Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa
File:                     323830343a333332343a3a2f33322d3332203d3e20323635333737.roa (raw, json)
Hash identifier:          U0dZoyNcDlYBG7rIeGuLvSwq460wge8VrDDGLAZN/zk=
Subject key identifier:   75:26:83:CF:A8:D3:21:91:E9:5D:40:6F:FF:2E:2A:92:DF:34:B6:BE
Certificate issuer:       /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial:       764D1CFA45FC3BCF125188EF8EA6FB7BDE047809
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa
Signing time:             Thu 04 Apr 2024 22:03:20 +0000
ROA not before:           Thu 04 Apr 2024 21:58:20 +0000
ROA not after:            Thu 03 Apr 2025 22:03:20 +0000
asID:                     265377
IP address blocks:        2804:3324::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
                          rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4d:1c:fa:45:fc:3b:cf:12:51:88:ef:8e:a6:fb:7b:de:04:78:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
        Validity
            Not Before: Apr  4 21:58:20 2024 GMT
            Not After : Apr  3 22:03:20 2025 GMT
        Subject: CN=752683CFA8D32191E95D406FFF2E2A92DF34B6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:35:11:bc:fb:a9:b4:32:3d:e4:4f:09:79:
                    d8:ce:8b:b3:69:fe:f6:a2:aa:d0:25:8b:12:f0:7c:
                    79:0e:49:26:06:3a:13:08:2c:8e:4b:75:18:ef:50:
                    f2:1c:df:d3:b1:7f:b9:68:d2:15:2d:32:bb:87:0d:
                    2e:ff:54:dd:b4:97:12:76:f8:19:ec:9b:ad:d5:49:
                    24:e6:e9:b2:b4:09:9c:df:f4:f3:10:f0:03:ad:f2:
                    7f:71:0c:6c:ff:04:cc:13:5b:dc:00:73:08:fe:9e:
                    d5:11:03:8b:a8:92:f1:a7:ff:12:e2:5d:4a:11:53:
                    dd:ac:16:24:0f:10:d1:16:4e:59:5c:7f:d6:1e:d1:
                    7f:e9:26:fd:35:79:69:54:3f:e3:9b:b2:01:ee:c7:
                    7a:c2:29:a9:c9:c6:4d:be:43:db:28:ed:2a:48:a9:
                    e3:29:98:a5:c0:06:d4:0d:4e:28:c4:31:da:64:94:
                    eb:22:1d:32:7e:df:b1:ca:f2:96:dc:b4:6b:ba:71:
                    4a:11:fb:5b:52:c3:97:16:8c:20:88:2c:4a:84:0f:
                    3e:d9:3c:b7:9b:4c:26:4f:9d:f0:e6:2f:bd:4e:7a:
                    1b:ee:9b:89:ad:d2:85:dc:b7:f1:3a:ef:ab:ac:5d:
                    72:0c:65:3e:c2:c6:12:6d:81:ed:ec:62:c7:af:57:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:26:83:CF:A8:D3:21:91:E9:5D:40:6F:FF:2E:2A:92:DF:34:B6:BE
            X509v3 Authority Key Identifier:
                keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3324::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:be:cd:d3:2a:04:4e:ec:5d:3a:68:2c:15:68:90:f6:ae:
         9b:35:7c:f3:00:90:a8:8b:56:f7:5f:a1:4b:15:ca:1e:52:42:
         a5:e4:a1:98:48:65:17:3f:6d:1a:6a:8f:91:e7:a2:47:ea:6a:
         2e:bd:8d:86:93:6e:6a:bb:92:09:0b:9f:75:4f:9f:26:ac:67:
         b3:86:8f:87:76:cd:a6:97:9c:b4:ad:b6:8b:3d:3c:0b:74:08:
         29:83:5f:7e:37:e6:f5:7b:0e:d9:bb:28:66:ad:da:a9:44:63:
         64:95:e1:2e:d8:73:a7:6d:54:c3:13:16:cd:e1:aa:a6:fc:ce:
         99:26:10:03:7c:ac:54:f9:d4:fa:03:b3:42:be:8c:d4:fd:5e:
         78:40:0b:51:d6:02:05:bb:c5:3d:0d:7a:06:c8:05:3d:ca:32:
         99:3b:ad:0a:0c:e9:bf:42:60:1d:83:28:84:46:c8:4c:31:1f:
         f7:72:9c:36:fe:e4:92:06:11:ab:94:86:e6:5f:3e:79:87:f5:
         c2:1f:c4:a9:b0:ac:69:50:09:ec:d1:71:54:30:be:51:1a:2a:
         5f:f6:56:13:b4:86:99:f9:d0:57:b7:a9:a7:22:36:c5:9c:98:
         78:0d:46:a8:4f:1f:6e:96:2a:6d:cc:21:2b:0f:3f:05:56:ff:
         83:df:25:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:10:08 2024 by rpki-client on console-ams.rpki-client.org