Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa
File:                     323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa (raw, json)
Hash identifier:          /rEKLVgfJP9d6MuO0aNYC618GEl1JYN7gccg9MmhPcI=
Subject key identifier:   BA:FF:95:3B:CE:F2:FC:99:7D:7C:06:0A:7E:09:59:85:7D:BD:77:95
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       52530D0D81B70DF6EE915C494CCFEA455058A7DF
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa
Signing time:             Fri 19 Apr 2024 04:47:27 +0000
ROA not before:           Fri 19 Apr 2024 04:42:27 +0000
ROA not after:            Fri 18 Apr 2025 04:47:27 +0000
asID:                     52893
IP address blocks:        2804:a64:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:53:0d:0d:81:b7:0d:f6:ee:91:5c:49:4c:cf:ea:45:50:58:a7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Apr 19 04:42:27 2024 GMT
            Not After : Apr 18 04:47:27 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:0f:19:e4:9d:a2:a5:c7:a1:24:88:1a:65:
                    1a:af:e7:75:27:a9:25:6f:49:c9:da:65:6b:cc:b2:
                    26:04:44:8b:d1:4d:83:e4:92:e6:f9:63:0e:7e:72:
                    d0:1b:63:5a:35:b1:43:49:25:ea:70:b1:a6:08:e8:
                    96:36:99:bd:f9:89:84:ed:e2:35:8f:3b:21:ec:fe:
                    47:6b:8f:3e:be:eb:28:cd:28:cc:9b:fe:d8:eb:f4:
                    7f:f3:b5:a9:ab:af:81:26:91:d3:6e:e2:a8:83:a1:
                    d9:9f:dc:df:b5:d4:47:4e:b2:2c:c2:76:72:7d:0a:
                    d9:88:d5:b4:fd:25:bc:ac:3b:53:95:57:80:7a:27:
                    37:32:21:f1:6b:05:0d:f5:3a:95:f1:e4:eb:ff:a1:
                    d5:6d:90:63:db:d8:6b:10:0b:8a:fa:80:2e:fd:5a:
                    9d:24:e0:14:45:90:77:97:a1:92:18:de:c1:8d:0f:
                    d5:4f:f9:49:06:fb:7b:ff:dc:e6:26:86:26:4e:69:
                    31:4f:85:88:cd:41:73:91:d5:19:5c:44:e3:07:a2:
                    ef:70:f6:1f:c5:06:b3:ee:ba:a1:44:c9:f8:73:4f:
                    f2:43:58:c0:09:dc:e0:56:d3:78:10:79:e9:cc:08:
                    e9:40:65:f4:59:5b:29:2b:3c:7f:d3:a4:5f:27:86:
                    39:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FF:95:3B:CE:F2:FC:99:7D:7C:06:0A:7E:09:59:85:7D:BD:77:95
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a383030303a3a2f34302d3430203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a64:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         28:52:74:17:f2:46:c6:c7:11:51:18:28:93:88:57:22:cc:a3:
         ae:cb:f0:f8:7d:6f:fb:8b:47:8c:ab:34:62:80:78:82:f4:8b:
         22:aa:4b:5e:14:24:9a:39:48:74:a1:cc:92:a5:5a:8d:b3:a2:
         d9:78:7b:87:dd:2b:1a:6d:cf:76:fe:ae:01:a2:39:13:f0:15:
         38:9f:3f:2f:6e:fd:aa:ab:03:c4:64:af:8a:2c:61:2b:e1:4e:
         aa:d1:ca:77:d0:6d:03:af:71:29:88:23:c7:0f:db:86:99:81:
         f3:2d:c7:e2:12:8d:2d:9a:42:02:5b:9d:a6:f4:1e:9a:08:b1:
         1a:84:cc:49:b2:ad:3e:d9:83:08:9d:d4:4d:2e:9d:d1:bc:42:
         c8:c8:da:51:5c:37:ba:50:06:ec:77:4c:e9:9d:2d:db:4c:d2:
         42:12:06:2b:75:00:fe:88:7f:27:c0:1c:ea:dc:f8:43:d1:43:
         ff:27:91:79:bb:3d:54:f6:2e:e2:06:9c:b2:4a:00:65:6b:7b:
         11:72:0d:1d:c8:86:a3:c0:42:22:82:34:81:73:9d:8e:3f:65:
         9a:e2:9b:ed:42:7e:5c:1a:0f:fc:2d:87:95:50:8d:31:66:bb:
         e2:7b:d5:93:df:cd:7d:7a:aa:98:d2:c2:cf:84:fa:ec:fe:3a:
         9e:cc:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org