Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323461303a3a2f34342d3434203d3e20323633303439.roa
File:                     323830343a6665303a323461303a3a2f34342d3434203d3e20323633303439.roa (raw, json)
Hash identifier:          Mrkw4aanbHOflo/P0RlV7uSTIcTSlaBS0p8Z9BW1uq0=
Subject key identifier:   42:D6:2E:2C:49:4C:78:46:7C:40:1D:C1:D1:5B:BA:6C:BE:FF:29:67
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       1836804EF1EDD5E3AD79758067DC18F50D093E5C
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323461303a3a2f34342d3434203d3e20323633303439.roa
Signing time:             Wed 17 Jul 2024 14:51:31 +0000
ROA not before:           Wed 17 Jul 2024 14:46:31 +0000
ROA not after:            Wed 16 Jul 2025 14:51:31 +0000
asID:                     263049
IP address blocks:        2804:fe0:24a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:36:80:4e:f1:ed:d5:e3:ad:79:75:80:67:dc:18:f5:0d:09:3e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Jul 17 14:46:31 2024 GMT
            Not After : Jul 16 14:51:31 2025 GMT
        Subject: CN=42D62E2C494C78467C401DC1D15BBA6CBEFF2967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:5a:aa:86:af:07:e1:fa:aa:c1:79:f6:1f:
                    ad:6d:8b:4a:e7:15:dc:e5:e1:a0:b1:2f:c4:46:38:
                    aa:da:ee:bb:85:2d:ec:0f:1e:5a:7a:ee:61:6f:a6:
                    bd:13:2a:d8:c6:f8:6d:2b:34:43:b5:0f:e5:f4:bd:
                    62:f1:c8:bf:9e:a4:c4:a1:0a:2b:4f:18:d0:92:39:
                    d1:e5:4d:b9:c2:79:06:9d:a1:d6:de:0a:97:6e:46:
                    32:4c:01:25:d2:8d:ed:7c:ab:e5:9b:c9:3a:60:3a:
                    ae:a0:07:9d:73:40:f5:12:35:d7:f7:ce:3d:69:0e:
                    08:c0:31:1a:68:36:ff:d4:16:69:b1:cd:0a:2a:f9:
                    fe:47:b6:ed:c5:99:ff:7c:aa:13:ec:5e:be:46:a4:
                    94:31:42:8a:44:a3:d9:48:5f:9e:78:5b:fb:79:c0:
                    c8:07:dc:97:0f:fa:d1:4f:34:30:2f:5f:f5:cb:3b:
                    95:be:37:a3:53:f8:f8:06:bb:fe:a5:fa:68:48:c2:
                    c9:97:d7:c0:ab:d5:95:9a:36:08:32:dd:7c:4a:04:
                    d8:21:3f:06:f2:d2:05:dd:1a:11:c1:7c:7d:1d:6a:
                    61:bb:63:5e:bb:91:7c:b6:f7:22:d2:0c:32:8d:de:
                    c7:30:cc:93:90:0e:e3:ea:53:a1:41:4c:45:93:33:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D6:2E:2C:49:4C:78:46:7C:40:1D:C1:D1:5B:BA:6C:BE:FF:29:67
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a323461303a3a2f34342d3434203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:24a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:0c:a5:ef:e0:d9:58:f8:9f:7b:85:22:39:5d:f2:1e:6d:
         87:03:8a:d2:05:51:4f:27:f2:71:e0:b2:ee:e2:e6:45:16:24:
         9d:8b:82:50:b3:8e:f8:6e:a5:33:b8:d7:9c:cf:04:d2:7b:7d:
         74:e6:f6:bf:77:88:4a:0b:5e:f9:77:32:9b:80:51:dd:2a:7a:
         c8:4c:cc:c3:7c:86:06:7c:6b:86:2a:0c:b8:b2:38:b6:62:eb:
         16:c0:d0:a1:7c:a7:a1:45:10:9a:53:33:93:1c:4a:d3:7c:e9:
         aa:9d:ae:c7:a1:08:0f:18:fe:1a:e9:ea:e9:25:56:06:52:90:
         a7:af:e6:38:85:a9:b1:5d:a5:29:6a:75:d7:1c:62:02:b6:90:
         d0:08:f7:64:f9:3d:dc:e1:be:a6:52:7f:41:54:4d:ae:6e:59:
         88:6f:d5:8e:cb:6c:ca:66:c3:a3:59:d8:45:55:c7:68:d5:3d:
         a0:4f:86:97:b2:6c:40:ff:a0:29:2e:83:8b:2b:74:e4:68:53:
         33:32:d0:6a:61:eb:14:e9:aa:52:4e:69:6e:54:ef:51:1c:4e:
         17:58:cc:9c:1d:f7:eb:fe:bd:e5:56:a0:d4:10:50:e0:53:dc:
         d0:2d:21:3c:0d:d2:c0:38:cc:ca:bf:16:f9:ce:d5:0c:57:cb:
         26:c0:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:03 2024 by rpki-client on console-fra.rpki-client.org