Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa
File:                     323830343a336236343a3a2f33322d3432203d3e20323636313436.roa (raw, json)
Hash identifier:          iI+njyCERvKY3DO3ckMPOcAb8RF1gM2h2OmBGNnchxA=
Subject key identifier:   7E:E3:30:24:1A:3B:01:B0:3E:04:79:57:DA:57:1B:FF:3F:C7:44:89
Certificate issuer:       /CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
Certificate serial:       6ADBC6F8C4C2612D1A84166614444E543BE4A2BD
Authority key identifier: 05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa
Signing time:             Thu 04 Apr 2024 07:52:46 +0000
ROA not before:           Thu 04 Apr 2024 07:47:46 +0000
ROA not after:            Thu 03 Apr 2025 07:52:46 +0000
asID:                     266146
IP address blocks:        2804:3b64::/32 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl
                          rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 21:04:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:db:c6:f8:c4:c2:61:2d:1a:84:16:66:14:44:4e:54:3b:e4:a2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05DF1913567AE412C5B983AC9E0D60AE0CA55E3B
        Validity
            Not Before: Apr  4 07:47:46 2024 GMT
            Not After : Apr  3 07:52:46 2025 GMT
        Subject: CN=7EE330241A3B01B03E047957DA571BFF3FC74489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:67:9f:45:cc:5f:51:d6:50:76:67:e3:e1:ab:
                    14:2f:ca:e2:d0:a1:a6:ff:64:96:dc:03:50:12:74:
                    10:cb:69:67:6b:26:af:6f:4c:41:43:9c:58:83:ef:
                    4f:32:87:1d:37:3a:3b:fa:19:c2:4a:1c:80:3b:13:
                    3d:c5:c7:f2:27:5a:53:5a:94:25:e9:c9:c3:eb:a8:
                    76:f4:e6:f8:6d:76:1b:48:a7:9e:36:d5:6e:53:be:
                    ef:1c:fa:54:47:75:69:67:b2:18:ed:35:17:67:26:
                    3e:6c:8c:34:3d:21:95:b7:08:df:52:8e:78:c9:af:
                    36:57:f8:73:23:0f:54:4c:7f:6c:03:51:d5:db:5b:
                    18:53:9b:51:87:10:36:9b:c0:ba:f1:87:c1:0d:21:
                    99:f3:f5:08:20:09:5c:18:70:61:90:12:ee:f5:e7:
                    0b:f8:76:cf:98:a2:8c:a7:ed:a4:73:bf:14:b4:03:
                    40:f7:7d:04:97:c4:90:e4:a1:b0:3f:ed:75:c3:19:
                    aa:34:e2:39:ae:a7:70:6d:57:41:09:10:35:b7:c2:
                    d0:b7:42:e8:54:46:e4:d9:14:7d:e8:86:4e:4e:50:
                    7f:c5:5a:d4:13:99:26:e9:6d:8d:da:d6:10:76:08:
                    f2:5a:9d:60:32:47:b2:dd:45:52:70:2f:0e:78:ff:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:30:24:1A:3B:01:B0:3E:04:79:57:DA:57:1B:FF:3F:C7:44:89
            X509v3 Authority Key Identifier:
                keyid:05:DF:19:13:56:7A:E4:12:C5:B9:83:AC:9E:0D:60:AE:0C:A5:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05DF1913567AE412C5B983AC9E0D60AE0CA55E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/1/323830343a336236343a3a2f33322d3432203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b64::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:b8:0b:5e:cd:cc:1e:3e:7b:d0:f3:34:bc:ec:10:bf:56:30:
         16:15:0c:5d:ba:fa:e0:30:47:62:9b:10:d4:ff:97:02:00:e0:
         53:70:99:9f:1d:e7:d0:9a:4c:dd:15:b6:2f:cf:44:7f:d9:2c:
         7b:58:77:5f:f6:53:77:69:2a:fd:01:55:6b:d3:68:d7:57:19:
         0f:2f:2c:19:c5:93:d5:d2:a2:fe:5b:b7:49:76:25:38:b0:22:
         df:f9:74:89:3b:43:ef:10:32:47:62:49:d8:63:43:5d:48:45:
         9e:95:f8:35:8c:c7:da:48:c0:a6:06:b8:14:98:43:b8:a2:7a:
         57:3c:b4:9a:1f:d7:75:10:b9:b0:19:d4:1b:3b:bb:9a:0b:fb:
         c5:e7:8a:95:6f:35:ed:fe:24:2d:f6:3c:60:64:d0:d0:9b:b6:
         1b:1e:c3:b1:65:69:f6:91:fa:8f:ee:3b:cd:72:1d:aa:fa:47:
         c4:9d:c4:88:fd:5d:24:1e:04:28:58:c2:fa:4e:15:b8:33:b0:
         ad:52:1b:6f:14:d9:e1:61:23:34:d9:cf:4f:5b:3d:78:4b:69:
         73:b2:e3:6e:45:cc:51:a4:37:62:28:8a:2e:33:69:dc:15:fe:
         aa:a9:86:72:db:20:b3:89:fd:79:60:ff:70:93:ca:23:f7:3b:
         c8:79:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:41:58 2024 by rpki-client on console-fra.rpki-client.org