Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa
File:                     323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa (raw, json)
Hash identifier:          azvIeTsuf/lODfA2Wv3OEcUE/iKLzepKP7g96QV2wV8=
Subject key identifier:   DE:47:BF:55:95:8E:CC:32:F9:78:C0:13:AD:89:BB:0E:CE:81:32:EA
Certificate issuer:       /CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
Certificate serial:       683F001294F543702A0ADF4775952DEDF44D7838
Authority key identifier: 74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa
Signing time:             Thu 04 Apr 2024 07:29:46 +0000
ROA not before:           Thu 04 Apr 2024 07:24:46 +0000
ROA not after:            Thu 03 Apr 2025 07:29:46 +0000
asID:                     266447
IP address blocks:        2804:37f8:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 11:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3f:00:12:94:f5:43:70:2a:0a:df:47:75:95:2d:ed:f4:4d:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
        Validity
            Not Before: Apr  4 07:24:46 2024 GMT
            Not After : Apr  3 07:29:46 2025 GMT
        Subject: CN=DE47BF55958ECC32F978C013AD89BB0ECE8132EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:94:43:94:cd:5f:3f:83:fc:2d:90:92:6a:
                    9d:b3:73:ad:6a:29:a8:6b:89:ab:d6:0a:f2:25:a7:
                    c8:60:ee:22:f3:00:ab:e9:df:97:cd:f2:9f:2d:ec:
                    bc:b7:81:12:68:90:8b:2c:98:fe:2f:f8:54:bb:b9:
                    e3:10:81:89:c2:1a:89:01:8a:3e:f3:de:27:de:d6:
                    ab:7e:55:d9:79:4e:62:00:b1:b8:fa:23:36:ad:77:
                    34:7f:53:5b:ff:e5:c7:86:d3:de:44:83:4a:99:16:
                    9f:70:af:5a:fe:29:f7:de:b6:06:9c:68:9c:01:48:
                    31:c2:c2:40:23:77:ef:7f:cc:73:f6:01:a1:1a:5c:
                    ed:ab:db:55:60:ae:5e:72:ce:6f:ab:34:cc:d1:66:
                    c4:be:b3:46:cd:07:68:1f:67:09:08:8d:ea:f5:b7:
                    ff:41:6b:c0:c9:e0:db:c3:44:fa:09:e9:cf:20:24:
                    c6:fd:40:20:fd:4b:9e:e5:64:03:4d:79:2b:1f:24:
                    f5:cc:68:88:3f:77:de:bc:62:4e:9c:93:9d:60:2b:
                    7e:fe:82:50:31:7d:8f:48:5b:9a:be:8b:1e:2f:65:
                    4d:f1:cb:79:5f:93:4e:fe:ed:17:d3:8e:d9:ca:b7:
                    f8:4c:ac:15:80:2f:01:43:cf:c2:9e:c0:42:81:48:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:BF:55:95:8E:CC:32:F9:78:C0:13:AD:89:BB:0E:CE:81:32:EA
            X509v3 Authority Key Identifier:
                keyid:74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:28:b9:99:e2:2a:5c:ab:3a:c3:b1:02:e5:de:02:70:3c:46:
         c7:ab:88:5e:36:f3:52:00:f3:ee:1f:ac:22:9a:6d:f9:a0:c7:
         e6:75:0c:d4:74:ae:b7:1a:4b:70:8c:cb:e1:f9:1d:c7:99:b3:
         b0:cf:d7:dd:d2:d5:b6:a6:ba:bb:a3:cc:4b:c4:67:aa:fa:fb:
         f0:0b:64:c4:14:2d:3f:0a:7e:94:95:f8:14:fa:9d:de:27:61:
         a1:a0:af:93:05:96:05:21:17:c5:01:23:c4:29:9d:5c:43:8d:
         56:f2:b2:0e:02:d3:ac:87:e8:75:18:08:79:ba:a5:76:8b:1c:
         d5:c8:ff:0e:ba:55:8a:cf:40:bd:19:7a:33:39:1e:a8:3f:5a:
         17:b6:35:3d:b7:d1:2f:55:c9:ed:90:88:c5:fb:6c:0a:f4:df:
         52:14:3a:df:de:38:ef:e8:be:34:33:eb:09:66:15:d2:79:48:
         8b:ce:fc:85:e6:e7:bb:d6:f0:cd:7e:d5:83:a1:58:e4:65:68:
         10:ae:cc:1f:75:23:3b:81:a3:9a:40:b6:78:e0:83:6d:5d:10:
         77:5f:21:a8:bc:32:2f:6c:ac:e6:c1:fa:62:71:65:eb:c5:33:
         0e:d4:b0:0e:b8:dd:5a:06:5e:18:79:3c:ea:a7:1f:ac:a1:04:
         9e:c4:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org