Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa
File:                     323830343a363838343a3a2f33332d3333203d3e20323639363938.roa (raw, json)
Hash identifier:          NXk7yU4QAY4K8ZRv7QTyf+YEXQNSiJVMRI7BQz7HxCM=
Subject key identifier:   42:07:53:8F:C8:DD:CC:16:66:A5:D5:CA:0D:FA:44:CC:39:67:CE:91
Certificate issuer:       /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial:       17F1FE332A8172EB4A4DEF8FF34978CD91DB4F83
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa
Signing time:             Thu 04 Apr 2024 04:50:39 +0000
ROA not before:           Thu 04 Apr 2024 04:45:39 +0000
ROA not after:            Thu 03 Apr 2025 04:50:39 +0000
asID:                     269698
IP address blocks:        2804:6884::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
                          rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f1:fe:33:2a:81:72:eb:4a:4d:ef:8f:f3:49:78:cd:91:db:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
        Validity
            Not Before: Apr  4 04:45:39 2024 GMT
            Not After : Apr  3 04:50:39 2025 GMT
        Subject: CN=4207538FC8DDCC1666A5D5CA0DFA44CC3967CE91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:43:5c:ec:5a:5d:fa:db:0b:fa:c4:d5:cb:
                    33:2c:92:2f:3c:2a:13:1c:85:dc:00:3e:95:38:93:
                    ff:d4:0b:47:f2:83:7b:ff:14:e8:d0:4e:ed:6d:6f:
                    fe:22:f6:6f:ff:0b:94:0a:b4:ef:32:e9:66:a2:89:
                    d3:ce:8c:ea:1e:7f:9b:ff:92:8a:29:7e:e8:5f:ed:
                    04:df:7b:11:ee:8a:4d:d9:0a:79:06:fb:e4:32:cd:
                    3a:25:c1:aa:57:ff:73:68:39:b6:a1:f5:13:d4:50:
                    4f:a8:1f:27:79:36:10:b7:18:39:78:c5:1f:d3:a5:
                    92:46:f4:33:62:ff:aa:82:0c:60:10:47:e2:25:e7:
                    30:12:59:52:f3:30:a7:c5:ef:b7:a1:01:da:25:54:
                    63:4f:78:18:86:5e:31:8c:e5:98:ac:63:96:42:2f:
                    96:3f:12:fd:54:60:bf:63:80:74:96:31:85:d9:6b:
                    c2:e3:23:46:da:f0:f0:18:e2:c3:d2:35:23:7f:75:
                    06:a7:d0:07:fc:d6:83:db:9d:c8:f7:a9:8c:d3:05:
                    37:3f:d6:1a:5b:56:26:44:a8:84:00:f6:94:e0:1a:
                    5a:6c:c8:45:cb:bf:94:99:32:22:5e:8f:fc:28:82:
                    8a:87:d2:c3:89:99:43:d8:ce:31:31:fa:c6:36:7a:
                    5a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:53:8F:C8:DD:CC:16:66:A5:D5:CA:0D:FA:44:CC:39:67:CE:91
            X509v3 Authority Key Identifier:
                keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/323830343a363838343a3a2f33332d3333203d3e20323639363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6884::/33

    Signature Algorithm: sha256WithRSAEncryption
         17:e9:c5:0f:ff:8c:b3:74:ee:ba:bc:0f:72:43:54:03:b4:f8:
         49:fe:3f:53:d8:24:1c:0c:57:c0:7b:15:76:f3:72:d3:a4:b0:
         05:5b:20:9e:24:44:09:19:0a:22:b7:85:b8:e2:69:f4:ec:70:
         56:5f:36:cd:4e:cc:54:da:e5:46:fe:73:9c:23:d8:c9:35:ff:
         bb:cd:ee:1c:c5:55:c5:01:25:7a:3c:d4:c4:5d:c3:9f:45:fe:
         bb:b1:18:9e:cf:cb:ce:00:91:c4:3f:af:36:65:95:eb:9f:2e:
         b3:90:d1:18:d4:4b:08:3d:99:e3:6c:df:43:71:15:3a:c3:fb:
         a3:2d:31:cd:dd:7d:54:80:b5:db:18:30:34:8e:89:79:13:ca:
         57:20:e6:27:85:54:7c:6c:df:46:94:dc:c5:ab:3b:5d:4c:9f:
         64:04:17:48:0b:24:cf:5b:aa:4e:79:bd:c2:8f:5c:f5:02:e7:
         a1:0e:05:71:74:5f:40:f0:6b:f0:42:bf:b7:32:7b:4f:86:25:
         d7:53:d4:6a:57:ca:22:cd:3c:8e:70:61:37:38:ad:cf:fa:de:
         2f:f5:3a:7c:65:41:76:70:cf:30:df:77:ba:c8:e8:10:61:0f:
         58:93:b8:36:ae:93:6a:c6:07:de:e8:a7:c8:35:11:02:04:36:
         58:3e:0c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:24 2024 by rpki-client on console-fra.rpki-client.org