Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa
File:                     323830343a6663303a3a2f33322d3335203d3e20323633363031.roa (raw, json)
Hash identifier:          TlECfP23Zhy8zd1fDfM9MB6FQ+X9dETE41ySyRjcAv0=
Subject key identifier:   84:40:56:71:07:E1:C2:97:2C:33:71:B3:13:13:DB:42:F6:A4:E0:B1
Certificate issuer:       /CN=8DEACA987A0D22568015F0352EA866AA5BEF9DBD
Certificate serial:       3AC7E4FCA19213AF259DF9CB3A5C78D10BD634C4
Authority key identifier: 8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa
Signing time:             Thu 04 Apr 2024 16:01:52 +0000
ROA not before:           Thu 04 Apr 2024 15:56:52 +0000
ROA not after:            Thu 03 Apr 2025 16:01:52 +0000
asID:                     263601
IP address blocks:        2804:fc0::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.crl
                          rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c7:e4:fc:a1:92:13:af:25:9d:f9:cb:3a:5c:78:d1:0b:d6:34:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEACA987A0D22568015F0352EA866AA5BEF9DBD
        Validity
            Not Before: Apr  4 15:56:52 2024 GMT
            Not After : Apr  3 16:01:52 2025 GMT
        Subject: CN=8440567107E1C2972C3371B31313DB42F6A4E0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bd:a3:55:d7:82:7b:3a:ca:0b:6a:89:e7:b4:
                    2d:0b:d9:c8:c9:06:ea:d1:ce:92:dc:14:4b:58:64:
                    17:d3:ff:0f:94:56:77:ac:23:1c:53:dd:10:df:1d:
                    59:a1:24:e0:c0:1a:2c:01:b6:30:85:3a:df:2a:45:
                    8b:2d:0d:f4:6b:4c:e3:02:b1:90:c8:fd:6b:e6:cb:
                    a1:ec:95:77:34:51:6c:f5:d5:f7:d7:0b:ff:08:80:
                    d6:c5:35:4c:5e:a3:8f:37:fb:fc:c5:12:ce:e1:f7:
                    57:ad:de:7d:bb:11:46:e0:10:5b:1b:c8:73:c7:51:
                    e2:9a:63:7a:33:15:f8:d3:79:86:26:3c:57:6d:22:
                    b7:e9:5d:8d:62:c8:82:ee:77:d6:3b:77:3c:42:41:
                    72:8e:87:52:7f:4a:0c:db:5f:7a:8f:82:08:d3:08:
                    fc:f8:3e:fb:d3:cf:c9:f5:e8:94:18:3d:fe:d1:c0:
                    86:8d:08:63:ef:cd:1d:3f:67:79:5d:36:a5:57:2b:
                    81:8f:89:fd:01:62:ef:ba:7d:85:d4:3d:1a:05:bc:
                    e0:71:a8:a8:db:66:e0:4c:d7:5c:e1:ee:e0:74:a3:
                    4a:d8:2d:df:58:75:9c:78:16:fb:e1:14:9c:6e:ee:
                    68:cd:d3:ff:8c:7c:02:48:95:86:4e:d4:54:51:a1:
                    2c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:40:56:71:07:E1:C2:97:2C:33:71:B3:13:13:DB:42:F6:A4:E0:B1
            X509v3 Authority Key Identifier:
                keyid:8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/323830343a6663303a3a2f33322d3335203d3e20323633363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:07:df:09:93:3e:e0:55:34:ac:dd:1d:79:1c:e7:80:d3:58:
         95:fe:d2:fd:41:2c:36:f8:b1:e8:b2:9a:a9:e9:41:0c:d3:a2:
         70:2b:cf:20:b5:82:2c:95:d3:a4:50:09:89:fe:f9:2e:b9:45:
         68:88:ca:88:55:1b:a3:a2:74:dc:19:23:da:22:b1:1f:5a:55:
         e5:8c:04:cf:41:e8:9a:b2:db:88:9f:ac:aa:3a:ca:35:43:39:
         32:29:39:bd:6c:16:7e:79:9b:c0:c4:d7:95:a4:99:88:5d:9d:
         74:85:e3:2f:1d:61:5d:7f:e3:68:5e:ca:46:5e:3f:7f:d2:95:
         ab:89:33:ef:29:a5:b7:82:f3:a8:ce:d0:a6:23:f3:c8:45:24:
         6a:9a:75:97:d3:51:cc:fc:d7:9e:33:04:17:ea:03:bc:dc:07:
         09:46:ee:4c:e8:39:aa:20:f5:fb:e5:53:91:af:a6:42:60:fa:
         fb:69:d8:63:14:8d:70:78:65:33:13:85:1e:5b:2a:47:7f:f8:
         5c:ed:43:aa:3f:63:d8:84:a8:a5:88:f8:71:6f:88:1e:f7:cb:
         ae:ea:8b:a8:a2:b2:f0:13:00:58:93:1f:0b:8a:31:f0:a6:d5:
         86:55:28:a6:37:e8:4e:7c:72:68:91:47:f1:55:c3:5f:50:3e:
         af:73:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:25 2024 by rpki-client on console-fra.rpki-client.org