Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3438203d3e20323636333832.roa
File:                     323830343a333666343a3a2f33322d3438203d3e20323636333832.roa (raw, json)
Hash identifier:          o+c5yPOmbJHRXvrEviD3tct8shSQ4UFSgT91lReCDDI=
Subject key identifier:   B7:3A:40:00:22:60:35:FA:BD:65:2F:F7:17:57:B7:99:6E:52:A8:BD
Certificate issuer:       /CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5
Certificate serial:       73EDF2014142F50F83ADF8758C36D9BDBE2A4D83
Authority key identifier: 8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3438203d3e20323636333832.roa
Signing time:             Tue 11 Jun 2024 14:46:55 +0000
ROA not before:           Tue 11 Jun 2024 14:41:55 +0000
ROA not after:            Tue 10 Jun 2025 14:46:55 +0000
asID:                     266382
IP address blocks:        2804:36f4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl
                          rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ed:f2:01:41:42:f5:0f:83:ad:f8:75:8c:36:d9:bd:be:2a:4d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5
        Validity
            Not Before: Jun 11 14:41:55 2024 GMT
            Not After : Jun 10 14:46:55 2025 GMT
        Subject: CN=B73A4000226035FABD652FF71757B7996E52A8BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:5d:fe:f0:89:0c:5b:73:55:ca:71:5a:0d:
                    4a:5e:90:48:34:19:0c:06:d9:ac:e6:0b:ab:b9:72:
                    b4:f5:69:e8:cc:01:78:0f:a1:e2:43:e0:f1:16:08:
                    44:42:c9:2c:97:45:4c:c3:34:60:53:1b:27:d7:aa:
                    26:4f:7c:54:fa:61:41:dc:9c:f1:9b:d2:9a:2e:47:
                    ce:48:66:54:c5:fc:b4:42:0b:21:af:c1:ef:9a:6f:
                    92:fc:e9:37:71:73:47:4a:d2:3c:6a:7c:79:54:ae:
                    ee:4f:38:98:35:ca:cb:73:5e:2d:5f:a6:68:aa:5d:
                    1c:d8:a1:61:e5:79:60:1f:4f:49:85:29:42:7a:e4:
                    86:2a:24:05:47:b0:7d:54:d3:ce:6f:eb:ab:e8:62:
                    37:78:9d:86:e7:28:2c:eb:4c:fc:28:2d:61:df:7f:
                    a0:be:34:d1:78:44:17:68:3f:5c:b4:a7:49:76:1a:
                    31:06:80:15:5e:92:4a:5a:7e:08:5f:45:21:75:66:
                    52:d3:b7:e4:7b:98:04:b6:c9:33:22:eb:be:81:db:
                    ea:db:d2:bb:36:96:66:89:13:dc:58:98:21:8c:c7:
                    fd:f1:09:7e:e0:5c:da:c2:02:25:08:82:7e:0e:45:
                    40:71:96:42:79:82:2b:32:7b:17:f0:a9:df:c5:ad:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3A:40:00:22:60:35:FA:BD:65:2F:F7:17:57:B7:99:6E:52:A8:BD
            X509v3 Authority Key Identifier:
                keyid:8C:EB:93:8E:E7:EE:7A:3D:30:ED:A7:14:BE:1B:C7:A9:15:23:DA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CEB938EE7EE7A3D30EDA714BE1BC7A91523DAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hmt9gnmJFuz86t6ZrudcamrKuXRm7ud5WJboNDqG5nGo/0/323830343a333666343a3a2f33322d3438203d3e20323636333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         db:a0:fb:11:8d:e3:22:19:f7:40:f0:76:a5:09:d6:c0:f2:27:
         28:17:12:85:a7:b6:3e:72:2a:e8:25:b6:c7:dd:66:1f:8f:54:
         fb:71:2a:27:17:80:56:2c:38:35:0d:83:6a:45:b7:24:0e:14:
         a1:8f:36:a9:87:16:43:da:c9:c4:d7:74:aa:89:a1:d7:e0:05:
         19:93:80:78:6a:42:4f:66:5c:0f:07:46:98:dd:de:f3:63:41:
         cf:ce:8d:c8:0e:9b:0a:25:c9:ac:bc:dd:c0:5e:82:a0:62:3f:
         a7:df:22:19:32:9c:38:8d:fe:f4:3d:b0:35:4f:52:34:79:8f:
         be:da:d1:08:63:e9:34:7f:69:f8:69:ae:2b:ff:c2:c5:b9:32:
         11:5d:af:21:37:c7:2f:3e:36:84:d5:7e:09:21:28:6e:a9:93:
         98:f2:53:b3:82:7a:b0:fa:1d:49:23:30:61:2a:9b:19:8d:9b:
         5b:c8:0f:75:82:55:7a:c8:17:04:38:58:b6:22:69:bd:a3:14:
         7a:8b:64:07:dd:3b:ac:be:bb:10:49:8b:0b:cf:86:16:86:f3:
         58:ae:15:63:a2:2c:8d:41:ba:9e:de:ef:54:8a:50:4b:a4:27:
         60:b5:73:ea:90:8b:35:75:ec:db:79:d3:ed:98:87:c4:7e:e5:
         83:02:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:55 2024 by rpki-client on console-fra.rpki-client.org