Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa
File:                     323830343a363161303a3a2f33322d3438203d3e20323639323436.roa (raw, json)
Hash identifier:          NzxJbbEvyiUmNZCLvmhHnZXM/QNvpbn2uIazr5GJq5o=
Subject key identifier:   85:19:9D:AB:92:C4:D7:C2:CD:4E:58:6D:18:20:3B:B4:E8:77:DF:DE
Certificate issuer:       /CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
Certificate serial:       56C29EA82C2906E025FFCDAAD2DCDAEF2D18EBC2
Authority key identifier: 56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa
Signing time:             Wed 05 Jun 2024 19:34:51 +0000
ROA not before:           Wed 05 Jun 2024 19:29:51 +0000
ROA not after:            Wed 04 Jun 2025 19:34:51 +0000
asID:                     269246
IP address blocks:        2804:61a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl
                          rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 00:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:9e:a8:2c:29:06:e0:25:ff:cd:aa:d2:dc:da:ef:2d:18:eb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56EF908030B1AD8FDDE7531F9937D0753B21F47F
        Validity
            Not Before: Jun  5 19:29:51 2024 GMT
            Not After : Jun  4 19:34:51 2025 GMT
        Subject: CN=85199DAB92C4D7C2CD4E586D18203BB4E877DFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:02:a9:c7:f7:2a:39:9b:a3:f9:45:46:b8:1f:
                    a8:21:07:d5:4c:c9:f8:cb:32:b0:c4:c1:53:1a:cb:
                    48:67:84:14:00:4c:1c:c4:67:7a:82:76:69:47:13:
                    3a:a0:b4:d7:34:c1:c6:4b:61:e5:11:80:64:c5:f9:
                    ec:7a:27:03:35:b0:c0:3e:80:2e:20:e0:7d:ce:8e:
                    4e:fa:e6:2c:c0:a7:ee:38:c0:c6:3e:39:5c:ae:b4:
                    09:89:8b:6a:8d:b6:b5:7b:59:82:e7:09:9e:d4:22:
                    ff:1e:1b:63:4b:9c:e5:d2:b5:b7:13:3d:6a:22:7f:
                    01:7d:be:8b:b7:ca:ef:a8:9f:c7:9d:e4:9b:30:be:
                    02:d2:e4:c5:71:5f:9a:7b:a2:f7:94:c8:f5:46:6d:
                    48:a3:8a:7e:6e:32:69:f5:f5:3d:19:74:2c:8e:06:
                    e3:2d:d8:4b:8b:35:dc:83:c8:cc:02:75:c1:77:e2:
                    76:3d:80:92:13:fa:49:40:13:e7:96:ce:38:bc:88:
                    f5:c2:73:d4:32:7a:b7:03:d3:02:c7:7b:49:cc:65:
                    90:94:66:c3:2a:1c:10:f1:8b:af:89:1d:5a:4d:73:
                    54:3a:4f:23:6b:ec:9a:e9:2f:51:ca:ee:e7:b7:e3:
                    b7:cc:53:01:83:1e:89:df:5e:6b:10:8d:a4:fd:86:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:9D:AB:92:C4:D7:C2:CD:4E:58:6D:18:20:3B:B4:E8:77:DF:DE
            X509v3 Authority Key Identifier:
                keyid:56:EF:90:80:30:B1:AD:8F:DD:E7:53:1F:99:37:D0:75:3B:21:F4:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/56EF908030B1AD8FDDE7531F9937D0753B21F47F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56EF908030B1AD8FDDE7531F9937D0753B21F47F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmVHWjfnmLpUrRHyQfn6izxN1cCgucL4nBQY5jJox7bw/0/323830343a363161303a3a2f33322d3438203d3e20323639323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:c9:e0:50:73:3b:25:ab:ff:f3:05:64:72:55:76:a0:ff:
         1e:78:59:dd:ed:a9:04:93:a7:29:3e:84:92:3e:90:e7:70:38:
         96:2d:b3:3b:c1:e9:85:27:17:e5:e5:b9:6d:bd:ad:f7:63:2f:
         d2:03:44:b1:8a:a5:d3:a7:5e:61:97:d7:06:a5:e0:11:6c:5c:
         e1:01:3a:e6:ea:46:b4:11:3b:ac:3d:11:02:b2:23:8b:6d:0d:
         aa:08:67:88:32:bc:c7:d8:39:48:be:08:46:e1:bc:af:ae:1f:
         44:99:29:9c:0d:63:7e:da:73:cd:c1:05:5f:ed:c4:15:f6:13:
         7a:2a:94:60:af:78:10:f9:c3:f1:b6:d9:86:7e:79:fe:6d:16:
         0d:67:71:ef:ae:19:df:bc:fc:07:88:e8:c7:2a:31:5c:ef:b6:
         9d:cc:1b:9e:0f:70:ad:5c:26:0e:cc:fa:c0:46:4d:1c:46:b4:
         e7:f1:2d:a6:82:d4:8f:1d:ed:e6:6f:52:e2:29:30:66:1b:63:
         5b:ad:70:fc:b6:d2:82:3c:65:30:db:d1:13:d2:d1:da:28:8a:
         79:06:9c:de:9b:c3:55:84:1f:27:4f:a1:17:82:c9:da:91:70:
         65:dc:5e:dd:16:6a:95:2a:44:d7:4d:3d:9f:4a:c0:9d:57:57:
         27:59:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:42 2024 by rpki-client on console-fra.rpki-client.org