Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa
File:                     323830343a386362343a3a2f33322d313238203d3e20323733383136.roa (raw, json)
Hash identifier:          F0atggKLg4yFPBcBJ3AJVqkJTxcFaUi8/LZ5SnSZidA=
Subject key identifier:   5C:1F:C0:6A:DC:CD:AE:4C:BE:8C:7D:EC:FB:B4:0A:28:8F:C2:71:54
Certificate issuer:       /CN=E3A4361F105CFDC4531D180AD252ABC21D3E1D0B
Certificate serial:       7C72D419E4124FEA6FE80C30A6AC5501E8CFFF01
Authority key identifier: E3:A4:36:1F:10:5C:FD:C4:53:1D:18:0A:D2:52:AB:C2:1D:3E:1D:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa
Signing time:             Fri 26 Jul 2024 19:01:44 +0000
ROA not before:           Fri 26 Jul 2024 18:56:44 +0000
ROA not after:            Fri 25 Jul 2025 19:01:44 +0000
asID:                     273816
IP address blocks:        2804:8cb4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.crl
                          rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:72:d4:19:e4:12:4f:ea:6f:e8:0c:30:a6:ac:55:01:e8:cf:ff:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A4361F105CFDC4531D180AD252ABC21D3E1D0B
        Validity
            Not Before: Jul 26 18:56:44 2024 GMT
            Not After : Jul 25 19:01:44 2025 GMT
        Subject: CN=5C1FC06ADCCDAE4CBE8C7DECFBB40A288FC27154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:f0:46:c9:db:61:a0:2d:14:f6:4f:77:89:
                    9a:87:d6:e4:3a:fb:71:c6:be:95:a3:2e:fe:ca:d8:
                    bd:aa:e2:97:f6:56:b8:07:d3:43:10:21:7c:f1:a4:
                    9a:83:29:e1:7c:f6:b7:10:72:4f:78:3a:81:58:c8:
                    d3:04:3e:b5:07:c6:6a:22:e7:ce:fd:48:d3:41:56:
                    38:c2:2e:4d:31:f3:46:3e:33:83:b3:41:63:44:6a:
                    cb:15:b5:c4:dd:a7:3e:78:2a:7c:95:bf:45:0d:6d:
                    f5:5d:50:b2:41:cc:d2:a1:11:15:70:22:75:88:6d:
                    e0:1a:6e:82:2a:88:92:db:8b:ef:a0:70:d8:9d:9e:
                    07:c4:d6:c8:b6:d9:12:23:fd:b1:08:53:0c:ca:ff:
                    d8:d6:79:0e:71:7f:a2:36:56:1d:9a:d2:2c:a3:6a:
                    5f:ce:9e:eb:84:a9:04:73:60:3e:a7:df:55:ae:89:
                    79:95:5f:c7:5b:0b:a4:a0:40:4a:31:e6:34:d6:bd:
                    5a:35:52:56:82:2f:b1:84:56:0f:69:fb:15:8d:b9:
                    e6:e3:ac:a9:47:97:90:59:94:46:b4:f2:c0:c7:73:
                    1a:c9:32:15:ad:1c:0e:24:64:6e:aa:62:04:ad:f1:
                    4d:0d:a0:c3:f5:7c:f9:ef:db:0d:38:6a:a3:50:59:
                    0f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1F:C0:6A:DC:CD:AE:4C:BE:8C:7D:EC:FB:B4:0A:28:8F:C2:71:54
            X509v3 Authority Key Identifier:
                keyid:E3:A4:36:1F:10:5C:FD:C4:53:1D:18:0A:D2:52:AB:C2:1D:3E:1D:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A4361F105CFDC4531D180AD252ABC21D3E1D0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HWeYQ2gHEs3pFH8bemsMtqu7v76LgWYFXwNQGz7SAMWu/0/323830343a386362343a3a2f33322d313238203d3e20323733383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:c7:0f:a3:86:ad:00:16:1a:25:93:4f:6f:6c:26:99:ad:
         3c:21:8d:47:c1:32:ab:10:e8:3c:18:43:41:29:ad:87:ed:ca:
         46:0e:ce:3b:7e:6c:90:b6:e0:46:2b:40:6f:58:59:3b:86:b9:
         d6:0d:b9:05:d2:5e:e5:79:80:93:06:a0:d2:23:2b:3e:cb:9c:
         ab:dc:d3:8c:df:51:26:b1:5d:04:5f:c6:00:74:e6:35:79:86:
         d3:d0:45:94:3e:12:9e:ca:84:08:f3:af:97:36:a6:5f:89:23:
         4d:3d:8e:73:ff:c1:b4:7b:40:54:92:7c:37:ea:0b:3b:8c:2d:
         ce:27:19:b4:b7:74:44:c8:a4:83:ac:23:a5:ef:44:28:08:fa:
         0a:b0:8f:ae:3e:6f:8d:b1:ac:92:e1:9a:5c:01:54:28:e0:24:
         0a:70:3e:30:dd:9e:5d:d5:35:59:9e:51:c2:2b:b0:83:21:8b:
         fa:29:c2:c3:74:64:41:a6:7d:3b:96:fe:c0:84:09:79:f9:a7:
         b8:57:0b:e8:ac:b7:64:c8:99:fc:d1:95:f8:ec:a7:b2:20:ba:
         7b:9b:17:ef:69:75:7c:55:fb:f0:13:65:25:c7:4a:d3:83:c9:
         20:07:8a:30:b5:65:b5:59:5d:0e:b5:28:4a:30:f1:ac:b7:49:
         32:f6:05:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:09 2024 by rpki-client on console-fra.rpki-client.org