Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa
File:                     323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (raw, json)
Hash identifier:          8/bmdSrRocdJ0DDj9x7MIcC57nmPT/QXwITvvWAzfeU=
Subject key identifier:   55:09:92:AD:DC:DC:15:D3:C1:99:0E:66:90:D3:52:F2:87:0E:D8:B5
Certificate issuer:       /CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
Certificate serial:       2E2EF3E2CF11C9CEEA150BDB6CDD75B21BEED1DA
Authority key identifier: 48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa
Signing time:             Thu 04 Apr 2024 15:13:30 +0000
ROA not before:           Thu 04 Apr 2024 15:08:30 +0000
ROA not after:            Thu 03 Apr 2025 15:13:30 +0000
asID:                     268261
IP address blocks:        2804:4e70:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl
                          rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2e:f3:e2:cf:11:c9:ce:ea:15:0b:db:6c:dd:75:b2:1b:ee:d1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48EA1B42F1661A0EB03B245D47205E5220A51B65
        Validity
            Not Before: Apr  4 15:08:30 2024 GMT
            Not After : Apr  3 15:13:30 2025 GMT
        Subject: CN=550992ADDCDC15D3C1990E6690D352F2870ED8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6e:bb:51:f4:30:0b:e0:d6:76:41:00:01:a1:
                    d6:38:f0:97:91:1c:a7:91:3a:aa:a6:ea:15:58:ce:
                    7a:f4:d2:e0:bf:65:49:7f:62:9f:95:f4:b1:04:04:
                    b8:a7:31:4d:b0:02:b5:e6:a1:92:f4:58:c0:d0:1d:
                    8d:ad:47:a4:43:49:61:d5:47:7e:50:09:46:51:e4:
                    e2:0f:ea:06:a3:06:e8:ea:c7:ec:fc:f0:fc:db:c4:
                    a6:37:b8:3b:61:ce:70:c7:49:18:e5:bc:dd:55:9d:
                    6e:2a:30:cf:c6:da:78:cc:46:cc:3a:89:14:d5:80:
                    bc:8a:aa:17:aa:29:50:7e:c1:46:7e:97:61:ce:5b:
                    a2:ac:3a:17:d2:09:da:e1:b1:74:4a:4e:3d:00:a4:
                    17:2f:21:8a:3f:3a:ae:58:c3:09:89:14:7b:88:a0:
                    c0:4b:aa:60:0c:59:f1:4d:9e:8e:c2:6f:12:ec:f9:
                    ba:21:61:fd:fd:3f:02:a6:ae:8d:b9:93:16:30:0f:
                    ed:34:46:b8:36:32:44:a0:8d:51:9d:bb:8b:2e:3d:
                    cb:18:cf:58:8f:8d:4b:36:b0:66:af:61:8b:87:e4:
                    dc:ce:d4:f3:49:c3:3e:e2:9b:51:33:94:1c:44:97:
                    0c:82:89:49:27:23:4f:84:31:37:5c:1f:1b:ed:15:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:92:AD:DC:DC:15:D3:C1:99:0E:66:90:D3:52:F2:87:0E:D8:B5
            X509v3 Authority Key Identifier:
                keyid:48:EA:1B:42:F1:66:1A:0E:B0:3B:24:5D:47:20:5E:52:20:A5:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48EA1B42F1661A0EB03B245D47205E5220A51B65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/1/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ce:d5:83:68:56:5e:88:62:05:f0:81:0e:8e:84:b4:7b:9b:01:
         3b:80:db:7e:6b:02:40:f3:51:0f:40:80:e5:32:d5:06:43:4a:
         e1:71:47:22:83:ae:41:e7:07:37:a0:a0:40:28:25:e3:e3:ba:
         de:da:17:17:2d:99:10:71:27:70:d9:3b:02:d9:0f:b2:ed:df:
         4a:c1:7e:a5:d3:42:77:31:50:23:31:12:a9:45:87:8e:3d:1e:
         5f:8d:1b:05:de:25:a8:97:20:83:66:cf:00:d2:8a:32:f7:2d:
         26:b0:90:68:38:4e:2a:8b:8b:9c:8c:fc:37:25:66:81:0f:27:
         53:8d:af:19:cd:34:53:3e:2f:7e:a5:8d:81:0d:b8:9c:65:90:
         7c:ad:28:dc:1e:62:e5:15:1d:75:92:c3:c6:8c:41:f1:28:f6:
         3f:3f:8c:96:ea:8a:4b:08:ff:33:6b:45:ef:b6:97:4d:99:92:
         1d:6e:cc:23:26:6e:c6:61:b1:3e:5b:fe:26:27:b6:5d:c1:64:
         da:2d:6a:9e:a1:4d:89:66:3e:13:ec:e1:9d:3f:45:7a:ae:af:
         db:d5:a2:69:29:b2:65:a0:eb:3c:34:c1:e8:7b:47:9c:b7:0b:
         d8:22:51:c3:8b:da:10:4b:d6:86:e3:c8:20:7a:5d:dc:5c:2f:
         90:5b:d4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:06 2024 by rpki-client on console-fra.rpki-client.org