Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/323830343a363465343a3a2f33322d3333203d3e20323639343536.roa
File:                     323830343a363465343a3a2f33322d3333203d3e20323639343536.roa (raw, json)
Hash identifier:          s03eb6s9UVZ1zz0SJOJpSMvz4s0Mwk2VzFG2fU+ZM3Y=
Subject key identifier:   01:04:C3:FA:EC:BB:63:5B:1F:F7:43:5A:50:39:C8:11:E7:D1:EB:0C
Certificate issuer:       /CN=C95F48510E1D8365515A1BA5B1BFBB3A9B041584
Certificate serial:       1D5664D218F8BD765B28CD75E9E47BB0B894BC26
Authority key identifier: C9:5F:48:51:0E:1D:83:65:51:5A:1B:A5:B1:BF:BB:3A:9B:04:15:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/323830343a363465343a3a2f33322d3333203d3e20323639343536.roa
Signing time:             Thu 04 Apr 2024 03:21:36 +0000
ROA not before:           Thu 04 Apr 2024 03:16:36 +0000
ROA not after:            Thu 03 Apr 2025 03:21:36 +0000
asID:                     269456
IP address blocks:        2804:64e4::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.crl
                          rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:56:64:d2:18:f8:bd:76:5b:28:cd:75:e9:e4:7b:b0:b8:94:bc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C95F48510E1D8365515A1BA5B1BFBB3A9B041584
        Validity
            Not Before: Apr  4 03:16:36 2024 GMT
            Not After : Apr  3 03:21:36 2025 GMT
        Subject: CN=0104C3FAECBB635B1FF7435A5039C811E7D1EB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:1e:cf:38:2b:9e:05:27:fb:61:ba:39:ae:
                    61:e6:fe:1b:4b:8e:f4:83:01:7d:b2:b2:95:aa:d8:
                    b1:93:6b:9b:56:b5:92:56:ab:83:43:e7:8f:2d:67:
                    b7:9c:a3:92:5f:12:21:3c:1f:a0:77:f2:90:2f:be:
                    2a:b4:18:f9:20:28:bb:fe:54:69:7f:58:fd:ab:a5:
                    25:45:1d:e8:16:ad:9e:0c:98:90:bf:26:b9:1b:33:
                    36:1b:9b:31:1f:35:89:0c:6f:90:ce:7b:6d:69:c2:
                    38:d4:60:aa:2f:8a:07:bf:59:ed:0d:5b:1f:6a:89:
                    77:64:54:5d:d8:b5:fa:e4:cc:ab:8f:22:5b:bc:8d:
                    c8:d1:a7:99:69:bd:86:f4:80:08:a1:e7:c5:9c:13:
                    ea:97:af:a3:82:a1:77:1c:14:63:e7:89:34:8d:ef:
                    80:2c:da:f4:93:e2:3d:fa:68:2b:1d:a7:08:01:f5:
                    4c:e4:2c:41:8c:e4:7f:66:e2:c3:60:47:35:e8:5e:
                    53:1c:a2:99:43:0d:e0:7b:d8:56:a8:63:b4:ed:8f:
                    6a:8f:4f:c6:d3:59:8a:d1:cf:05:01:72:53:b5:5f:
                    82:07:ca:f1:71:64:f2:b8:57:1a:90:2a:04:f8:78:
                    b9:a5:4b:2e:2b:f0:7b:bc:02:6a:13:a8:f3:77:e2:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:04:C3:FA:EC:BB:63:5B:1F:F7:43:5A:50:39:C8:11:E7:D1:EB:0C
            X509v3 Authority Key Identifier:
                keyid:C9:5F:48:51:0E:1D:83:65:51:5A:1B:A5:B1:BF:BB:3A:9B:04:15:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C95F48510E1D8365515A1BA5B1BFBB3A9B041584.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/1/323830343a363465343a3a2f33322d3333203d3e20323639343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:01:32:b5:bb:ab:a1:35:d6:4c:dc:36:2c:ce:f0:7f:ee:b7:
         50:e0:cb:61:38:c0:bb:04:c2:89:97:8c:52:e9:ec:36:a1:ac:
         d9:9b:50:ae:cf:af:b2:17:06:d5:db:66:7e:dd:5b:3a:14:34:
         2c:48:7d:68:79:60:7b:a2:7a:f4:48:a8:34:b1:6f:16:1d:7a:
         bb:c6:b7:8c:ee:52:4e:6b:98:af:ed:88:ff:74:40:e5:02:e6:
         ee:4e:72:80:e6:e8:5a:9e:48:95:f8:2f:90:7f:63:e8:a6:25:
         de:24:0b:e5:39:f7:df:09:a4:7e:87:00:3c:b3:b0:5f:13:ea:
         3f:62:fc:88:17:01:46:fc:68:05:6a:3c:b2:9c:5a:41:2a:46:
         09:12:02:97:0d:e5:70:47:aa:58:3d:9f:bf:55:38:0d:26:ee:
         60:cf:1f:5b:57:26:cb:a0:ff:ed:3d:6f:8a:30:2a:9a:14:2d:
         17:26:1c:6c:14:74:3a:87:4a:e6:42:89:87:e4:84:8d:4d:56:
         e2:3d:74:e8:d7:71:43:41:2e:8e:88:c3:ac:f7:bf:66:a1:f5:
         61:5b:e0:d8:b7:19:7b:6a:99:1e:86:7a:71:4e:b6:3f:0f:2e:
         bf:aa:f1:cc:c7:e2:77:48:bd:8b:5e:27:15:a5:dd:03:49:e9:
         31:ec:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:04:04 2024 by rpki-client on console-fra.rpki-client.org