Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa
File:                     323830343a366230343a3a2f33322d3338203d3e20323730333732.roa (raw, json)
Hash identifier:          emL0lIINWeau1jAZnGLd0zMjFsvE6dS/k9zgXXeHwEs=
Subject key identifier:   0B:98:6D:B6:A1:17:23:6E:86:53:5A:2A:0C:D7:F1:8A:78:6E:7D:F1
Certificate issuer:       /CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
Certificate serial:       3EF6EF24F1E3603BC80C36A7F96BB518EABD5D51
Authority key identifier: 16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa
Signing time:             Wed 03 Apr 2024 18:31:34 +0000
ROA not before:           Wed 03 Apr 2024 18:26:34 +0000
ROA not after:            Wed 02 Apr 2025 18:31:34 +0000
asID:                     270372
IP address blocks:        2804:6b04::/32 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.crl
                          rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f6:ef:24:f1:e3:60:3b:c8:0c:36:a7:f9:6b:b5:18:ea:bd:5d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE
        Validity
            Not Before: Apr  3 18:26:34 2024 GMT
            Not After : Apr  2 18:31:34 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:76:89:d0:06:fe:fb:99:dc:f8:bd:1e:e6:
                    c0:88:70:56:80:18:96:46:90:e9:29:52:b0:1f:5f:
                    d5:04:44:6e:f4:ab:9d:af:99:42:ca:df:ef:3f:14:
                    55:c1:f1:5c:ce:46:80:43:47:17:12:f0:5e:ec:1a:
                    39:c8:22:53:c4:a2:e9:2e:c2:79:50:0f:a6:1a:6c:
                    16:6e:02:d3:a4:f1:80:b0:2e:06:49:a4:3e:cd:67:
                    14:64:d4:23:3d:56:a7:76:d8:29:fa:c9:3e:7a:42:
                    55:46:4d:4d:cd:4a:b0:05:1b:af:51:11:48:52:7e:
                    98:c2:fe:eb:f6:2f:4f:93:df:1a:81:46:64:ce:21:
                    69:5c:9f:31:ce:bb:85:65:6f:95:12:0c:c5:a9:d8:
                    ff:e0:54:1a:03:7c:0c:61:10:6b:50:06:e5:81:dd:
                    6e:a2:76:2c:d0:19:da:d0:50:65:be:b1:bd:c1:52:
                    1d:7e:2e:e0:8b:24:8c:20:b2:39:67:56:48:14:4d:
                    6a:aa:6e:04:74:ac:a2:08:15:91:1e:92:41:43:03:
                    5d:23:f8:1c:34:a4:6a:21:41:8a:71:fe:d6:ca:5a:
                    99:ab:e3:d3:62:1b:21:8f:66:4f:92:bb:0c:fb:9f:
                    f7:f6:f7:7d:23:b1:68:50:33:8e:ff:16:2f:ca:38:
                    1d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:6D:B6:A1:17:23:6E:86:53:5A:2A:0C:D7:F1:8A:78:6E:7D:F1
            X509v3 Authority Key Identifier:
                keyid:16:0E:07:41:C2:0C:69:D1:A3:99:5F:CE:C7:2F:6A:5F:6B:7E:79:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/160E0741C20C69D1A3995FCEC72F6A5F6B7E79EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYUHERJsUAGNNZza4YuYZ1eCqizGa8dcwtFxPpnzE5sV/1/323830343a366230343a3a2f33322d3338203d3e20323730333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:4e:59:7a:bf:64:37:21:a2:28:43:4f:ff:70:c1:9b:1c:e0:
         66:b6:28:2e:7b:bc:01:92:64:18:2e:8c:fc:62:ef:a9:d5:b7:
         65:39:cd:06:77:e0:bb:46:11:53:19:98:ee:12:7b:b9:1d:b0:
         80:ed:32:b2:23:06:86:0e:91:29:ae:37:57:37:55:72:b0:33:
         1f:1b:dc:61:6f:c9:fc:7e:44:d4:da:50:a2:56:cb:8a:d6:39:
         75:f7:9d:a0:e0:b3:3c:ce:65:00:7a:ba:0c:53:b7:7e:75:7b:
         2d:3f:8d:8e:88:e1:57:c2:76:75:4f:06:5d:87:14:71:8f:57:
         d8:5e:4e:2b:48:a2:5d:82:b3:56:81:43:b2:7f:7e:a7:de:60:
         82:47:3f:cb:82:5d:cd:ee:19:04:55:42:65:1a:89:c3:96:52:
         f4:b9:ea:a1:6d:57:18:09:42:51:45:45:61:68:48:1f:67:5b:
         12:7a:d4:0f:56:cd:23:0c:8a:6d:45:ab:0c:f1:68:0b:df:93:
         38:4c:6d:e4:2f:39:e4:8c:a1:3a:94:73:a5:7b:85:a0:34:e4:
         37:50:c7:ba:78:25:37:c0:28:6d:d0:ab:72:f7:43:5b:8f:62:
         fe:6a:01:65:15:a3:82:fb:79:0d:7c:e7:1c:77:13:b9:ac:27:
         43:15:9c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:26 2024 by rpki-client on console-ams.rpki-client.org