Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/323830343a343765343a3a2f33322d3438203d3e20323637303833.roa
File:                     323830343a343765343a3a2f33322d3438203d3e20323637303833.roa (raw, json)
Hash identifier:          Y7P59gFFtBNzhegwIzt6afHc04RoumtJjViHcAVsNq0=
Subject key identifier:   94:FE:36:88:53:BB:41:73:C5:AA:0B:D8:EB:80:84:E7:CE:53:74:41
Certificate issuer:       /CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
Certificate serial:       07A31E29FB12C4BEA87D3D43F71BAA9B795B5908
Authority key identifier: 1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/323830343a343765343a3a2f33322d3438203d3e20323637303833.roa
Signing time:             Thu 04 Apr 2024 16:02:06 +0000
ROA not before:           Thu 04 Apr 2024 15:57:06 +0000
ROA not after:            Thu 03 Apr 2025 16:02:06 +0000
asID:                     267083
IP address blocks:        2804:47e4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl
                          rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a3:1e:29:fb:12:c4:be:a8:7d:3d:43:f7:1b:aa:9b:79:5b:59:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB
        Validity
            Not Before: Apr  4 15:57:06 2024 GMT
            Not After : Apr  3 16:02:06 2025 GMT
        Subject: CN=94FE368853BB4173C5AA0BD8EB8084E7CE537441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:19:4e:0c:97:04:35:c7:32:67:6c:ac:22:
                    b6:4c:b1:e2:3a:de:e8:54:f6:64:a9:37:66:98:42:
                    a3:6c:42:ce:99:06:98:d3:fd:f8:7b:db:c0:f4:3b:
                    64:86:12:f5:cb:1a:da:71:b9:bc:90:59:6e:48:dc:
                    57:ba:46:44:4b:2b:0f:8b:21:c9:04:72:30:dd:8c:
                    15:5f:96:49:58:a1:2c:bd:1a:a2:0a:ae:5f:87:69:
                    c4:b0:69:c9:d8:6e:0a:15:68:ac:5c:dc:55:df:0f:
                    91:68:c8:97:70:16:5d:2e:f2:1f:7c:82:64:eb:17:
                    4b:37:30:4b:a7:16:f8:df:6c:3a:a6:23:5b:8f:57:
                    c8:fa:11:7b:85:31:65:82:a4:df:c7:82:c9:65:28:
                    78:2a:63:59:5e:1b:fd:98:80:ea:5e:c7:96:10:6a:
                    71:f3:10:af:2b:63:31:1c:28:62:0e:09:ac:36:bd:
                    21:c3:3a:98:a3:4b:c1:bf:87:6e:b9:88:8d:df:02:
                    83:df:cc:12:de:8f:14:07:7e:24:87:5a:bb:92:34:
                    be:d9:a9:36:12:9e:d8:38:6d:65:5d:97:1e:63:6e:
                    5b:46:5d:28:57:d2:96:6e:b2:55:1a:59:45:96:7c:
                    58:78:32:36:dd:93:4b:14:fb:f1:fa:ea:8a:1f:64:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:36:88:53:BB:41:73:C5:AA:0B:D8:EB:80:84:E7:CE:53:74:41
            X509v3 Authority Key Identifier:
                keyid:1F:6C:29:54:DA:AB:7F:76:D6:4B:99:3F:3B:15:C4:6F:86:A9:FF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F6C2954DAAB7F76D64B993F3B15C46F86A9FFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HgXAwotzrLp7cbvUVKKzxLAdCzHFrgWk3NoCTXQhJHS9/1/323830343a343765343a3a2f33322d3438203d3e20323637303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:74:ed:c5:68:80:56:53:ff:9d:c9:a1:68:22:c5:e1:fd:11:
         20:21:c5:ee:df:0a:a1:94:33:b1:e9:29:ab:27:89:c3:59:ed:
         28:1f:aa:63:57:8f:bd:a9:54:61:8d:c4:98:70:f2:e9:5e:00:
         94:72:c8:63:d4:e7:4c:06:9a:03:63:6d:fa:c2:36:38:07:1f:
         13:4f:3f:2c:70:43:db:5c:65:3a:1e:91:0f:3b:22:1f:1f:ed:
         34:73:26:a1:62:93:36:ee:0c:8e:24:91:5b:20:8a:63:b5:e2:
         96:d8:9c:a9:4a:ea:16:8c:56:ac:df:31:a2:a3:04:dd:4d:79:
         68:ea:4c:8b:46:8a:4a:7b:56:65:4c:85:8d:43:64:96:e4:aa:
         eb:c5:80:8c:09:e9:28:d5:0d:64:81:82:53:1d:54:55:35:a6:
         d9:a7:f6:57:cd:b0:47:f6:1e:30:ca:9e:73:1b:27:58:af:8e:
         95:db:30:52:aa:cc:7d:ee:19:c9:6f:38:c5:b3:89:0b:ed:74:
         2d:9d:0e:9b:9b:f0:1e:99:a4:34:13:51:b4:6d:45:cd:5d:06:
         7f:ad:5f:08:23:b7:95:5e:e1:ff:e5:ab:71:25:ed:f7:25:75:
         74:39:43:d1:9e:c5:5d:33:07:4f:09:31:eb:26:ad:d1:37:d8:
         d8:e2:5e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:56 2024 by rpki-client on console-fra.rpki-client.org