Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa
File:                     323830343a6633303a3a2f33322d3438203d3e20323633353639.roa (raw, json)
Hash identifier:          d/StTTkow+M5BUkcO8MOox931BERda+zEAXsOByBLhc=
Subject key identifier:   E9:EC:80:A2:49:1A:A8:1B:C6:EC:1B:3D:13:BC:00:51:90:BC:98:2D
Certificate issuer:       /CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
Certificate serial:       05D5F3E62054D224BE1ADF51D9EB60784A5AEEE7
Authority key identifier: E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa
Signing time:             Tue 23 Apr 2024 13:31:36 +0000
ROA not before:           Tue 23 Apr 2024 13:26:36 +0000
ROA not after:            Tue 22 Apr 2025 13:31:36 +0000
asID:                     263569
IP address blocks:        2804:f30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl
                          rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:d5:f3:e6:20:54:d2:24:be:1a:df:51:d9:eb:60:78:4a:5a:ee:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A
        Validity
            Not Before: Apr 23 13:26:36 2024 GMT
            Not After : Apr 22 13:31:36 2025 GMT
        Subject: CN=E9EC80A2491AA81BC6EC1B3D13BC005190BC982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4e:95:ae:f9:af:7d:07:f8:69:85:f2:44:a1:
                    d8:5e:e6:90:c7:5f:96:4c:cd:1e:aa:28:c7:6b:24:
                    83:92:24:26:1f:4c:42:58:38:cf:d9:e2:fa:17:24:
                    f9:01:9a:a7:3f:7c:a9:d3:04:07:fb:ae:2b:42:0d:
                    73:73:11:30:47:c7:06:e3:64:3e:06:9b:27:1f:15:
                    39:2e:d9:21:9a:89:87:72:0e:77:8b:8e:c2:1e:ed:
                    d1:71:8b:76:7d:cc:93:50:43:cd:8c:db:df:9c:58:
                    c6:a0:8a:ca:ae:d5:8b:f9:19:bd:c7:f2:f5:83:66:
                    fb:04:28:9e:59:1e:cb:66:97:65:c6:ad:0f:a5:56:
                    58:32:fc:17:6b:77:39:db:a5:61:f2:4b:4d:f1:4f:
                    c9:33:07:90:77:99:48:76:c6:bf:83:f0:7e:9b:47:
                    07:98:84:bb:76:2c:d9:38:ce:33:3c:e1:1a:ed:77:
                    a3:36:dc:67:19:5e:81:fc:59:28:f9:75:bb:82:6f:
                    86:dd:12:48:e1:9b:51:af:71:19:f5:03:80:1a:aa:
                    f1:26:8c:fa:a5:88:21:c7:5a:4a:af:cc:c8:27:2a:
                    c4:b4:1d:f7:db:26:24:94:4b:f6:7e:84:a3:28:c3:
                    ed:cf:08:4d:70:b8:ee:d4:fa:99:a2:a9:60:17:9e:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:80:A2:49:1A:A8:1B:C6:EC:1B:3D:13:BC:00:51:90:BC:98:2D
            X509v3 Authority Key Identifier:
                keyid:E1:C8:E0:FF:8F:E8:F0:85:E2:D7:92:B2:66:3A:22:5B:0D:93:C1:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C8E0FF8FE8F085E2D792B2663A225B0D93C17A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/323830343a6633303a3a2f33322d3438203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:d0:fb:e4:4c:2c:37:2e:cb:19:fd:69:0f:6c:a1:f2:e4:
         37:57:3e:81:db:36:87:f3:85:d9:4a:77:87:70:3a:32:79:4a:
         74:83:4b:43:2b:ac:14:41:25:71:ca:4e:07:7b:34:c8:37:b5:
         ce:9b:18:e2:d3:c7:70:0d:34:cd:ae:81:7e:a8:af:a8:9a:e1:
         58:9f:58:a7:10:1e:34:c5:13:cd:23:ab:03:86:81:c8:a2:34:
         30:1a:65:ae:b0:1c:a5:da:19:2f:cc:11:75:2b:5d:42:d9:61:
         7e:2d:40:b3:4b:c2:a5:19:dd:99:a1:1e:30:c9:de:e0:27:58:
         41:9e:d3:ce:1c:db:2b:ca:84:e7:0e:ee:c8:0c:e9:bf:8e:d7:
         14:80:f8:cc:c8:2d:c0:68:fb:86:38:ca:de:72:db:f2:a7:29:
         2d:44:9f:b7:8f:61:02:21:2b:33:da:e1:49:f7:25:ab:be:51:
         66:8e:3e:56:d0:f2:53:1c:1f:3b:4d:44:c9:2d:a0:07:64:31:
         40:62:a4:dc:d5:eb:a8:6c:8f:30:3a:5e:58:db:3f:2d:d2:75:
         13:93:9c:6f:61:c3:2b:3f:5f:af:00:bf:70:c7:ce:f7:ca:09:
         d6:25:90:aa:b9:0b:6d:71:31:e6:82:e9:72:ab:0b:1e:35:04:
         36:eb:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:22 2024 by rpki-client on console-ams.rpki-client.org