Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323033.roa (raw, json)
Hash identifier:          3K/aDf8mPV0pMzF5r7w0fd9AdDQdwhb2HQ56XGOm4m4=
Subject key identifier:   15:EB:7A:22:D5:C1:44:1A:54:06:AF:6A:6A:C4:83:C0:E7:6D:BC:6C
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       36B8AE8336B003D360643631BA5D82E40206CF99
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa
Signing time:             Thu 04 Apr 2024 03:31:31 +0000
ROA not before:           Thu 04 Apr 2024 03:26:31 +0000
ROA not after:            Thu 03 Apr 2025 03:31:31 +0000
asID:                     203
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b8:ae:83:36:b0:03:d3:60:64:36:31:ba:5d:82:e4:02:06:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Apr  4 03:26:31 2024 GMT
            Not After : Apr  3 03:31:31 2025 GMT
        Subject: CN=15EB7A22D5C1441A5406AF6A6AC483C0E76DBC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:fb:a1:3f:61:63:f7:5a:c6:9d:d2:ce:56:
                    9f:5d:b0:40:9b:8a:c0:4d:ac:95:a5:f5:80:a3:17:
                    06:25:11:2d:e9:39:89:41:37:fb:07:e4:e9:3a:84:
                    69:82:93:13:59:20:0c:3c:2c:3e:6c:b1:4f:c0:36:
                    9c:5a:cb:0b:a7:15:76:cb:fb:60:be:f0:d1:88:fc:
                    72:ed:4c:49:84:ca:ad:68:1d:f3:09:fd:92:60:c5:
                    ed:07:b5:d6:59:43:f4:d6:bf:8b:fb:03:af:3b:2a:
                    c9:15:3c:8c:40:2e:0f:44:bf:5a:51:b2:39:a7:9d:
                    f6:93:93:09:89:dd:98:cf:4c:7e:6e:ac:44:dd:d0:
                    61:27:87:9b:87:5e:93:71:bb:0d:3a:95:5b:f8:9b:
                    df:3f:01:d1:97:e1:fd:7b:aa:01:44:43:81:91:3b:
                    80:30:66:6d:9f:1c:95:84:44:df:5e:5f:6d:b6:e0:
                    06:c6:00:cd:2a:aa:d7:6d:6f:df:4d:5b:f4:89:bf:
                    0c:65:05:10:29:1f:3a:11:34:e4:47:e9:a9:c6:c6:
                    d1:40:12:96:e7:04:95:c1:38:26:aa:d8:a6:b4:b1:
                    20:3f:0f:f0:ab:f7:ec:87:56:92:82:2d:9b:3f:e6:
                    7e:13:87:ea:6f:50:f2:f3:dc:d5:b4:71:a9:38:49:
                    73:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EB:7A:22:D5:C1:44:1A:54:06:AF:6A:6A:C4:83:C0:E7:6D:BC:6C
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:66:fc:dd:f8:61:72:e4:12:2a:6a:ab:6e:89:a2:43:c2:
         6f:b9:93:32:a6:56:18:76:3f:8a:a4:86:86:e8:92:6e:0e:b2:
         63:3d:39:26:48:0a:ff:51:ad:ad:1d:3c:08:2f:fc:33:5e:60:
         fa:d6:42:b6:b1:5d:7a:82:62:6e:78:27:8b:2c:f1:03:97:39:
         8b:d7:22:d7:72:e7:12:b7:9c:ba:f1:4c:fb:be:a8:7d:ce:a1:
         e9:5b:89:cf:a0:ba:37:21:7e:76:05:13:b7:e0:c4:f4:cb:f2:
         62:84:38:aa:96:24:1c:51:01:73:27:9b:64:1f:94:a0:87:4c:
         0c:05:d6:fa:aa:ee:7f:97:55:b2:5c:b1:90:18:04:fb:fe:65:
         01:d8:96:35:bb:63:3a:7a:6e:fb:74:28:9c:c3:7b:f8:8d:7c:
         f0:b5:5b:72:39:2e:47:53:52:22:b4:85:6f:ff:f1:fd:b5:a6:
         ff:05:94:45:4b:c2:dd:11:a7:c7:6f:88:70:bd:4c:ad:db:9f:
         7d:6b:c0:23:ce:bb:0c:79:70:d2:b8:5c:8a:db:5c:fc:57:32:
         e7:e3:0f:28:bb:17:6b:8f:37:7e:cd:2a:ef:53:6b:b1:90:d1:
         eb:97:16:78:c0:ee:3c:72:ca:6c:52:bc:7b:f3:e1:ec:42:c0:
         f3:ed:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:02:00 2024 by rpki-client on console-fra.rpki-client.org