Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
File:                     323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa (raw, json)
Hash identifier:          GjB73PrzHIO5vOSn5kmHSD20v4Y/SQ9VSNAJcPOc1o8=
Subject key identifier:   FE:87:25:91:F7:CC:D9:42:8D:0C:C3:8A:54:CF:FB:E9:9B:6F:6A:1C
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       164525C1B34C732CB1B98C6638F633698CA01EED
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:20 +0000
ROA not before:           Thu 04 Apr 2024 21:58:20 +0000
ROA not after:            Thu 03 Apr 2025 22:03:20 +0000
asID:                     265377
IP address blocks:        2804:3324:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 06:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:45:25:c1:b3:4c:73:2c:b1:b9:8c:66:38:f6:33:69:8c:a0:1e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:20 2024 GMT
            Not After : Apr  3 22:03:20 2025 GMT
        Subject: CN=FE872591F7CCD9428D0CC38A54CFFBE99B6F6A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:6f:3f:da:ab:fb:77:d4:bc:5d:51:dd:fd:
                    f4:4b:b5:f2:19:d0:82:54:26:bc:9c:76:c5:bb:ca:
                    47:36:99:70:1a:8d:29:9b:56:ab:59:46:c6:ff:6a:
                    3e:43:13:b3:4e:b2:54:91:b7:2f:ff:19:db:7f:01:
                    ce:d7:ea:00:2a:be:e9:a5:ab:86:6c:cc:b0:68:eb:
                    94:3c:59:b6:51:f8:95:62:22:ac:59:99:f3:52:2e:
                    4a:e1:18:95:33:78:67:8d:01:0a:c3:41:b3:24:32:
                    e2:f5:07:74:86:3d:ab:1c:dc:c2:90:2c:fe:77:67:
                    8a:0a:27:24:bc:2f:5f:c6:8b:ba:ab:dc:b5:63:9b:
                    30:e4:54:17:63:19:9c:b2:51:32:1d:3a:bb:a8:62:
                    44:89:d2:36:d1:0f:04:fc:f4:3d:5f:c6:c3:8d:7d:
                    c1:9d:34:1f:0b:91:28:ca:04:a3:4d:31:7f:67:8c:
                    93:b0:59:ba:a7:73:8c:7b:19:c1:f0:4f:88:95:51:
                    c6:3b:54:e7:2d:2a:af:68:00:7c:d2:19:f9:bd:54:
                    d2:f9:f8:9c:e4:d1:e9:53:49:0d:d8:2d:64:5e:8f:
                    bf:83:93:b9:cf:9b:b1:5e:c4:3f:b2:da:95:85:9b:
                    40:4f:79:66:b0:02:85:e8:55:e3:77:e1:3d:2b:f7:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:87:25:91:F7:CC:D9:42:8D:0C:C3:8A:54:CF:FB:E9:9B:6F:6A:1C
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a343030303a3a2f33342d3334203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:28:03:52:09:2c:39:c0:e9:41:11:af:f6:da:ed:2a:78:
         e5:af:0b:1d:73:92:44:4f:49:08:e7:fb:1f:22:0c:ae:9d:7b:
         dc:3e:04:5b:3d:5f:32:4d:1c:33:c1:bb:69:e3:75:c6:76:c5:
         b7:dd:18:23:00:29:06:7f:66:be:2b:e7:a2:ef:cf:92:ec:07:
         74:1d:84:e8:ab:e2:c5:c0:6d:5f:9f:5d:a6:d9:cd:05:e8:9f:
         cf:61:0b:4a:f6:64:a3:29:dc:61:f0:7a:67:5e:29:cf:48:10:
         b8:74:86:b5:3f:29:0f:96:30:9f:b6:1c:7d:cf:08:4f:ce:cd:
         1d:49:c4:b6:69:ca:6f:cd:08:b7:30:46:09:63:e3:9a:c2:e0:
         2a:92:e7:f3:bb:09:de:fb:59:8d:e4:4d:eb:4a:27:c0:42:7b:
         0a:f8:3d:a6:48:3a:e6:69:9b:48:43:44:3f:5f:e8:49:ee:78:
         41:72:84:57:5d:75:d6:7d:a1:ed:03:d6:d3:15:78:bd:47:e9:
         92:bf:68:a8:92:a2:74:b9:c5:b3:62:5c:11:3c:46:f5:15:b6:
         96:fc:ac:66:19:7d:c4:12:40:0f:13:f4:5d:a4:99:27:c4:06:
         a6:f1:09:e2:c4:ac:4e:b0:6c:26:a2:e5:f1:8c:f5:5e:7a:45:
         69:5c:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:51:07 2024 by rpki-client on console-ams.rpki-client.org