Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/323830343a326562633a3a2f33322d313238203d3e20323635333633.roa
File:                     323830343a326562633a3a2f33322d313238203d3e20323635333633.roa (raw, json)
Hash identifier:          Ad5bkER6J0g/x4A8gWD6TT3kQERls2PcJt2prihOrq8=
Subject key identifier:   E1:64:F8:4B:3A:14:DF:A0:D8:A9:86:AC:C6:0E:EE:F8:FD:F9:1E:13
Certificate issuer:       /CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
Certificate serial:       119577156ABABAD0816D3DEE5F36A1716E0F5D53
Authority key identifier: A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/323830343a326562633a3a2f33322d313238203d3e20323635333633.roa
Signing time:             Sat 10 Aug 2024 23:34:56 +0000
ROA not before:           Sat 10 Aug 2024 23:29:56 +0000
ROA not after:            Sat 09 Aug 2025 23:34:56 +0000
asID:                     265363
IP address blocks:        2804:2ebc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl
                          rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:95:77:15:6a:ba:ba:d0:81:6d:3d:ee:5f:36:a1:71:6e:0f:5d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6572C12EBB3DB7EB7771295E22A0EB108B6D55C
        Validity
            Not Before: Aug 10 23:29:56 2024 GMT
            Not After : Aug  9 23:34:56 2025 GMT
        Subject: CN=E164F84B3A14DFA0D8A986ACC60EEEF8FDF91E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:e0:e9:9d:15:19:ba:32:cb:92:c6:c3:ec:
                    c2:8b:e2:c0:f4:cc:88:4f:68:b9:50:9c:ae:35:21:
                    be:5e:bb:c8:46:e6:5d:0e:8f:bd:13:9e:ed:a6:61:
                    3a:41:56:e6:53:65:8d:af:d4:04:81:3b:b7:26:34:
                    d6:af:c9:37:fb:ea:46:56:32:75:e6:9b:83:67:cb:
                    47:8d:51:1b:8f:a9:a2:0e:ac:39:0d:f4:3c:c9:c3:
                    42:b9:22:b5:1a:1b:ef:50:22:c5:cd:1d:44:36:09:
                    87:29:d3:f3:9e:5c:38:8d:c3:92:43:6d:32:13:cc:
                    c9:4a:32:2b:90:bf:17:96:45:2a:80:5e:e5:5d:92:
                    82:e3:17:b5:50:5a:f8:62:59:42:8a:17:6a:86:cf:
                    ce:40:15:e3:68:cb:9f:70:57:aa:7b:34:19:76:28:
                    6b:ea:fa:80:8d:20:04:00:45:ba:6b:4b:4f:17:cb:
                    e0:08:70:bb:e2:29:af:cd:df:ea:78:00:d6:04:60:
                    f7:3d:6c:94:02:4c:6f:60:93:bc:e0:52:2d:ff:06:
                    e1:d9:2f:cc:a9:65:5e:d5:e7:0c:44:c0:51:1a:99:
                    f7:a2:e0:de:0d:c6:3d:f5:3d:58:34:69:e1:3f:2b:
                    df:ba:98:10:18:5b:34:60:b5:6c:31:b7:eb:3d:4f:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:F8:4B:3A:14:DF:A0:D8:A9:86:AC:C6:0E:EE:F8:FD:F9:1E:13
            X509v3 Authority Key Identifier:
                keyid:A6:57:2C:12:EB:B3:DB:7E:B7:77:12:95:E2:2A:0E:B1:08:B6:D5:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A6572C12EBB3DB7EB7771295E22A0EB108B6D55C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkQvwk9Tmp6xZJyeAMduevtEvUNQGji4MySSPEHuEBQr/0/323830343a326562633a3a2f33322d313238203d3e20323635333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:28:d0:4e:98:33:f0:4f:98:5d:5e:ff:b6:60:e8:19:f7:bb:
         79:ab:83:e2:18:05:9f:9a:e5:3f:78:4e:7b:89:3e:12:aa:b8:
         58:6f:a2:29:aa:e0:3d:85:12:b0:fb:14:b6:43:96:53:54:d9:
         40:56:d7:19:48:b3:4a:fb:04:9c:7c:fe:d3:57:28:bd:c8:35:
         90:44:84:b4:8c:0d:02:e7:ee:3b:28:4a:62:6b:49:20:c4:7d:
         50:60:90:b2:83:47:50:48:41:83:7c:e2:31:db:2a:18:c1:48:
         74:32:c4:a2:85:5c:18:20:f4:61:48:0b:fa:ca:1c:a5:ee:63:
         1d:9f:23:27:d3:9f:41:1a:66:c4:72:86:45:d7:58:40:46:bb:
         e4:b9:55:6f:b8:5a:2c:c5:83:80:12:de:2c:7a:49:58:4b:be:
         3d:0d:3a:87:ec:dc:b1:2f:6a:1e:5f:e6:66:fb:48:52:28:ba:
         9b:51:84:07:d5:43:a7:42:82:7d:fd:bc:ee:0e:17:80:3f:26:
         8f:f5:ad:f6:19:a6:89:ba:36:bd:66:ac:c9:3e:4a:71:50:d3:
         7c:12:7b:e1:d1:b2:c0:a9:3a:af:6b:db:1a:4b:bb:5d:40:4c:
         75:9b:30:6f:91:1d:66:79:de:10:0d:b6:cc:0b:74:04:0d:26:
         f0:f4:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org