Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33322d3332203d3e20323639363938.roa
File:                     323830343a363838343a3a2f33322d3332203d3e20323639363938.roa (raw, json)
Hash identifier:          mItv/TK4K/3hVcNLbP93YocFE/gkDDn4CP6c0RYUr4M=
Subject key identifier:   A3:73:79:C9:37:6A:E0:C1:87:38:DE:8A:31:5C:77:8B:2E:F6:F6:65
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       461F0FDD7DEE22225D715633409C45D57175F8C8
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33322d3332203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:40 +0000
ROA not before:           Thu 04 Apr 2024 04:45:40 +0000
ROA not after:            Thu 03 Apr 2025 04:50:40 +0000
asID:                     269698
IP address blocks:        2804:6884::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1f:0f:dd:7d:ee:22:22:5d:71:56:33:40:9c:45:d5:71:75:f8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:40 2024 GMT
            Not After : Apr  3 04:50:40 2025 GMT
        Subject: CN=A37379C9376AE0C18738DE8A315C778B2EF6F665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:8d:e9:91:b2:bc:0f:98:f8:70:41:b2:39:
                    2e:a3:09:95:39:cf:3a:c1:fa:66:f6:01:6c:b2:61:
                    59:88:f8:f2:be:48:a8:c8:66:4d:12:8e:76:e0:62:
                    cd:cc:4b:be:00:7a:e9:bc:d0:72:8c:d5:32:c2:85:
                    98:11:c3:6b:55:f8:c0:8f:e6:a3:f1:16:4d:d1:99:
                    7a:4c:a5:5f:9a:51:ef:87:6b:8b:18:3f:5a:3b:ba:
                    0a:77:2b:86:02:62:16:5f:e4:3b:de:60:de:4a:b8:
                    aa:07:63:7e:7c:5b:c8:d7:83:49:b0:2e:0c:e4:9c:
                    3a:49:32:ef:75:14:07:85:2e:b3:ad:f7:82:5d:cd:
                    83:44:e8:dc:17:a9:9e:07:a8:dd:ac:db:b1:36:72:
                    b4:77:48:99:47:8b:38:2c:e9:4b:3d:1a:75:5c:d9:
                    85:85:55:5f:94:c7:b0:3f:76:2c:ae:e6:16:4b:ce:
                    cd:f9:18:a6:93:cb:c3:d0:2f:6a:df:f4:14:7b:6e:
                    61:24:53:a0:9e:59:db:29:02:77:e8:0e:70:45:18:
                    ef:a7:2c:0d:2b:46:bb:06:4f:fa:00:a0:1f:41:a8:
                    29:e3:5d:d8:3f:55:87:67:dc:f9:d0:a7:72:0a:63:
                    f2:8d:ce:87:9a:e5:f1:2d:f2:00:78:2f:5f:a4:94:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:73:79:C9:37:6A:E0:C1:87:38:DE:8A:31:5C:77:8B:2E:F6:F6:65
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33322d3332203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:45:0d:ad:7e:1c:01:9f:3b:5e:84:40:7b:cf:4b:54:ee:3b:
         e3:b8:cc:35:38:34:b8:f5:dd:ac:bd:6e:6f:5b:0e:fd:78:08:
         6a:a7:9c:cb:cd:6c:79:08:f3:92:75:61:50:32:af:19:cf:e9:
         60:a1:64:b8:52:15:c1:0c:cc:cd:76:9a:d9:ba:94:8f:6a:9a:
         bf:34:46:e6:f2:b9:d3:f9:6f:d7:3c:35:d3:50:b1:4b:ab:29:
         ce:a7:9f:76:64:63:47:12:f3:79:75:3e:fa:d3:b2:98:61:0b:
         67:b4:ee:c6:f7:c6:c8:51:c7:22:2a:c0:c5:27:b8:12:d8:43:
         2c:74:b7:a1:00:6f:a0:cc:2c:09:ff:b5:01:22:19:47:ac:ad:
         24:de:06:b7:cd:60:a4:fe:8f:ad:c6:0a:be:20:04:72:11:5f:
         00:ed:23:3a:22:f0:48:99:aa:02:3a:4b:33:40:e0:e1:df:b9:
         7b:87:12:5a:bf:9e:87:48:dd:84:de:32:69:58:a1:de:92:c8:
         cd:34:ad:bd:d7:39:93:54:e7:1f:d4:aa:7b:a0:25:37:e5:fd:
         58:19:38:bb:f6:ff:4d:4d:36:78:61:f7:6b:25:4e:7e:98:86:
         b9:46:5f:99:2a:e0:c0:d7:5a:c9:d6:2c:87:7a:f2:25:58:f5:
         8f:00:6c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:31 2024 by rpki-client on console-ams.rpki-client.org