Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa
File:                     323830343a336439303a3a2f33322d3438203d3e2033333536.roa (raw, json)
Hash identifier:          WC6NFXDFxp2xiHmPfDrALI5ZahaV4X0T/r6jZCQiTXo=
Subject key identifier:   9F:A1:96:10:88:32:51:99:B1:12:3E:E3:FD:31:CE:06:F5:80:46:E2
Certificate issuer:       /CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
Certificate serial:       7BC56C45C38A4372BA9560F05FEAA02A214D5303
Authority key identifier: AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa
Signing time:             Thu 04 Apr 2024 03:31:31 +0000
ROA not before:           Thu 04 Apr 2024 03:26:31 +0000
ROA not after:            Thu 03 Apr 2025 03:31:31 +0000
asID:                     3356
IP address blocks:        2804:3d90::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl
                          rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c5:6c:45:c3:8a:43:72:ba:95:60:f0:5f:ea:a0:2a:21:4d:53:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D
        Validity
            Not Before: Apr  4 03:26:31 2024 GMT
            Not After : Apr  3 03:31:31 2025 GMT
        Subject: CN=9FA1961088325199B1123EE3FD31CE06F58046E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fb:db:26:b2:13:b4:0c:6f:79:0c:b9:20:ac:
                    9a:46:9f:31:e5:16:c9:0f:8e:3a:ae:87:56:02:af:
                    94:ec:a6:b6:44:46:0e:20:56:c1:c2:1d:a9:09:d9:
                    2b:2d:38:17:fa:ca:d8:dc:8b:50:f7:a9:1b:6f:f9:
                    63:77:d1:d4:d5:f9:59:9d:a1:cc:ed:10:e0:de:50:
                    12:b8:c4:8c:04:b3:96:4d:e6:3c:b2:85:c3:95:fa:
                    9f:e8:50:b8:c3:b1:26:4c:83:d9:cc:c7:c6:d5:4b:
                    1c:3b:5f:ac:87:0e:7a:0d:31:b4:da:54:36:3f:7b:
                    d3:2b:cd:1c:19:ed:5d:2b:17:6c:4f:21:61:fe:cd:
                    a0:d1:a5:ab:82:2e:70:d2:e1:6b:bb:bb:8d:40:59:
                    51:be:2e:a1:fa:fb:5d:ff:08:5c:d1:99:bd:0d:fe:
                    1b:8a:10:68:7b:3d:53:c2:78:84:c2:90:f2:c2:6e:
                    87:66:03:87:4c:e5:1b:d1:76:6e:d0:32:75:81:78:
                    d3:85:3a:ce:63:cc:6b:4e:f9:29:2a:ea:07:02:d3:
                    18:37:f5:f5:67:80:5b:8a:a1:f2:92:22:92:01:89:
                    c7:96:0d:ac:e4:9e:68:a1:c8:f9:fb:e3:36:8a:04:
                    18:65:b3:ef:3f:32:2e:c3:b4:61:c5:d3:e0:82:20:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A1:96:10:88:32:51:99:B1:12:3E:E3:FD:31:CE:06:F5:80:46:E2
            X509v3 Authority Key Identifier:
                keyid:AC:EC:AA:D2:9A:AF:75:12:6D:8D:2F:59:4F:C4:3A:B0:E7:B3:A1:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACECAAD29AAF75126D8D2F594FC43AB0E7B3A10D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/2/323830343a336439303a3a2f33322d3438203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:85:c5:3a:2e:f4:bb:99:52:36:06:6e:0c:ed:f4:e2:e5:a7:
         1d:a0:a8:06:f7:6a:e7:02:da:ca:d4:ad:ec:b6:49:9f:cf:5d:
         6f:50:b2:02:c7:97:81:ef:8e:ad:b3:94:2d:55:ce:2b:32:8a:
         0c:02:d6:86:72:d8:d6:c3:c3:5e:a0:33:a7:21:75:4f:ec:26:
         56:d2:e6:70:4b:a3:7a:aa:c9:1e:e9:61:23:aa:18:47:28:9b:
         54:88:98:d3:7f:50:8f:01:48:25:71:b3:55:26:7f:67:ee:d2:
         84:d6:94:2c:d6:65:0b:b5:9a:a5:d7:0e:56:4c:65:7b:f3:43:
         47:c7:40:44:15:d6:e5:c7:8e:6a:d8:6f:af:11:f4:21:d9:28:
         af:c6:24:0b:40:ec:7b:c8:cc:1d:b7:50:3e:eb:25:60:4c:e6:
         eb:06:2e:cc:ff:e9:5b:0c:ce:74:e2:e6:4c:f6:f7:4b:54:1b:
         f0:3e:10:f5:11:73:bd:10:be:96:e8:f8:92:28:c3:6e:3c:e8:
         24:99:c0:24:28:76:c8:7b:ed:0b:2d:5a:df:a4:b8:df:47:68:
         50:e3:e4:8d:08:64:d7:78:77:ce:72:85:47:c0:19:3c:66:80:
         65:06:60:40:83:ec:27:87:50:ef:76:c9:55:aa:a2:7e:44:56:
         22:b1:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:01 2024 by rpki-client on console-fra.rpki-client.org