Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a633030303a3a2f33342d3334203d3e20323636343437.roa
File:                     323830343a333766383a633030303a3a2f33342d3334203d3e20323636343437.roa (raw, json)
Hash identifier:          b2meWhJZRtgkwdGnmZkAfeVAQKAmGZP7te8KHMFzGKg=
Subject key identifier:   53:AE:20:9F:89:0F:31:4B:FD:50:92:AB:2F:E0:A1:F9:5F:93:FA:1F
Certificate issuer:       /CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
Certificate serial:       3E3E98E2207F71FFD5E012B39647C832FCEE3DB8
Authority key identifier: 74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a633030303a3a2f33342d3334203d3e20323636343437.roa
Signing time:             Thu 04 Apr 2024 07:29:46 +0000
ROA not before:           Thu 04 Apr 2024 07:24:46 +0000
ROA not after:            Thu 03 Apr 2025 07:29:46 +0000
asID:                     266447
IP address blocks:        2804:37f8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl
                          rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 10:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3e:98:e2:20:7f:71:ff:d5:e0:12:b3:96:47:c8:32:fc:ee:3d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482EB27C326016337DE655F7CB5A3AFC7183F5D
        Validity
            Not Before: Apr  4 07:24:46 2024 GMT
            Not After : Apr  3 07:29:46 2025 GMT
        Subject: CN=53AE209F890F314BFD5092AB2FE0A1F95F93FA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:bb:d1:12:b4:b0:8b:39:98:3e:c0:29:41:
                    51:ab:a6:e4:c5:1b:73:a5:9a:61:b1:f5:9c:94:b8:
                    c6:9d:83:c4:76:4e:7c:0b:22:f8:58:81:d3:40:06:
                    19:c0:60:b3:a7:d5:1f:2d:80:f9:3c:58:4b:6a:ca:
                    10:7c:b2:2d:3a:f6:9d:e1:42:d1:1f:0f:3d:64:75:
                    3a:c2:14:38:8f:48:99:bc:bf:20:10:1b:22:be:f0:
                    a4:c9:7d:9d:82:0c:fb:29:0b:17:c1:d8:dc:6e:9a:
                    53:2d:b1:52:65:d9:ca:32:10:bd:98:c2:50:c1:a8:
                    e3:f6:34:9a:d7:1e:ce:d4:ff:b2:41:66:7e:7d:24:
                    f4:e9:80:dc:55:f2:9f:f4:fb:e6:b0:26:ef:61:d4:
                    4c:9d:4e:82:c9:f7:75:61:ae:ca:cb:bd:4c:67:57:
                    de:f2:96:93:06:a0:eb:20:49:d7:e0:75:e9:cf:4b:
                    97:f3:06:f1:c0:6a:64:f9:33:a1:36:2e:90:bd:e7:
                    6d:ca:98:df:be:17:73:d6:8d:53:e0:40:ba:78:5e:
                    82:30:80:1b:a3:c4:0f:64:bd:37:2f:45:18:36:3d:
                    bf:0b:e9:32:ae:f1:6b:e3:1f:ac:b7:ea:b9:f9:7d:
                    0e:a9:3d:b4:95:9d:98:1e:b3:53:64:b6:9c:a7:ed:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AE:20:9F:89:0F:31:4B:FD:50:92:AB:2F:E0:A1:F9:5F:93:FA:1F
            X509v3 Authority Key Identifier:
                keyid:74:82:EB:27:C3:26:01:63:37:DE:65:5F:7C:B5:A3:AF:C7:18:3F:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7482EB27C326016337DE655F7CB5A3AFC7183F5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/1/323830343a333766383a633030303a3a2f33342d3334203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:34:dc:84:6f:a5:d0:6b:29:a2:1f:ba:ac:e7:97:39:21:
         c5:b3:34:f2:2c:ca:05:d5:e9:55:0d:a0:8e:b6:d9:9f:20:79:
         76:7c:2b:38:3b:1f:6e:a8:39:6a:c2:f3:d4:51:0c:32:7b:c4:
         95:48:4e:fe:92:a1:dd:23:04:12:c3:97:ae:72:bf:6f:8b:df:
         87:e9:ba:dd:b8:f9:07:a6:f0:e8:53:81:4e:98:d1:97:6a:09:
         4a:6a:a7:ef:36:4e:ad:77:3e:1e:a3:d8:e6:f5:be:c4:80:38:
         ef:29:ea:bc:36:db:f6:22:6b:e1:2f:16:a8:49:9c:76:2a:63:
         17:c7:66:c0:5a:81:29:2c:a0:24:1c:a3:b4:35:b5:98:1e:4b:
         46:2e:30:18:c8:f6:41:8a:1f:c0:93:6e:c2:c8:43:4d:a5:89:
         b4:b7:b8:96:69:07:17:16:ca:51:f3:2b:47:4c:79:39:ac:9b:
         9e:b6:ef:50:de:d6:0b:f1:f7:06:83:f8:b3:80:92:33:25:19:
         b7:2e:0b:18:9c:dc:2b:0d:e7:65:2f:0e:10:2a:b2:63:53:16:
         bd:37:4c:6d:88:c9:a9:e0:fa:2a:cc:72:c0:4c:7e:ee:40:de:
         d4:02:85:e6:a9:47:4a:d6:cc:e4:aa:a2:1d:8e:77:86:14:13:
         bd:f4:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 10:46:46 2024 by rpki-client on console-fra.rpki-client.org