Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
File:                     323830343a336439303a3a2f33322d3438203d3e20323636353339.roa (raw, json)
Hash identifier:          iaX2Z+saqzQ9w7kGia24lgFQXYPhFD5n7/GIwnGAu0Q=
Subject key identifier:   E0:10:99:9D:5B:55:CE:71:B3:19:5F:0A:DC:EF:B6:AA:DD:4B:6B:79
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       6D74B37B61877C68E38D7E36F458ECBB474F8B5C
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa
Signing time:             Thu 04 Apr 2024 03:31:31 +0000
ROA not before:           Thu 04 Apr 2024 03:26:31 +0000
ROA not after:            Thu 03 Apr 2025 03:31:31 +0000
asID:                     266539
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:74:b3:7b:61:87:7c:68:e3:8d:7e:36:f4:58:ec:bb:47:4f:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Apr  4 03:26:31 2024 GMT
            Not After : Apr  3 03:31:31 2025 GMT
        Subject: CN=E010999D5B55CE71B3195F0ADCEFB6AADD4B6B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:ac:69:f9:8e:54:ea:12:ef:92:8d:c1:73:
                    a8:46:37:83:10:e5:d1:d3:70:b2:67:5d:63:fe:ae:
                    01:1a:69:9d:2a:b4:55:b6:3b:08:13:c8:ab:eb:70:
                    52:e5:b6:87:e6:ac:27:f8:fd:39:01:2d:8b:15:e8:
                    3b:f9:1a:34:c7:27:2f:90:8a:ae:c7:21:b6:ff:f6:
                    7c:a6:d1:90:cd:0c:c7:57:2f:9a:e9:51:d9:85:0c:
                    df:db:dd:5d:c0:cc:8a:cf:df:9c:66:79:06:ef:69:
                    e3:a9:46:08:91:f5:73:ad:ba:48:c7:db:8f:29:1a:
                    de:61:6d:ea:be:18:22:78:9b:bc:0b:bf:d3:31:47:
                    ee:0f:e5:2a:bc:7e:b1:fc:d2:26:96:ad:cb:35:c1:
                    14:c2:5f:e6:1c:da:6d:a5:3c:29:f2:f9:23:2d:75:
                    51:a2:73:7c:bb:e9:34:8d:ad:f5:f0:da:c4:a6:9e:
                    3e:ec:66:ab:9e:db:9c:db:f8:d6:55:05:39:c3:c6:
                    2d:85:f8:a0:03:d6:50:81:1d:6d:b4:30:24:41:e9:
                    fa:24:69:2a:fa:49:25:d5:d1:67:63:10:a9:28:f8:
                    1d:2f:3b:ff:52:14:11:8b:5f:f9:77:f8:b1:ad:3a:
                    be:7b:5f:36:f2:62:7f:09:45:08:bf:64:16:16:c6:
                    2f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:10:99:9D:5B:55:CE:71:B3:19:5F:0A:DC:EF:B6:AA:DD:4B:6B:79
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e20323636353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:8a:a5:96:6b:00:cf:41:8a:7d:f0:c0:89:f8:1e:73:10:aa:
         ac:27:af:69:33:20:ca:d9:79:a2:72:90:e2:61:01:12:e4:dc:
         c8:92:14:e8:66:08:50:6b:56:ec:ec:43:77:64:ce:d0:5c:94:
         47:c0:52:27:66:ea:47:8b:c1:1c:a7:23:cf:2e:2e:6d:5c:b2:
         15:6b:e2:9b:f5:90:31:3e:e6:83:47:12:d5:fa:6c:62:e8:11:
         9e:ac:21:67:ef:64:fa:98:d5:05:8a:0c:6d:a3:ab:71:f0:23:
         23:b4:30:49:0f:90:4a:fd:9c:94:99:4a:c5:1c:96:87:b7:0f:
         47:28:1b:96:91:00:1d:8f:87:a7:83:f1:43:35:ba:be:81:96:
         cb:98:38:f1:65:1c:d3:70:62:33:1f:e5:d6:b5:be:73:cf:98:
         2d:d8:34:54:4f:e1:48:bf:f4:9f:f6:79:e9:20:ce:97:07:48:
         4b:18:f0:dc:d5:c3:01:8c:9f:e9:1d:6a:0c:08:0f:53:4c:7c:
         7d:eb:4f:fd:51:0e:dc:7d:48:9f:65:b2:11:d1:a8:ca:60:4c:
         54:2b:07:d5:bb:78:b5:2d:12:fc:65:43:f4:d4:05:d5:23:36:
         ad:c8:1f:d6:e0:e0:86:ec:da:ab:9f:03:02:5b:b5:7e:fc:1d:
         5f:83:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:15 2024 by rpki-client on console-fra.rpki-client.org