Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
File:                     323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (raw, json)
Hash identifier:          vHMoVzcQtexxyFFSsCDhy6KM+UmjdH+tEOru9AKI4Ww=
Subject key identifier:   42:06:5A:18:7F:A2:29:DC:4E:2F:29:53:87:F7:92:CD:AF:E8:B3:AF
Certificate issuer:       /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Certificate serial:       40B7737BE4E8DD5C835352129857377F283DE7B0
Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
Signing time:             Thu 04 Apr 2024 16:56:33 +0000
ROA not before:           Thu 04 Apr 2024 16:51:33 +0000
ROA not after:            Thu 03 Apr 2025 16:56:33 +0000
asID:                     271343
IP address blocks:        2804:7a08::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl
                          rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b7:73:7b:e4:e8:dd:5c:83:53:52:12:98:57:37:7f:28:3d:e7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
        Validity
            Not Before: Apr  4 16:51:33 2024 GMT
            Not After : Apr  3 16:56:33 2025 GMT
        Subject: CN=42065A187FA229DC4E2F295387F792CDAFE8B3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:81:79:b0:06:37:6e:3e:31:32:4c:c5:e1:
                    ff:b5:18:07:28:78:66:a8:15:1d:a4:2b:31:be:ee:
                    76:81:07:c7:72:c2:a0:1a:4e:d8:53:8b:26:70:8c:
                    f5:1d:37:b2:d8:57:1d:cc:85:94:7a:62:f4:27:53:
                    6d:66:97:40:b7:f8:44:29:5e:7d:b3:86:4e:66:1f:
                    a7:8d:76:71:e1:dd:21:32:1c:8d:a5:4d:d5:8d:e7:
                    27:fb:0b:c4:6b:cf:30:5d:b0:c3:61:1e:8e:46:0d:
                    d9:6d:1f:fa:8f:f7:8b:06:4f:f1:e5:ad:b4:11:99:
                    b3:c2:29:86:f5:0a:a9:8c:b5:18:54:a7:6f:01:ab:
                    89:2c:2f:02:c6:c1:5c:34:c0:fe:dc:56:0e:81:f3:
                    ff:97:58:30:c1:c6:4e:bf:5c:f7:61:ba:b6:59:ac:
                    89:d4:d4:63:01:42:8c:21:8b:90:7a:85:1b:3d:14:
                    f1:b9:6f:0c:b6:16:c5:74:8b:fc:77:78:ff:e8:ad:
                    b0:95:20:36:ba:70:d7:91:7e:50:42:72:b5:3c:66:
                    74:5c:99:a5:c1:a1:de:a9:d9:f4:53:9d:d5:09:32:
                    89:d0:74:39:f5:2b:81:44:1c:34:5c:36:29:85:23:
                    9e:06:bf:fa:b4:87:e6:15:60:cd:de:3a:f9:98:c9:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:5A:18:7F:A2:29:DC:4E:2F:29:53:87:F7:92:CD:AF:E8:B3:AF
            X509v3 Authority Key Identifier:
                keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a08::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:c0:2a:2b:19:0d:14:4f:54:a1:9d:c8:c5:3c:e7:16:f1:
         29:b2:e5:1b:29:4f:23:1f:3b:ab:36:7c:e1:94:99:ca:b7:80:
         0d:2f:d2:d9:4e:23:45:90:46:d9:af:9e:c1:17:6b:b1:0d:8c:
         64:2a:ac:88:c2:47:be:49:e5:a6:68:ec:15:c0:33:7d:31:f2:
         aa:0f:3b:92:7a:f4:64:26:08:1b:23:2e:28:dc:45:8d:ef:87:
         9b:ff:5e:c8:ff:fc:f0:6d:af:63:ec:d6:42:e1:84:6c:22:4c:
         f1:50:e4:f8:26:a1:ca:89:67:04:43:02:d9:fa:a5:13:ac:59:
         fa:1b:6f:8f:ea:9a:55:22:0a:f7:9b:51:42:58:6f:f2:28:79:
         ab:3a:28:4c:75:92:58:53:a1:3c:b4:f0:1c:7c:61:49:e2:49:
         17:f2:76:52:39:f6:5e:a8:6d:a6:dc:bb:a8:1f:d9:7a:e1:8a:
         c2:b1:5d:68:16:fb:d2:be:b1:29:63:a7:47:16:82:e3:0f:e4:
         47:e1:0c:78:fb:17:a6:97:be:bd:dc:6b:cc:ba:aa:b8:f1:9e:
         b0:f6:0e:73:58:62:88:fe:c8:74:e2:2c:16:ff:20:22:02:6c:
         cc:75:a4:73:37:68:95:e8:3e:d6:e5:a0:90:9b:36:af:b1:cc:
         61:c4:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:55 2024 by rpki-client on console-fra.rpki-client.org