Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/323830343a366639633a3a2f33322d313238203d3e20323730363732.roa
File:                     323830343a366639633a3a2f33322d313238203d3e20323730363732.roa (raw, json)
Hash identifier:          amzx+hK6VoiQ9GRZ+BJ/PRZ/uNcwuVWBnlzT1b58lMQ=
Subject key identifier:   B5:E3:F8:A7:17:50:23:AA:66:53:2B:98:1F:81:4B:CF:0F:1F:88:35
Certificate issuer:       /CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
Certificate serial:       783D8F86A1F93D2AB1DF20DD4C720FC96963AEAC
Authority key identifier: 00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/323830343a366639633a3a2f33322d313238203d3e20323730363732.roa
Signing time:             Tue 24 Sep 2024 19:32:40 +0000
ROA not before:           Tue 24 Sep 2024 19:27:40 +0000
ROA not after:            Tue 23 Sep 2025 19:32:40 +0000
asID:                     270672
IP address blocks:        2804:6f9c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.crl
                          rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3d:8f:86:a1:f9:3d:2a:b1:df:20:dd:4c:72:0f:c9:69:63:ae:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001AEAFAC3DB84DF8098F4CA1CA612C595E64631
        Validity
            Not Before: Sep 24 19:27:40 2024 GMT
            Not After : Sep 23 19:32:40 2025 GMT
        Subject: CN=B5E3F8A7175023AA66532B981F814BCF0F1F8835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1d:66:97:84:4e:70:8e:95:2c:4e:60:fb:6c:
                    33:10:d3:5e:29:1f:1b:09:f5:90:d0:32:59:5d:ff:
                    6d:3d:76:26:f8:94:d8:eb:a9:fa:15:29:52:67:b1:
                    5b:07:7a:12:06:dc:d3:f7:a1:a9:b0:d3:3b:77:f1:
                    fe:93:39:e5:fa:3b:eb:c2:74:3b:c8:b0:f6:45:7b:
                    27:76:f4:d0:6d:ca:97:35:2f:7d:65:00:ba:c9:04:
                    ab:1f:67:a7:57:fa:34:57:be:44:f0:27:b5:fe:e1:
                    84:d3:47:0c:4c:e4:10:cc:b5:8a:2b:01:52:fe:a1:
                    33:44:9b:09:d4:db:98:a9:63:bb:d8:f3:b6:e0:7b:
                    1f:3e:4c:58:f6:97:7f:dd:91:12:5c:1f:a5:b2:79:
                    39:83:2a:de:f7:32:88:af:4a:18:aa:57:c9:84:f2:
                    4d:8b:a5:35:8d:02:1b:cc:ed:a0:bb:5d:96:bb:58:
                    91:9f:51:96:ac:05:78:76:39:75:96:8f:d7:d5:ee:
                    e7:e3:cc:37:4e:2a:ed:25:42:09:b5:45:d3:70:4c:
                    b2:e3:f1:df:3f:54:e5:0e:d5:d3:1f:7a:c5:a5:a8:
                    72:bd:6a:1c:9f:ce:70:96:4b:74:da:60:c5:10:13:
                    b3:aa:96:6a:1d:e3:12:67:41:79:15:80:c3:0a:27:
                    5a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:F8:A7:17:50:23:AA:66:53:2B:98:1F:81:4B:CF:0F:1F:88:35
            X509v3 Authority Key Identifier:
                keyid:00:1A:EA:FA:C3:DB:84:DF:80:98:F4:CA:1C:A6:12:C5:95:E6:46:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001AEAFAC3DB84DF8098F4CA1CA612C595E64631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmeyVz9PUnzoTitHpW8YWnehzYKNvodcwJCyoSDJtQS7/0/323830343a366639633a3a2f33322d313238203d3e20323730363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:c2:f1:af:af:04:f4:0b:27:1a:3c:61:18:6d:3e:d5:57:
         56:c7:f8:dd:85:25:e2:a9:30:9d:d0:ce:15:9c:02:cc:b6:bc:
         f9:fa:ac:63:18:22:c7:4d:6e:34:73:7b:9c:87:cf:e5:3d:5e:
         22:d4:46:01:fd:b2:7f:00:6b:5f:bb:f5:b6:d5:40:27:4d:73:
         01:e5:1d:cc:23:e1:39:cd:33:6e:d4:c6:54:04:f5:a8:01:15:
         22:a1:70:37:ae:87:6d:60:cb:cc:c5:9d:5e:6b:e5:39:d3:95:
         6f:01:c6:a8:6a:f4:05:e7:48:a4:62:d8:c4:13:c5:bc:89:47:
         4e:9c:13:ad:1e:bf:1e:3b:f9:3e:a8:64:95:2c:72:cf:33:b1:
         a1:fa:08:69:c0:d8:02:e5:c3:eb:ad:65:b5:8e:84:31:fa:9b:
         6f:30:00:bd:cf:90:8a:b1:9a:f6:12:c9:82:5f:34:74:69:1b:
         3d:8c:d5:85:d7:97:ea:44:eb:0c:f9:c2:1f:66:02:b6:86:0e:
         a8:7a:85:72:d4:3b:cc:c8:fb:44:bc:05:94:2c:66:e0:1c:7b:
         c6:c6:9b:06:19:82:19:5c:ee:26:18:a8:1b:01:16:95:aa:21:
         e4:5f:98:b2:b6:97:67:19:24:63:05:90:cf:94:f3:2c:c9:c8:
         e1:cb:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:13 2024 by rpki-client on console-fra.rpki-client.org