Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33322d3438203d3e20323731313636.roa (raw, json)
Hash identifier:          fkivhbft/e7bs6itQOedchqInRm7GgwUw23sv1MHhBY=
Subject key identifier:   62:D1:C2:F8:F7:91:0E:99:3D:22:76:ED:3C:8C:2D:9B:3C:30:CE:2A
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       13D410BFE0B0D84A53C3B4BFF73A743E7E4CCA25
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa
Signing time:             Thu 09 May 2024 12:52:27 +0000
ROA not before:           Thu 09 May 2024 12:47:27 +0000
ROA not after:            Thu 08 May 2025 12:52:27 +0000
asID:                     271166
IP address blocks:        2804:7744::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 13:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d4:10:bf:e0:b0:d8:4a:53:c3:b4:bf:f7:3a:74:3e:7e:4c:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: May  9 12:47:27 2024 GMT
            Not After : May  8 12:52:27 2025 GMT
        Subject: CN=62D1C2F8F7910E993D2276ED3C8C2D9B3C30CE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:ac:77:f0:ef:c9:e0:b1:d1:ae:99:da:b1:
                    aa:13:84:c3:9a:e9:33:c4:ba:1a:f8:18:30:15:0f:
                    84:b7:14:85:23:d2:d8:f0:69:68:fd:60:a7:2c:9b:
                    4b:d3:38:cf:5f:48:19:3b:4a:a8:19:c7:77:74:ee:
                    c2:fd:5e:8e:47:90:1a:a3:93:87:3d:de:37:5b:37:
                    fe:67:fc:26:f4:9a:85:ef:97:03:e4:be:ae:85:b5:
                    68:28:c2:7f:8f:37:95:f6:6e:9b:10:0d:f7:20:90:
                    72:e2:89:52:11:64:11:18:07:70:84:20:61:55:0b:
                    c2:a0:9c:c9:b6:26:e3:03:a3:3d:2b:6a:0d:5a:07:
                    c5:4b:5d:76:8d:68:98:3d:4e:f3:c2:42:c5:f6:47:
                    14:67:09:00:92:ab:7f:4d:9b:eb:ef:9a:70:36:85:
                    39:25:cb:a7:28:25:84:4b:8d:6b:dd:1d:54:bd:a6:
                    91:e0:ff:09:9b:71:ba:99:9b:18:69:64:50:0b:a2:
                    dd:80:83:ef:dd:da:05:d9:39:a6:cb:8d:af:ae:d8:
                    bc:92:a0:21:38:9e:d2:73:42:03:cc:db:49:dd:01:
                    42:70:b1:5e:30:b5:4e:f0:84:53:05:5c:f0:cc:eb:
                    39:f9:18:e7:3c:57:6f:8d:d4:65:54:9e:45:f8:54:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:C2:F8:F7:91:0E:99:3D:22:76:ED:3C:8C:2D:9B:3C:30:CE:2A
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:b0:fb:fe:3b:2b:99:bb:c7:fb:21:03:53:75:dd:e7:99:f2:
         d1:16:7a:b9:39:6b:c9:f4:db:a7:87:31:15:0a:77:cf:1f:ae:
         72:1c:95:89:72:1d:76:19:41:19:f3:f7:40:67:fa:ba:9d:21:
         65:4b:ed:02:18:0d:48:03:31:31:b4:53:86:f5:0f:aa:03:7d:
         2f:06:d7:66:4a:8a:12:11:72:77:b1:f6:45:73:21:15:c1:b2:
         ea:fb:82:20:05:29:de:f0:17:d1:2d:e8:9c:08:ee:88:82:d5:
         d1:54:52:7a:c8:cf:9d:45:79:d6:e8:ee:04:78:86:9e:20:18:
         3b:f5:e7:bf:df:db:aa:38:f8:66:d6:09:51:c4:24:46:a4:c9:
         d4:8f:02:63:05:0f:81:ae:a4:c8:1f:9c:f9:b7:66:96:2a:49:
         6d:c6:77:d3:78:16:e6:98:91:b3:d5:88:0c:3e:a9:93:51:6d:
         8a:f6:70:b6:db:9c:2b:92:a8:a4:c5:5b:80:9f:5c:57:2b:fc:
         ec:b8:0a:32:ab:36:0b:4e:80:a5:a1:a0:36:09:52:3a:b9:dd:
         fd:98:f7:fd:18:6a:d4:1a:68:c4:26:3d:bc:a4:c3:cf:fa:18:
         7d:6d:fb:7f:23:cd:81:34:03:6e:91:f7:5b:e7:15:ac:72:95:
         c7:10:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:43:27 2024 by rpki-client on console-fra.rpki-client.org