Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa
File:                     323830343a343761343a3a2f33322d3332203d3e20323637303637.roa (raw, json)
Hash identifier:          dIiOhvXcXYhvb30J9/yznUH7xiSLOqVgAjgmfzO+Z2Y=
Subject key identifier:   5A:F4:E7:D6:DE:D8:B8:42:B7:85:EA:67:DF:9F:5B:AF:1F:98:DF:CA
Certificate issuer:       /CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
Certificate serial:       412319020172BEC1BC4A6E5076DD7719A667329A
Authority key identifier: E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa
Signing time:             Thu 04 Apr 2024 13:38:10 +0000
ROA not before:           Thu 04 Apr 2024 13:33:10 +0000
ROA not after:            Thu 03 Apr 2025 13:38:10 +0000
asID:                     267067
IP address blocks:        2804:47a4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl
                          rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 20:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:23:19:02:01:72:be:c1:bc:4a:6e:50:76:dd:77:19:a6:67:32:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20256FFD82563D54FB1FEA62EB7D27408DC46BA
        Validity
            Not Before: Apr  4 13:33:10 2024 GMT
            Not After : Apr  3 13:38:10 2025 GMT
        Subject: CN=5AF4E7D6DED8B842B785EA67DF9F5BAF1F98DFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:d7:9f:c0:be:3c:b5:76:8e:17:c7:da:84:
                    aa:01:3c:1c:91:92:18:5b:96:7f:f8:d9:94:a6:c9:
                    d4:0e:db:64:97:25:6b:0e:4d:d5:4b:8d:85:35:90:
                    32:df:96:4a:0b:b1:50:b8:93:d7:df:c8:a8:29:c3:
                    6c:8f:77:a1:10:27:35:0e:76:0e:29:99:e4:0e:a3:
                    ab:10:6f:58:e6:e2:7d:ad:ab:7f:4f:34:16:e2:56:
                    92:19:23:eb:55:6c:63:b2:12:28:6b:65:b2:51:ff:
                    cb:69:c5:6b:75:42:9d:78:d4:87:46:0a:af:c3:61:
                    bd:69:f3:24:03:ac:0e:51:56:00:83:23:15:97:2c:
                    71:9c:c4:64:aa:91:40:4b:1e:d9:ea:77:a6:a5:f4:
                    45:4f:9b:ed:f0:e7:96:2d:c1:31:90:54:ff:72:59:
                    56:27:1d:c4:bd:a7:c6:6f:05:f1:b8:ae:5f:2c:a4:
                    03:0c:12:75:a6:ab:86:7e:7f:bf:aa:5d:31:9b:2e:
                    ad:68:47:c0:60:11:7f:76:1b:e7:6c:0e:7a:d3:f0:
                    b2:61:ad:55:31:43:e4:dc:65:2c:a9:9a:52:e7:9e:
                    ac:06:ba:f8:ad:f9:a8:c2:00:2f:06:60:9f:47:6a:
                    08:26:40:d0:38:55:e8:09:18:ce:92:fb:62:67:ea:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:E7:D6:DE:D8:B8:42:B7:85:EA:67:DF:9F:5B:AF:1F:98:DF:CA
            X509v3 Authority Key Identifier:
                keyid:E2:02:56:FF:D8:25:63:D5:4F:B1:FE:A6:2E:B7:D2:74:08:DC:46:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E20256FFD82563D54FB1FEA62EB7D27408DC46BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/1/323830343a343761343a3a2f33322d3332203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:a5:d2:bc:47:87:13:b0:9e:cf:3a:08:08:9f:ab:8a:5c:da:
         c1:1b:85:98:6f:d3:9f:41:55:1a:6c:66:29:86:dd:d1:00:0e:
         7d:2a:71:60:53:b7:43:25:e3:a8:c2:71:4e:ff:10:45:cb:cf:
         76:f4:d1:04:ce:63:ac:2c:72:bd:e0:49:b4:58:53:b5:86:d4:
         66:b1:8b:8d:95:70:f2:d7:6e:1e:9b:13:19:88:db:bc:02:76:
         c6:35:a0:c9:69:4b:c0:49:49:11:10:b9:b4:4a:da:30:76:be:
         ee:7e:3c:62:73:a3:25:4e:fc:2d:ce:1f:9b:41:ab:8e:36:2e:
         c8:17:bc:ea:b5:59:74:c4:e4:3a:f7:9a:fd:3b:40:51:7f:8d:
         db:a8:e0:dc:52:04:11:22:c3:e3:8a:52:9c:6a:f7:4c:4d:1a:
         c3:53:2c:9a:ed:d6:32:97:29:d8:21:d5:f6:90:f9:0f:4d:db:
         61:0b:ea:56:91:8f:f3:f8:a5:f0:ef:68:cc:25:bd:8e:c1:46:
         31:f0:de:6c:28:9a:7c:f5:11:ec:1d:b4:79:77:35:00:f4:9d:
         80:db:cb:7a:f9:d9:e1:0a:f5:d1:f8:14:0b:2e:54:47:b8:ff:
         39:c8:36:60:62:d8:da:f9:7f:18:93:89:be:73:e8:81:a8:bf:
         31:3e:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:13 2024 by rpki-client on console-ams.rpki-client.org