Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
File:                     323830343a6136343a3a2f33322d3334203d3e203532383933.roa (raw, json)
Hash identifier:          bec8fDxdUo3+CzLa3XxM5fXKPhy19Hw6qnTV/0oZBEc=
Subject key identifier:   B1:98:EE:AD:E8:C8:A8:26:EA:99:DF:86:98:F5:1E:1D:FE:33:F1:6E
Certificate issuer:       /CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
Certificate serial:       797F049903A195BA4DF23B4B1D32F98866CB4049
Authority key identifier: EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa
Signing time:             Wed 03 Apr 2024 18:31:23 +0000
ROA not before:           Wed 03 Apr 2024 18:26:23 +0000
ROA not after:            Wed 02 Apr 2025 18:31:23 +0000
asID:                     52893
IP address blocks:        2804:a64::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl
                          rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7f:04:99:03:a1:95:ba:4d:f2:3b:4b:1d:32:f9:88:66:cb:40:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB8194E305061AD55048DBA774FC26D3BF2E65E3
        Validity
            Not Before: Apr  3 18:26:23 2024 GMT
            Not After : Apr  2 18:31:23 2025 GMT
        Subject: CN=3082010A0282010100A291E7E06F61B7C957FBD07A9E982420ABFCEB236238DDD8EE9FE99F3F93953FB8F3B0B36C4AA97072E9C273B3CA0DC33AFF91CD46B9A55C33966DD0F6A117873C69EA76A39236A2B62CFA231A2CF73458BE9FCC4DB06805C68BB6A05032CD73B68671290A90A93E8898BA823B5A4CFAF49C915A3C8E930A7F29A6AE230836DB7E34FB19B9FFD562C3208FD5E8070C917EB30D1334AA3EB7D55F9D2A01CDABA2FAA7D9A4B276AC4F765C6129DBF4A4964A54F8F27881CBA7750D357C842A0C6C1A426035473E1D4217EC2A49CFFCE8DF754CF28962BF4C2E722B2EBD299191017BE39DC5903B29B9F56C4FDB873E8D569D54E231193EB8664886A2E9CB44B79F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:e7:e0:6f:61:b7:c9:57:fb:d0:7a:9e:98:
                    24:20:ab:fc:eb:23:62:38:dd:d8:ee:9f:e9:9f:3f:
                    93:95:3f:b8:f3:b0:b3:6c:4a:a9:70:72:e9:c2:73:
                    b3:ca:0d:c3:3a:ff:91:cd:46:b9:a5:5c:33:96:6d:
                    d0:f6:a1:17:87:3c:69:ea:76:a3:92:36:a2:b6:2c:
                    fa:23:1a:2c:f7:34:58:be:9f:cc:4d:b0:68:05:c6:
                    8b:b6:a0:50:32:cd:73:b6:86:71:29:0a:90:a9:3e:
                    88:98:ba:82:3b:5a:4c:fa:f4:9c:91:5a:3c:8e:93:
                    0a:7f:29:a6:ae:23:08:36:db:7e:34:fb:19:b9:ff:
                    d5:62:c3:20:8f:d5:e8:07:0c:91:7e:b3:0d:13:34:
                    aa:3e:b7:d5:5f:9d:2a:01:cd:ab:a2:fa:a7:d9:a4:
                    b2:76:ac:4f:76:5c:61:29:db:f4:a4:96:4a:54:f8:
                    f2:78:81:cb:a7:75:0d:35:7c:84:2a:0c:6c:1a:42:
                    60:35:47:3e:1d:42:17:ec:2a:49:cf:fc:e8:df:75:
                    4c:f2:89:62:bf:4c:2e:72:2b:2e:bd:29:91:91:01:
                    7b:e3:9d:c5:90:3b:29:b9:f5:6c:4f:db:87:3e:8d:
                    56:9d:54:e2:31:19:3e:b8:66:48:86:a2:e9:cb:44:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:98:EE:AD:E8:C8:A8:26:EA:99:DF:86:98:F5:1E:1D:FE:33:F1:6E
            X509v3 Authority Key Identifier:
                keyid:EB:81:94:E3:05:06:1A:D5:50:48:DB:A7:74:FC:26:D3:BF:2E:65:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB8194E305061AD55048DBA774FC26D3BF2E65E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HabmY9bBBucx4XSrvZMKMH3Z1iWNWoquqibYBbnqamM6/1/323830343a6136343a3a2f33322d3334203d3e203532383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:42:2d:a2:74:44:67:cd:f0:e7:a5:c7:f0:e7:77:e2:32:9b:
         a6:27:5b:86:6e:3d:2b:26:58:78:08:36:da:50:17:25:26:c7:
         cc:3e:01:12:62:d6:f0:a4:5d:7d:62:5a:b5:4e:ce:11:18:dc:
         d6:cb:dd:04:cd:e4:1b:a1:7f:6c:ca:c0:02:76:01:b4:6d:f2:
         ec:a4:7d:60:fe:6a:fa:d4:ef:bf:c6:bc:a9:e3:6b:cc:d1:5a:
         6c:9c:ff:63:26:12:76:3b:f7:73:1f:6e:10:23:a4:60:74:ac:
         21:65:2b:8e:9a:ad:18:de:23:a0:e4:cc:ef:35:40:9d:54:01:
         2c:bd:c0:81:d8:e3:b5:84:c9:a5:ec:0b:40:b7:cb:17:d0:26:
         0a:72:34:db:3b:53:bb:8f:58:27:11:dc:72:dd:37:6f:c9:47:
         fe:85:bf:db:09:67:03:b9:ee:3a:08:e7:bc:23:84:64:62:d3:
         5c:96:c7:db:d6:28:e9:af:25:02:b8:56:4f:d6:34:30:cb:df:
         d9:09:94:bb:6b:ff:31:d7:44:32:67:8e:a4:7f:47:e9:e9:ae:
         e2:5e:03:88:14:f9:41:ba:e4:0d:f5:7d:a7:f3:d1:08:67:5c:
         9c:6f:78:27:4f:79:9a:5c:2f:d8:fa:6e:d2:82:ea:6f:72:19:
         a0:fc:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org