Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/323830343a313766303a3a2f33322d313238203d3e20323633323539.roa
File:                     323830343a313766303a3a2f33322d313238203d3e20323633323539.roa (raw, json)
Hash identifier:          8OdrRjIceYj1m5eQpaKuo3NQfO1fGDb9SGNQpdmSYf4=
Subject key identifier:   8B:E6:21:96:FA:FD:B4:BE:3A:32:89:E9:CA:E5:B5:AD:61:A9:C6:59
Certificate issuer:       /CN=CBEDD33A18D94E1A62EBFB24001CD544D5C59966
Certificate serial:       3916FA70DB4F83F5A76A937F9A224B3E5F2C0A00
Authority key identifier: CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/323830343a313766303a3a2f33322d313238203d3e20323633323539.roa
Signing time:             Thu 04 Apr 2024 13:40:24 +0000
ROA not before:           Thu 04 Apr 2024 13:35:24 +0000
ROA not after:            Thu 03 Apr 2025 13:40:24 +0000
asID:                     263259
IP address blocks:        2804:17f0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.crl
                          rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:16:fa:70:db:4f:83:f5:a7:6a:93:7f:9a:22:4b:3e:5f:2c:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBEDD33A18D94E1A62EBFB24001CD544D5C59966
        Validity
            Not Before: Apr  4 13:35:24 2024 GMT
            Not After : Apr  3 13:40:24 2025 GMT
        Subject: CN=8BE62196FAFDB4BE3A3289E9CAE5B5AD61A9C659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bf:59:58:8e:6e:cf:b0:b3:e1:ba:58:b0:20:
                    04:10:36:12:f3:20:7f:d2:41:8a:e5:52:1e:73:54:
                    48:a9:e3:54:13:e8:16:7d:f8:d3:69:17:a0:31:44:
                    8b:e7:a4:d9:9f:fc:e9:72:f0:2a:11:4f:a1:fe:db:
                    5d:75:06:5f:50:0b:bc:bd:16:f5:62:1b:49:4f:f6:
                    d7:2f:92:77:94:33:9f:59:ac:d2:17:2e:6b:5f:f8:
                    ae:dc:56:0c:b8:b2:66:60:44:92:3a:e9:69:1b:fd:
                    c8:c5:ff:94:44:28:53:c2:61:0d:5a:32:e6:89:d4:
                    3d:38:b2:74:fb:50:8e:bc:49:2e:51:6f:17:d1:52:
                    71:0d:89:a9:63:ae:b9:79:b6:a6:36:e3:31:14:07:
                    fb:a5:a4:ba:af:2b:8a:2d:87:53:ad:0a:80:0b:18:
                    ca:03:f4:68:7d:c2:05:eb:c8:92:a6:f6:ea:b5:6f:
                    3d:18:b8:e2:bc:c1:2b:f4:48:38:35:d9:5e:aa:ab:
                    eb:20:79:9b:b7:15:f2:57:0a:67:14:da:36:7c:75:
                    a0:45:67:87:57:21:50:53:87:ab:55:32:f9:fe:ca:
                    cd:9c:f5:ba:10:fc:bc:3b:6c:27:6b:44:68:76:31:
                    3a:46:69:68:73:66:a6:67:b1:6a:74:bf:fd:60:67:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:21:96:FA:FD:B4:BE:3A:32:89:E9:CA:E5:B5:AD:61:A9:C6:59
            X509v3 Authority Key Identifier:
                keyid:CB:ED:D3:3A:18:D9:4E:1A:62:EB:FB:24:00:1C:D5:44:D5:C5:99:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBEDD33A18D94E1A62EBFB24001CD544D5C59966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXo6MTCVNArAXZrbArkDYu9aoExFvsNsovHajh6c9Lim/1/323830343a313766303a3a2f33322d313238203d3e20323633323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:38:b8:54:ff:3c:f6:87:89:28:f9:27:98:e1:5b:0c:3c:9d:
         c0:f5:cf:bc:25:f7:16:99:22:11:5f:20:71:42:0e:74:99:7c:
         a5:40:c8:54:19:35:c7:b9:43:3c:e9:2d:fa:da:f5:fd:2e:86:
         e6:d6:f3:a1:09:a7:09:e2:99:bc:0c:75:71:75:00:6e:91:59:
         98:b6:eb:52:e4:92:ae:32:f6:f3:c4:48:a5:f0:bd:5e:58:3b:
         d2:27:d8:5d:1e:11:fa:9e:60:1f:30:5b:8b:d7:c2:c5:38:34:
         ce:d3:dd:9e:4d:8b:93:c0:60:b8:56:0e:33:67:b5:fc:db:aa:
         34:42:f8:64:2f:13:46:22:d9:63:ca:8e:2a:dc:83:6e:32:a9:
         1c:81:02:88:2e:c8:c1:6d:be:53:e6:69:29:54:77:47:ee:8f:
         7b:a5:0c:41:ce:1b:1d:c3:9a:a2:46:68:6b:ad:65:99:2c:96:
         5d:c7:f6:f6:d9:2f:6e:6e:6c:b6:b0:02:60:d7:42:a9:a6:d0:
         82:23:b0:e2:18:b4:e6:c7:31:91:91:68:a0:3d:70:67:37:d9:
         dd:41:1b:56:7f:e6:ef:d3:d0:41:55:b0:29:e4:7d:ac:5a:b2:
         5f:26:9a:8a:d9:3e:b0:1d:ea:3a:78:bf:0f:a5:bc:94:4b:aa:
         50:b2:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org