Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa
File:                     323830343a346533303a3a2f33322d3438203d3e20323638323435.roa (raw, json)
Hash identifier:          DHxCE9FQP9wevrSRVVeME/l2NRN1w4+jeYPhVUwQ0ec=
Subject key identifier:   D4:C3:0F:C4:2D:1B:96:28:58:83:AE:63:4D:88:DD:38:FC:5A:D7:4B
Certificate issuer:       /CN=59C244038ED88595EC22E2B1EA066AE712A58F17
Certificate serial:       38FCE15B662D1D6841738C76378BEBD34DDF099B
Authority key identifier: 59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa
Signing time:             Thu 04 Apr 2024 06:00:14 +0000
ROA not before:           Thu 04 Apr 2024 05:55:14 +0000
ROA not after:            Thu 03 Apr 2025 06:00:14 +0000
asID:                     268245
IP address blocks:        2804:4e30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.crl
                          rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fc:e1:5b:66:2d:1d:68:41:73:8c:76:37:8b:eb:d3:4d:df:09:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59C244038ED88595EC22E2B1EA066AE712A58F17
        Validity
            Not Before: Apr  4 05:55:14 2024 GMT
            Not After : Apr  3 06:00:14 2025 GMT
        Subject: CN=D4C30FC42D1B96285883AE634D88DD38FC5AD74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1a:1d:f8:a0:fb:0e:d5:3e:9e:bd:56:e2:81:
                    df:c8:cc:1f:fd:1e:82:e6:67:e9:41:e0:61:00:4a:
                    6c:57:36:89:76:13:0b:89:1a:c8:3a:31:78:62:3b:
                    b6:fd:49:43:8a:6b:64:ee:c2:55:88:20:09:63:96:
                    25:ba:52:4c:3e:d9:91:0e:51:b1:8f:90:f4:96:bf:
                    01:f6:9e:c3:95:23:9d:dc:d1:80:1b:4a:33:dc:7b:
                    5e:01:d6:6b:4a:2a:b7:b4:cd:d1:35:87:02:8d:8c:
                    84:fe:58:b4:cf:2e:bf:ac:32:76:db:4b:74:8b:00:
                    d0:6e:3a:9d:3b:c6:7f:43:3f:2c:73:9c:89:14:3c:
                    53:34:a0:c6:10:65:61:9d:c3:9a:74:07:0f:ba:c0:
                    e3:56:8d:4d:ee:53:db:fe:4a:35:d6:ec:a7:10:bc:
                    35:e4:46:20:52:5f:3d:48:21:90:d8:87:3d:80:b5:
                    22:de:64:63:c9:e7:bf:70:42:84:15:48:28:be:9d:
                    f3:0a:6e:68:3f:93:46:3b:20:81:84:81:d9:51:3c:
                    30:75:6a:9b:d9:7a:af:75:b4:6b:c2:f6:29:91:15:
                    41:45:bc:09:0d:25:00:39:92:29:02:ec:00:5c:89:
                    69:56:7c:22:ab:9a:76:17:aa:44:97:61:bd:b4:d8:
                    ac:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C3:0F:C4:2D:1B:96:28:58:83:AE:63:4D:88:DD:38:FC:5A:D7:4B
            X509v3 Authority Key Identifier:
                keyid:59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/323830343a346533303a3a2f33322d3438203d3e20323638323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e30::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:d9:1e:49:c3:de:98:7d:6d:69:fc:cf:64:54:6c:c4:61:
         40:c9:10:a5:39:1e:a1:05:15:f1:a6:b8:72:c5:d4:80:a6:86:
         b8:34:61:4c:6e:5f:08:73:5b:f4:35:85:04:55:70:ca:d0:ef:
         17:24:e9:27:fe:03:2d:08:47:fa:c7:f3:b0:10:18:05:65:41:
         9b:e5:ee:50:79:a3:3e:2b:a1:d4:7c:69:9f:0d:9a:69:8f:e4:
         9c:3a:46:92:e8:cd:a9:09:2c:63:07:1a:b5:9a:ed:cd:5a:5b:
         5f:08:da:91:f9:a8:3d:4f:ae:2a:3a:22:dc:a8:99:01:ac:59:
         36:39:82:7a:f6:84:b8:4d:d9:f6:eb:39:bf:1e:1e:79:0a:a6:
         c7:84:3e:66:4d:bb:cf:6f:4b:83:99:1e:46:88:ce:66:fb:03:
         d1:ad:f2:c3:9d:d0:19:0d:5b:e7:a2:52:9f:5d:16:ee:da:8d:
         32:93:15:23:8b:b3:9f:57:a3:09:4c:73:3e:e0:a3:5c:cb:98:
         4e:90:f8:77:65:89:0a:e8:c7:25:ae:00:cb:eb:f6:7b:d5:37:
         ee:5f:22:e0:7f:b7:58:8b:8e:8f:b6:68:b3:35:05:99:f4:8d:
         6f:3b:50:17:cc:ac:01:97:7b:40:79:c1:15:ab:e8:90:58:90:
         db:27:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:56 2024 by rpki-client on console-ams.rpki-client.org