Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa
File:                     323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa (raw, json)
Hash identifier:          xZq/6ycnLNUvDHGXKvi5hZZa7vRdMk0mgZVXJIp5F0A=
Subject key identifier:   F4:C6:31:3D:FA:D1:0B:C3:4C:91:D1:0B:30:E9:AA:78:43:9B:A6:6A
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       6C9655EC996CB96B7FD9B03280F098BA1F7F1198
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:40 +0000
ROA not before:           Thu 04 Apr 2024 04:45:40 +0000
ROA not after:            Thu 03 Apr 2025 04:50:40 +0000
asID:                     269698
IP address blocks:        2804:6884:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:96:55:ec:99:6c:b9:6b:7f:d9:b0:32:80:f0:98:ba:1f:7f:11:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:40 2024 GMT
            Not After : Apr  3 04:50:40 2025 GMT
        Subject: CN=F4C6313DFAD10BC34C91D10B30E9AA78439BA66A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:e5:0e:29:54:ed:4c:97:3e:cc:05:a9:0e:
                    c2:9c:d9:b7:ec:7c:c4:29:1a:33:ea:9d:48:00:35:
                    e3:8e:c4:73:eb:86:7e:03:f3:bc:57:6f:e6:bb:57:
                    ea:e0:92:7b:ee:da:5a:7c:a2:d4:24:5d:a6:a4:a7:
                    70:eb:4d:81:5e:68:06:ba:60:50:41:51:c1:61:a3:
                    0b:20:25:9f:59:31:12:a6:f0:22:bf:d8:61:5e:97:
                    2e:f8:6d:d7:87:15:72:7f:fa:81:d6:40:0b:69:5d:
                    da:e7:75:6f:3a:b4:f0:70:b0:9a:63:5e:9e:5b:2d:
                    9b:22:8f:36:83:73:0a:b5:31:e8:fc:bb:0c:8f:b3:
                    56:0d:5c:55:10:10:11:6d:3a:61:fd:3e:1f:67:00:
                    b6:d3:ab:f4:66:b4:88:5e:06:1c:5b:e6:5d:ad:e2:
                    56:b7:a2:f9:f2:0c:39:47:4f:87:3e:47:e0:58:59:
                    2d:e8:b0:eb:c8:a6:99:f8:72:9d:04:72:41:58:99:
                    06:47:c9:f9:21:db:1f:9b:0e:89:b5:93:85:f0:34:
                    cb:0e:48:2f:17:a6:6b:83:53:fa:ad:65:4f:01:60:
                    f8:ba:ee:d1:70:f3:59:3e:97:20:dd:d1:ee:24:47:
                    2c:6e:24:19:17:55:cf:db:13:fc:bf:97:e9:f9:2d:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:31:3D:FA:D1:0B:C3:4C:91:D1:0B:30:E9:AA:78:43:9B:A6:6A
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a383030303a3a2f33342d3334203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c5:10:33:35:fa:0b:99:43:f6:60:0f:d7:ec:35:f8:ae:53:16:
         f4:d9:73:fb:49:85:55:ff:97:69:e7:49:aa:7c:a3:88:c9:79:
         94:d5:a9:c6:9a:8e:29:0e:c0:32:71:23:43:d3:72:87:8c:a4:
         c4:9f:da:24:8f:73:b1:75:63:b9:68:10:4d:3d:b5:0e:d3:59:
         2a:13:7c:79:85:f3:24:f1:65:28:a9:21:2e:0b:3a:0b:af:da:
         1e:2f:39:d3:86:44:6e:71:2c:58:05:06:ef:60:65:4f:60:5f:
         23:70:59:93:49:dd:c1:da:43:4f:b6:71:98:a3:73:5a:48:4f:
         cb:46:2b:ac:9b:d5:06:ee:a8:45:87:4f:71:45:2f:0c:2e:7a:
         03:23:3e:8d:21:e5:c1:ae:a1:7a:be:50:86:9f:2b:bf:bf:f0:
         af:05:1f:f4:95:9f:91:14:34:fc:fd:83:d1:67:e5:37:da:8c:
         7c:2d:d2:36:84:46:41:32:c6:79:32:0c:9c:bb:8e:70:9c:b7:
         a2:00:1f:5b:f0:df:bd:d6:b2:42:93:6a:b3:c9:11:13:84:bd:
         8b:fb:c4:39:7d:15:f8:d7:88:b5:3f:68:79:e6:bc:a4:52:24:
         6d:e2:8e:48:c5:87:68:b0:f6:05:1d:d7:5c:0e:a7:a1:7c:47:
         10:65:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org