Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa
File:                     323830343a323461633a3a2f33322d3332203d3e20323634323337.roa (raw, json)
Hash identifier:          Hh554Rccl0+6lM+j7g4H1AYg8koM32tTLJ+ZosUWNzI=
Subject key identifier:   92:41:67:1E:8F:20:49:59:23:BC:F1:D3:EA:F2:DD:D9:68:29:DC:A9
Certificate issuer:       /CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
Certificate serial:       7DD3094714F4156A0D3CD6968A61A17A9C37A6EF
Authority key identifier: 66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa
Signing time:             Wed 03 Apr 2024 18:33:15 +0000
ROA not before:           Wed 03 Apr 2024 18:28:15 +0000
ROA not after:            Wed 02 Apr 2025 18:33:15 +0000
asID:                     264237
IP address blocks:        2804:24ac::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl
                          rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:09:47:14:f4:15:6a:0d:3c:d6:96:8a:61:a1:7a:9c:37:a6:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D5AB14A687F80E7A5A3698F13E2B2421405A11
        Validity
            Not Before: Apr  3 18:28:15 2024 GMT
            Not After : Apr  2 18:33:15 2025 GMT
        Subject: CN=9241671E8F20495923BCF1D3EAF2DDD96829DCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:2e:04:b8:a8:7b:92:3f:df:4a:f6:f7:07:
                    ef:64:83:37:c5:a5:a4:63:38:b0:75:61:5e:8d:46:
                    78:1f:ce:3c:5a:ef:b0:19:e5:97:88:43:81:c3:d0:
                    8b:e9:c6:b5:c3:1c:fb:7a:08:2a:90:20:a7:d1:91:
                    6a:dd:6a:1b:4e:59:e2:9c:cd:a7:46:6d:bb:2d:87:
                    27:07:fd:74:21:d8:a4:00:16:01:56:ba:3b:00:7a:
                    8c:4b:3e:d9:8d:74:58:93:94:29:8c:13:bf:4b:0e:
                    3d:ff:42:92:41:06:57:d1:66:eb:3d:d9:6f:61:c3:
                    af:87:53:d5:86:2d:b4:b5:22:a5:70:5e:ee:c9:0e:
                    38:46:b2:b4:84:6f:9e:30:52:e9:8f:8f:7a:40:82:
                    a0:8d:43:95:7b:f2:9a:d0:3a:73:27:33:b8:a8:32:
                    16:15:f4:9e:66:1e:a2:5b:d5:61:5f:6d:e7:89:7f:
                    64:a5:f6:b2:22:93:6a:47:59:e8:a8:ce:10:1f:0d:
                    47:6e:30:09:fb:cd:c4:51:1d:70:02:15:06:99:6c:
                    5f:92:a9:60:a2:07:a3:4e:bc:3c:74:0f:ae:c3:e3:
                    1c:69:60:55:70:40:96:a1:a2:11:cf:81:97:bc:8a:
                    cc:8e:0d:8a:4b:e2:fc:6f:16:7c:36:71:4e:f5:d1:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:41:67:1E:8F:20:49:59:23:BC:F1:D3:EA:F2:DD:D9:68:29:DC:A9
            X509v3 Authority Key Identifier:
                keyid:66:D5:AB:14:A6:87:F8:0E:7A:5A:36:98:F1:3E:2B:24:21:40:5A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66D5AB14A687F80E7A5A3698F13E2B2421405A11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhMBNjDFjj9QdEuhhfzwyM88GR8ZUmVJDag9UNgLQvdP/1/323830343a323461633a3a2f33322d3332203d3e20323634323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:75:5a:5c:05:86:12:bb:6c:af:ed:a0:21:00:5b:57:b6:97:
         ce:3d:3e:db:12:90:61:9f:65:7c:cf:af:62:97:2e:f7:60:c9:
         36:f2:4d:cb:2d:85:5e:1c:7a:98:bb:bd:2e:8b:a6:96:ac:b2:
         2a:6a:4e:2e:81:30:95:ba:04:94:92:03:c2:8c:24:40:22:9e:
         bf:89:72:4b:31:42:7d:f3:3a:52:97:99:5a:30:28:7d:ed:97:
         e6:45:f4:82:45:c2:fa:c4:23:11:b6:ac:49:03:08:d7:e2:43:
         0b:27:3e:f5:af:05:ee:60:ec:67:cd:13:53:88:a6:ba:f6:3b:
         98:c6:0f:3e:c0:e2:17:1f:35:fa:4b:3a:5f:d5:8d:93:18:aa:
         c7:39:32:51:68:10:50:8a:99:f1:ec:43:a3:c3:2b:c7:5d:79:
         eb:d1:a8:a8:b5:fc:36:cb:e7:12:de:9b:85:09:e1:f9:00:55:
         05:c4:98:1d:ec:72:4f:13:c2:3d:c3:d3:d6:75:46:67:49:03:
         d2:32:5e:84:dc:1a:4e:62:8a:62:b1:7b:9e:e3:c5:72:28:03:
         81:57:38:81:6a:4a:7c:f7:4b:f2:ae:ce:ad:01:5c:1a:71:bb:
         9e:7e:4a:72:3c:34:c3:47:2c:5f:ca:25:f3:44:45:8d:f4:27:
         c3:b2:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:55 2024 by rpki-client on console-fra.rpki-client.org