Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
File:                     323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa (raw, json)
Hash identifier:          ghNcV+JUwl1yYUqhWqq+pjPI05wdbkVz2vCJFP7f5lE=
Subject key identifier:   77:60:3B:DD:A5:11:F3:F5:DC:9D:C5:89:8C:F9:01:B1:0A:7D:EB:37
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       4259413A39122F025D34B84EC212A4A123CE1B9F
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:42 +0000
ROA not before:           Thu 04 Apr 2024 04:45:42 +0000
ROA not after:            Thu 03 Apr 2025 04:50:42 +0000
asID:                     269698
IP address blocks:        2804:6884:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:59:41:3a:39:12:2f:02:5d:34:b8:4e:c2:12:a4:a1:23:ce:1b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:42 2024 GMT
            Not After : Apr  3 04:50:42 2025 GMT
        Subject: CN=77603BDDA511F3F5DC9DC5898CF901B10A7DEB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f2:b2:48:28:02:cb:77:e9:be:25:21:9e:77:
                    31:ad:9f:0a:bf:61:8b:8e:21:00:8a:bf:9f:78:26:
                    d4:a2:5f:9b:7d:12:40:31:d4:c9:45:41:49:5e:13:
                    c1:ba:1c:a6:43:7f:0a:59:ff:a1:be:fd:8f:b1:7e:
                    f3:de:74:b8:f2:69:55:58:31:dc:4c:1d:0b:67:1f:
                    a9:b7:67:12:a4:9f:3f:95:43:7f:c1:75:0d:4d:99:
                    ed:90:d2:d4:32:19:e2:27:b1:47:21:e7:75:9a:ef:
                    a0:d9:4c:36:51:06:b3:78:cc:8a:53:15:66:08:93:
                    2a:49:98:d9:35:2e:9e:9f:89:a8:61:8e:5a:b4:a4:
                    9d:5d:41:03:3d:9f:9c:cf:c7:09:d7:33:06:7f:80:
                    a3:b1:27:97:f7:f7:35:6f:03:10:62:6e:90:4e:3c:
                    71:8f:7b:ed:6d:30:b0:08:73:e2:16:28:37:b5:d5:
                    b7:07:9a:01:a1:67:97:43:39:b5:81:53:13:9b:c9:
                    7f:62:65:80:3d:57:c5:ca:d4:d5:30:5c:67:a4:29:
                    f9:ac:e2:25:8b:83:d2:55:26:ab:3b:53:a9:45:a6:
                    27:c1:21:4e:c9:28:51:4c:2d:df:17:06:70:ec:52:
                    ac:85:c5:d5:79:68:fb:46:e2:5b:3c:e6:f6:dd:ca:
                    6a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:60:3B:DD:A5:11:F3:F5:DC:9D:C5:89:8C:F9:01:B1:0A:7D:EB:37
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a33303a3a2f34342d3434203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:13:f3:32:9c:c2:04:f2:62:38:6d:f6:27:77:a6:52:ff:1c:
         fd:4f:60:e8:91:90:87:ef:96:35:dd:86:77:73:6d:34:12:70:
         aa:d9:fb:e3:7c:f3:ee:30:06:e4:1d:2b:18:e3:ba:3d:45:5e:
         fa:a9:a1:5a:52:cc:30:e6:fa:e2:f1:2a:3d:87:62:e4:cb:5d:
         e4:e4:9e:db:8e:f9:f4:d1:2d:42:c1:07:18:b5:8a:4f:c1:be:
         fa:cf:ab:f4:72:d9:7b:39:2c:c8:41:95:99:f5:ce:a0:69:0e:
         49:83:2a:69:1e:03:e2:a4:fe:ba:cb:34:37:f6:2e:a9:9c:5f:
         02:99:41:5e:9c:78:60:ef:9f:9e:53:ba:1d:54:3a:fe:5e:0b:
         82:59:8e:23:a6:ba:d7:c0:33:29:e6:7f:13:11:ff:32:47:52:
         f6:a1:ee:66:b9:8e:64:3a:78:c1:9f:84:2d:92:c0:79:b5:49:
         9a:59:9a:79:cf:ce:81:7c:72:e9:7d:b5:bf:3e:2b:8b:c2:79:
         ab:e7:9b:7d:3f:dd:8e:45:8c:32:59:10:87:af:65:29:53:03:
         90:49:12:91:7f:07:c6:b4:b2:40:e9:d6:b2:66:14:83:73:73:
         4f:36:6c:58:50:ed:bb:72:e9:d9:06:12:57:22:0f:13:81:34:
         2d:64:dc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org