Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          9BfAHGtf3v2Y8PBdIZjgdO229OYScqI8ch3/TctcqXU=
Subject key identifier:   5E:04:EB:CF:E4:1B:8A:58:53:60:62:BD:6A:04:59:63:02:45:91:FA
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       7680E7AF1BFDDB844638B685DAB7B6C5AC30F6B2
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Fri 31 May 2024 23:28:40 +0000
ROA not before:           Fri 31 May 2024 23:23:40 +0000
ROA not after:            Fri 30 May 2025 23:28:40 +0000
asID:                     263612
IP address blocks:        2804:ffc:e100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:80:e7:af:1b:fd:db:84:46:38:b6:85:da:b7:b6:c5:ac:30:f6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May 31 23:23:40 2024 GMT
            Not After : May 30 23:28:40 2025 GMT
        Subject: CN=5E04EBCFE41B8A58536062BD6A045963024591FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1b:3a:fa:db:83:db:ae:96:8b:51:68:32:50:
                    77:76:26:63:19:a6:1a:c8:6a:90:ed:82:c2:ac:56:
                    33:d3:63:d5:8a:83:ac:26:a2:b2:39:af:74:fb:e4:
                    45:ae:3f:ff:8b:c5:f9:01:9d:6c:db:c9:4f:7b:57:
                    90:58:13:94:cf:96:f4:42:1e:64:1b:21:1f:14:06:
                    5b:61:15:8f:bf:9b:99:17:f3:0e:05:d0:0d:58:b6:
                    8d:e7:48:5a:16:31:cb:cb:ce:8c:1f:0b:88:51:34:
                    b3:59:70:34:3e:4c:a2:c2:41:16:f5:ca:61:5a:24:
                    2c:f2:dd:22:11:c4:ff:7b:76:54:99:12:fd:b8:49:
                    c1:7d:b7:28:fb:a2:d1:22:c3:1e:0d:a7:3c:1a:ac:
                    25:0a:15:5f:0b:50:3c:06:fc:b2:2d:b1:84:0b:04:
                    87:d8:10:cd:88:35:ca:6e:60:13:d3:fe:28:fc:01:
                    d7:63:cf:d0:6e:65:1e:9f:e6:23:01:d3:11:f4:5b:
                    08:31:42:cc:97:d1:ed:3d:49:c7:2c:23:61:bc:0e:
                    bb:1c:48:4f:52:0e:4a:af:2a:51:5b:28:8c:38:eb:
                    93:8b:9a:ea:e5:a0:f8:48:eb:6a:31:9e:fc:0b:b1:
                    2f:da:be:ee:97:70:35:08:f2:4a:d2:b1:85:a7:c3:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:04:EB:CF:E4:1B:8A:58:53:60:62:BD:6A:04:59:63:02:45:91:FA
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653130303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:f5:c8:2f:8f:08:70:05:43:cf:61:41:a6:71:22:de:ba:1d:
         cf:a2:90:94:99:d5:6e:06:ca:ef:d5:dc:fb:7f:e6:d8:c2:5b:
         70:74:63:76:36:93:07:69:60:f3:29:ab:9b:b8:be:51:dc:c3:
         14:fe:90:13:90:7e:10:d5:6c:76:3d:a5:3a:93:f8:77:4f:4e:
         74:56:46:a4:71:61:15:ce:e7:2c:63:17:e7:9f:88:ed:58:e0:
         15:4a:b3:86:d9:cf:b1:6c:be:50:86:0f:0a:06:14:51:02:ca:
         58:9a:6e:56:59:59:01:e3:d9:1e:86:ce:bf:d1:a6:57:00:f1:
         59:f8:34:a4:12:14:86:8f:55:9a:33:7c:26:6b:5f:7e:11:fe:
         e4:78:ce:b4:24:1a:b9:ae:76:66:17:19:d9:da:ae:2b:bd:48:
         70:48:be:79:54:c2:6e:d0:24:ab:b6:8b:a2:d8:c1:16:f5:25:
         56:58:55:02:1b:b8:2c:35:d8:90:9c:24:80:94:20:09:e8:7a:
         5c:97:77:00:59:fc:af:0b:27:58:ab:5e:e5:53:2d:7b:cd:e8:
         0b:15:02:d9:4e:a1:76:f2:e1:88:83:e3:3b:f2:b1:38:f2:52:
         41:08:58:a3:8b:d1:68:08:02:46:38:77:5a:b6:c1:4a:40:ae:
         0a:96:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:30 2024 by rpki-client on console-ams.rpki-client.org