Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3332203d3e20323639333332.roa
File:                     323830343a363266633a3a2f33322d3332203d3e20323639333332.roa (raw, json)
Hash identifier:          DvWZ6O73jeHXu3rTYosAM8xU3I5ZdUVzr0/3KNQdIsY=
Subject key identifier:   93:EE:8A:46:ED:C9:B4:A1:EC:83:52:C2:09:49:31:14:40:43:43:5A
Certificate issuer:       /CN=4B222F2767D3CDE8BB77E315F1A601F7044E1E96
Certificate serial:       772791BF3FC1D718C874BB9AB44296897077597A
Authority key identifier: 4B:22:2F:27:67:D3:CD:E8:BB:77:E3:15:F1:A6:01:F7:04:4E:1E:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3332203d3e20323639333332.roa
Signing time:             Wed 13 Nov 2024 19:49:07 +0000
ROA not before:           Wed 13 Nov 2024 19:44:07 +0000
ROA not after:            Wed 12 Nov 2025 19:49:07 +0000
asID:                     269332
IP address blocks:        2804:62fc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.crl
                          rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:91:bf:3f:c1:d7:18:c8:74:bb:9a:b4:42:96:89:70:77:59:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B222F2767D3CDE8BB77E315F1A601F7044E1E96
        Validity
            Not Before: Nov 13 19:44:07 2024 GMT
            Not After : Nov 12 19:49:07 2025 GMT
        Subject: CN=93EE8A46EDC9B4A1EC8352C2094931144043435A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:2f:25:15:8e:03:12:54:8c:0b:de:1e:f1:
                    07:3a:07:0b:22:b6:35:20:22:ce:44:8d:51:19:ac:
                    d2:3c:52:67:84:55:9d:70:0f:96:b6:cb:8b:90:6c:
                    33:5a:47:a0:b8:57:2e:97:70:6a:1e:74:03:c1:e1:
                    44:db:69:8f:e7:62:f1:4a:6d:db:8b:a1:09:24:f7:
                    1e:8d:75:b2:80:94:aa:39:9e:77:c0:41:17:3a:7f:
                    96:96:ae:c2:67:fd:00:12:62:6f:cc:2e:28:dd:cd:
                    69:18:e9:00:ec:b3:3d:0f:19:94:8f:7c:48:28:24:
                    c5:15:bf:45:ee:18:d9:8f:2c:f2:e2:37:b1:7e:d7:
                    a9:06:82:e2:51:3a:80:e5:c2:85:6f:39:52:58:44:
                    b4:fa:cc:98:7d:3f:81:46:c2:4c:3a:f6:ee:17:1f:
                    95:ae:14:06:0f:17:90:c6:cd:72:5a:18:c5:24:38:
                    a1:63:0e:09:9e:21:d9:84:cb:6b:5b:51:28:b3:b7:
                    97:b1:37:cb:69:74:5a:92:0c:a2:ce:5e:22:c3:5b:
                    ed:69:ed:7f:14:fc:6d:97:1c:99:1a:77:7d:16:cf:
                    4d:6e:c4:7d:fc:b8:3c:d0:b0:42:b1:a8:3d:f2:cd:
                    76:81:a7:a4:83:d1:5b:ae:d6:ca:c7:21:34:97:98:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:8A:46:ED:C9:B4:A1:EC:83:52:C2:09:49:31:14:40:43:43:5A
            X509v3 Authority Key Identifier:
                keyid:4B:22:2F:27:67:D3:CD:E8:BB:77:E3:15:F1:A6:01:F7:04:4E:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B222F2767D3CDE8BB77E315F1A601F7044E1E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkDBt2FtpoenzA4YYuzWPGStpW7WZPtu4qcmssJwYFs6/0/323830343a363266633a3a2f33322d3332203d3e20323639333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:01:54:7b:21:70:4c:81:ed:ff:a3:ef:40:2b:10:37:c5:
         5f:0d:08:7a:dd:e5:f5:98:a6:b8:7f:f5:04:f6:5d:c5:2c:62:
         9d:14:30:37:0a:c3:00:c9:1a:45:de:8c:22:90:d8:0e:89:88:
         57:dd:e2:26:40:f7:2c:cc:a6:ff:54:fc:77:ac:79:be:f5:d3:
         57:77:75:70:38:60:88:f3:b8:44:da:b9:96:03:d6:c9:7e:4b:
         80:aa:55:ce:e5:6a:27:a8:33:8c:72:ed:28:d8:7d:b2:44:e4:
         27:06:6a:c3:67:a3:ce:e9:61:2e:08:10:88:56:e8:91:b0:2b:
         06:df:9d:ea:04:84:1f:8e:92:25:a1:85:6b:c4:51:63:6d:b3:
         16:0a:02:1d:b0:08:a9:07:0e:46:a6:86:4e:69:7f:34:cc:68:
         2e:b4:7a:04:87:11:15:55:5c:c0:e3:eb:6a:68:73:4e:5d:b2:
         3d:05:6b:93:74:3a:3a:db:23:90:d0:20:23:ac:e0:38:f6:98:
         92:c6:33:f7:1a:dd:a7:cf:31:cf:b8:ef:98:03:fe:15:c4:f3:
         3a:9e:02:66:06:89:ae:22:8d:10:89:1e:58:7b:ea:b2:fa:10:
         24:95:43:99:0c:aa:cd:79:f9:ad:2f:9d:a5:60:d8:f6:a2:58:
         fe:3e:6f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:41 2024 by rpki-client on console-fra.rpki-client.org