Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa
File:                     323830343a316432343a3a2f33322d3438203d3e20323634333530.roa (raw, json)
Hash identifier:          Tl4AQLIj2Ejes1bfi1rtu9Anpn4dxorNRIlpfCWLMuQ=
Subject key identifier:   8F:0F:0A:FA:D9:82:32:8B:14:29:71:4C:83:14:F8:8E:F3:69:89:9C
Certificate issuer:       /CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
Certificate serial:       7345517CB2599F5C6D7FC5308A487CEEBAE78387
Authority key identifier: 68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa
Signing time:             Thu 04 Apr 2024 02:34:53 +0000
ROA not before:           Thu 04 Apr 2024 02:29:53 +0000
ROA not after:            Thu 03 Apr 2025 02:34:53 +0000
asID:                     264350
IP address blocks:        2804:1d24::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl
                          rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:45:51:7c:b2:59:9f:5c:6d:7f:c5:30:8a:48:7c:ee:ba:e7:83:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686F0BBFEFAB24C90DCC45D743C92337251B2CA7
        Validity
            Not Before: Apr  4 02:29:53 2024 GMT
            Not After : Apr  3 02:34:53 2025 GMT
        Subject: CN=8F0F0AFAD982328B1429714C8314F88EF369899C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:a7:d5:3b:a8:11:77:e2:82:02:20:00:c4:
                    cd:34:b6:9f:93:bb:7c:39:7b:1d:70:a5:ec:47:a4:
                    ac:29:bc:15:52:04:0d:b8:ef:8c:fe:d9:d0:72:8a:
                    9f:5f:ba:c0:a7:8c:18:a4:56:f6:7d:a8:7e:4c:f6:
                    c7:1f:59:cd:5a:e3:7d:47:1d:f6:25:c6:cf:74:b0:
                    7d:cb:fc:86:01:fd:79:3a:fb:2b:f0:4a:7b:e1:48:
                    4c:7a:e7:c9:fa:30:c5:02:7b:8b:f9:5e:9d:d1:12:
                    4a:bd:70:f5:f8:ed:88:c1:72:bc:cd:bd:fa:19:29:
                    17:de:33:d4:7a:f7:64:e3:92:e2:c4:a0:01:b1:91:
                    5f:73:da:52:ce:a9:76:7d:d9:e8:0d:13:35:90:9f:
                    93:7b:f0:27:de:73:55:2c:38:8b:a0:d2:ca:93:0c:
                    ca:e9:a9:9e:40:4d:10:70:ec:49:8e:2a:57:89:de:
                    82:16:85:e5:9a:0f:3f:27:cb:2b:08:40:94:69:84:
                    1e:db:0e:3f:5d:57:63:b2:20:e4:a3:d7:e4:8e:6e:
                    b0:e5:db:1d:50:4f:e0:a8:75:ae:1c:b9:29:82:a7:
                    31:01:b2:b7:b5:b6:26:0b:09:a0:50:e1:82:8c:5e:
                    01:36:dd:38:15:0c:1e:cd:0d:8f:a0:09:8b:5b:90:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0F:0A:FA:D9:82:32:8B:14:29:71:4C:83:14:F8:8E:F3:69:89:9C
            X509v3 Authority Key Identifier:
                keyid:68:6F:0B:BF:EF:AB:24:C9:0D:CC:45:D7:43:C9:23:37:25:1B:2C:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/686F0BBFEFAB24C90DCC45D743C92337251B2CA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hfqb3R5gK2SQ3Kvgxz6DhnH3nL125Sw3Ajj2wMXmfof2/1/323830343a316432343a3a2f33322d3438203d3e20323634333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:fc:8c:f0:7a:a8:2e:97:d9:4b:43:22:aa:d9:24:44:b7:
         73:05:a8:2b:4d:a2:f6:c3:93:5b:4f:5b:93:a7:06:a5:8c:24:
         81:9c:8b:3e:e3:04:9e:fa:0c:f8:10:a3:9b:06:ec:7a:6b:00:
         2f:82:8a:75:ae:b6:55:9f:84:cc:4a:e6:f8:ff:84:e7:a1:13:
         03:f5:9f:f5:aa:3c:15:d5:23:44:7b:dc:02:5f:07:01:ef:54:
         24:9b:a6:8f:94:78:0c:5f:68:9f:17:53:f0:df:bd:5c:5f:4a:
         7f:80:7e:10:bb:2d:a2:d9:d1:2b:21:77:12:b1:b7:90:34:bb:
         94:ad:4c:b8:7f:98:41:6a:30:62:9f:b0:63:09:45:75:38:b1:
         c7:55:dd:87:fd:24:17:42:36:fb:80:e5:7f:c8:cd:33:20:36:
         c6:fd:49:89:77:a0:5a:dd:b2:a0:57:45:75:07:dc:3f:ef:18:
         a7:c7:7f:31:39:eb:c2:36:e7:d9:fe:0e:10:49:0a:bc:b3:c9:
         03:d2:72:97:6a:c8:c4:13:96:c4:6a:76:1a:25:47:0b:1f:62:
         1c:ab:e9:71:3b:bf:96:94:ef:9b:63:f9:13:59:2b:e9:96:0d:
         f2:22:9e:f4:0a:22:55:54:e4:2b:c5:9a:eb:f1:e9:fb:ba:f7:
         aa:2e:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:32 2024 by rpki-client on console-ams.rpki-client.org