuRgl46kTybAxzEprD4rjjseFoTJ4UxrBxBobdZ0=
Subject key identifier:   63:70:2A:B6:D9:0C:06:9C:96:32:2F:ED:59:19:83:DF:78:6A:AE:6A
Certificate issuer:       /CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
Certificate serial:       25A647CCC7B6ABB1A9EBF4538D91BA357AE60765
Authority key identifier: B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa
Signing time:             Thu 04 Apr 2024 17:15:45 +0000
ROA not before:           Thu 04 Apr 2024 17:10:45 +0000
ROA not after:            Thu 03 Apr 2025 17:15:45 +0000
asID:                     264963
IP address blocks:        2804:3098::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl
                          rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 23:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:a6:47:cc:c7:b6:ab:b1:a9:eb:f4:53:8d:91:ba:35:7a:e6:07:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8AF00843C9024B68AE3EC4331E753B7B2B422DF
        Validity
            Not Before: Apr  4 17:10:45 2024 GMT
            Not After : Apr  3 17:15:45 2025 GMT
        Subject: CN=63702AB6D90C069C96322FED591983DF786AAE6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:51:da:64:63:37:8e:22:c4:38:e2:8f:a8:
                    38:5d:16:80:d1:86:21:8d:95:ec:4c:34:b7:3e:40:
                    af:eb:bd:f6:6b:17:e2:37:2f:a4:d1:2a:1b:d7:98:
                    16:08:12:88:3d:3b:5a:24:a0:92:ed:d0:4c:a8:e0:
                    05:c9:6e:cb:b7:13:70:2d:80:bb:d3:96:13:10:2f:
                    04:50:9a:0b:c0:82:c8:20:fd:4d:46:98:31:3c:ef:
                    d1:45:84:4d:ae:68:49:35:aa:7e:a7:81:6c:72:01:
                    36:bc:cb:fa:32:7e:fc:cc:70:7e:e4:f6:9a:a8:d6:
                    33:a9:7b:5a:64:f5:3a:4d:4d:c6:e1:20:63:32:db:
                    04:ec:4f:d4:f6:a2:f1:2c:56:c5:8f:6e:ae:65:97:
                    0b:c0:13:50:87:1b:05:38:69:40:64:ea:dc:ae:e8:
                    d1:c7:a8:b7:bd:c9:10:f6:9e:50:b6:57:48:7d:e3:
                    b7:e4:3f:23:d2:58:38:e9:08:66:4f:88:b0:4f:7d:
                    ec:43:9b:1a:51:b7:60:90:b0:c4:2f:74:35:23:ac:
                    86:6b:67:ee:d3:5d:e2:74:c7:72:4b:f8:9f:48:53:
                    22:5d:98:71:75:cb:e6:e1:2e:13:03:13:a3:6a:53:
                    bd:d4:0f:9f:d3:01:5b:d1:26:83:39:3d:4f:98:ad:
                    d8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:2A:B6:D9:0C:06:9C:96:32:2F:ED:59:19:83:DF:78:6A:AE:6A
            X509v3 Authority Key Identifier:
                keyid:B8:AF:00:84:3C:90:24:B6:8A:E3:EC:43:31:E7:53:B7:B2:B4:22:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF00843C9024B68AE3EC4331E753B7B2B422DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/1/323830343a333039383a3a2f33322d313238203d3e20323634393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3098::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:67:1f:ec:e2:6b:b4:c1:e9:52:ca:6b:cd:83:36:31:1b:a0:
         30:03:6a:c5:b0:2f:6e:f3:a6:d1:bc:6f:07:2f:19:8c:d7:c6:
         7a:af:98:c0:cb:ea:a0:8b:4b:84:4f:9f:1a:d1:b6:87:9b:96:
         70:a3:03:4f:34:e4:7e:fd:3f:a3:28:27:86:71:4c:2e:76:c4:
         83:fc:db:41:ab:fc:ca:85:62:00:e1:e0:63:2a:23:58:41:d2:
         9c:de:2d:8e:31:f9:32:20:50:71:f4:87:7b:12:71:3d:22:7f:
         16:d0:a9:dd:64:90:e7:e9:63:a5:97:9d:3f:c9:61:18:5c:04:
         60:64:b7:c1:ab:46:e3:63:db:ee:de:06:6f:e4:05:62:f3:9c:
         f4:70:9c:8c:6d:ab:2d:e4:61:00:4d:93:de:ac:e5:5e:10:aa:
         9d:98:66:ed:d2:f0:6f:72:7f:7a:9c:5c:8e:82:60:bb:30:d3:
         ce:da:11:02:ef:8c:4a:6f:14:4a:e1:e8:50:f3:e6:a1:97:44:
         40:45:58:7f:75:d2:33:58:d1:8c:f1:ce:2b:b5:21:ce:06:94:
         7b:9e:1e:a3:53:59:ca:e6:f3:f9:5b:bd:9a:a3:eb:41:d3:be:
         36:4d:59:0e:d4:c0:33:b2:12:b6:cd:75:2b:11:72:ce:5a:d1:
         be:59:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:44 2024 by rpki-client on console-ams.rpki-client.org