Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa
File:                     323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa (raw, json)
Hash identifier:          k/9AqZqPZ+OAImO+/ryPT6qAjjN4eQq8nuB/fxekXtw=
Subject key identifier:   91:C2:7C:10:1B:78:26:BD:88:08:1D:B1:31:46:A6:12:A3:0C:89:5C
Certificate issuer:       /CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
Certificate serial:       331F74436403F703ECF95A7E1A023A0E102EE896
Authority key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa
Signing time:             Thu 04 Apr 2024 13:38:09 +0000
ROA not before:           Thu 04 Apr 2024 13:33:09 +0000
ROA not after:            Thu 03 Apr 2025 13:38:09 +0000
asID:                     267067
IP address blocks:        2804:47a4:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1f:74:43:64:03:f7:03:ec:f9:5a:7e:1a:02:3a:0e:10:2e:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
        Validity
            Not Before: Apr  4 13:33:09 2024 GMT
            Not After : Apr  3 13:38:09 2025 GMT
        Subject: CN=91C27C101B7826BD88081DB13146A612A30C895C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:39:93:41:32:0a:72:af:e4:b2:d7:4e:5b:
                    5e:78:b6:27:b5:9d:a7:bf:0b:96:ad:a5:bb:f9:f8:
                    57:ff:df:ba:95:11:cc:bb:1d:d9:11:32:7a:43:6e:
                    1b:67:35:8d:7f:80:17:c6:12:56:56:af:50:40:24:
                    92:4c:22:24:5c:94:27:3d:84:10:6a:b7:77:e6:c1:
                    b0:89:a9:42:4f:70:56:e6:67:15:6d:ae:27:a3:51:
                    87:74:d8:0b:d4:1a:50:2b:0a:4d:81:ac:55:c3:01:
                    b3:ae:0d:01:d8:65:31:c1:02:cf:6f:3b:af:a0:06:
                    3f:7f:c2:9e:45:5b:5f:da:a5:d2:86:48:90:f3:c3:
                    87:4b:aa:08:a1:f5:a7:ec:e4:8e:29:56:f6:03:46:
                    67:54:a7:a7:8b:bd:dc:c7:a4:69:5d:4d:20:ad:ec:
                    28:8a:ec:c0:90:59:f5:eb:d0:af:1c:66:dc:9d:68:
                    3b:b3:da:b2:0c:69:13:90:b2:a8:e6:dc:6c:3c:e4:
                    c9:58:21:c5:20:e7:ed:f4:00:4c:89:b1:e2:08:c9:
                    a3:37:e0:63:53:20:1b:eb:27:c6:a2:14:b3:23:68:
                    4a:cc:71:45:bd:c5:32:13:1a:3d:0d:a0:4f:b7:2c:
                    bc:7a:48:53:b4:3d:ae:d5:26:c4:49:30:f7:23:fb:
                    b7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C2:7C:10:1B:78:26:BD:88:08:1D:B1:31:46:A6:12:A3:0C:89:5C
            X509v3 Authority Key Identifier:
                keyid:E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3130303a3a2f34302d3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:80:34:46:a3:8c:89:73:a0:d8:e1:5b:7f:5e:f2:44:e8:
         09:63:68:f8:c9:9b:d6:76:87:0f:49:53:ec:b8:fc:7c:7b:32:
         fb:90:83:98:0c:84:97:69:2f:12:3a:5a:56:5c:32:7e:a7:b3:
         d8:4e:db:ee:13:2c:13:8d:01:e2:56:ce:2d:8d:80:40:af:98:
         ab:44:2f:39:ca:4e:92:25:8b:d9:b4:da:cf:f1:ef:f8:cc:84:
         01:6c:c3:80:b4:07:8f:d7:65:12:2b:21:a0:4e:1f:79:a6:37:
         7c:66:c2:69:11:a7:a9:f5:68:0e:90:bd:8c:69:3d:ea:b5:8f:
         a6:97:08:2b:0a:4e:73:65:9a:41:94:d8:ac:cf:ee:f4:a4:8a:
         d5:f5:32:62:5f:56:d6:37:df:b5:0b:09:5a:4d:36:d9:22:69:
         d8:8f:41:11:9d:5b:6d:47:ca:01:f6:b6:1e:cb:b5:54:34:53:
         2d:ef:d4:25:1f:53:6a:57:e9:86:5a:3d:bb:bb:c5:14:e4:39:
         d3:29:be:a9:e2:13:b3:64:88:8e:5c:95:17:a1:32:78:97:d1:
         0e:28:40:e0:4f:4f:52:f0:83:a7:4c:32:a2:1f:72:9f:80:ed:
         e6:b9:6a:8b:d8:85:c0:73:5f:0f:33:ec:66:a6:e3:2e:d7:b9:
         b7:51:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org