Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa
File:                     323830343a6563303a3a2f33322d3332203d3e20323632393732.roa (raw, json)
Hash identifier:          yx2bfNz/XagZO+p9isotM8/1lAjTfbEX9hjZyrDmTyY=
Subject key identifier:   12:4F:F1:82:8A:C2:75:46:98:F4:5F:65:82:F1:CA:23:83:87:F5:47
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       522E0CAEE3CD99F284F728E3A92E6B8F025F78D4
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa
Signing time:             Mon 05 Aug 2024 11:47:30 +0000
ROA not before:           Mon 05 Aug 2024 11:42:30 +0000
ROA not after:            Mon 04 Aug 2025 11:47:30 +0000
asID:                     262972
IP address blocks:        2804:ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:2e:0c:ae:e3:cd:99:f2:84:f7:28:e3:a9:2e:6b:8f:02:5f:78:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Aug  5 11:42:30 2024 GMT
            Not After : Aug  4 11:47:30 2025 GMT
        Subject: CN=124FF1828AC2754698F45F6582F1CA238387F547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:31:e2:6f:49:67:f1:55:9e:06:14:85:bb:
                    49:32:22:09:25:72:5c:69:a5:f4:c1:f6:05:26:47:
                    1f:46:81:83:f3:92:e0:89:0b:31:2a:93:9b:1a:33:
                    c6:2c:de:3e:b9:f3:cd:53:a1:b6:de:7e:24:d8:cc:
                    a5:58:90:0e:8e:38:7f:c1:1c:cf:01:bc:a0:5c:80:
                    e8:36:33:9f:27:57:ba:f3:60:94:0a:ea:e4:53:bf:
                    28:dc:ac:c2:55:8b:df:c0:de:69:b7:44:4d:f9:3e:
                    4e:9b:1a:48:b3:20:14:86:c0:10:0f:8c:ad:f1:78:
                    14:77:2b:92:7d:d7:02:17:10:8b:80:30:f1:ba:33:
                    2e:cb:85:fc:58:0a:18:f3:56:02:d0:92:bc:e3:07:
                    0d:57:23:3f:5b:d6:cf:17:b9:25:91:6e:55:e7:22:
                    e2:77:24:4a:d7:5c:06:a6:e1:b6:18:fb:d6:bb:d2:
                    23:30:10:fc:a5:5a:6b:75:52:ea:02:11:1a:a0:78:
                    dd:8c:49:90:35:73:b7:64:3d:e4:ce:14:b6:5a:0c:
                    fd:43:c3:59:ab:43:78:7e:41:e5:b5:2b:e4:4f:da:
                    e8:9b:8d:50:e5:56:a6:af:50:df:ef:a1:3c:7a:6d:
                    07:f6:10:e8:11:34:96:e8:3a:7f:34:1f:23:ce:b7:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:F1:82:8A:C2:75:46:98:F4:5F:65:82:F1:CA:23:83:87:F5:47
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/323830343a6563303a3a2f33322d3332203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:ae:6e:0f:35:21:98:99:91:b2:36:a7:56:d4:79:33:be:a3:
         cd:c4:62:c8:5d:e8:f3:49:d5:29:29:62:30:5a:21:d3:70:1e:
         e9:1e:ae:40:5b:f8:e1:88:5c:44:b8:d7:08:03:a8:46:3d:cc:
         c9:91:97:fd:6f:bd:c6:36:9a:9b:30:45:96:20:bc:26:8c:73:
         87:8c:2a:39:ba:c4:56:b9:dd:0d:b3:b0:a9:d3:10:a8:d6:c9:
         8b:31:64:4f:26:cd:4e:cc:04:ea:76:fb:4c:57:a5:d6:2f:8d:
         da:f0:01:57:58:c5:1e:44:d2:c6:b2:88:0e:61:ef:c3:83:c5:
         5c:2c:74:f8:1b:1d:08:85:62:ea:08:25:ac:b5:58:51:fd:8e:
         34:3b:56:9d:3a:ec:39:21:4f:a7:94:07:c0:62:f6:52:60:1a:
         ba:c7:39:9e:75:40:cd:7b:62:15:f6:74:e4:74:14:6c:b8:9c:
         0a:88:da:6e:35:7b:2b:0a:2d:43:9a:3f:4a:90:de:8c:f0:a7:
         75:4d:7c:b7:a2:66:cf:a4:c8:84:0f:ac:1b:b3:b4:bc:b4:10:
         91:a0:e8:5a:54:37:02:f7:a9:e0:1f:0e:78:e5:09:01:f3:7e:
         61:6b:f5:09:a8:00:d1:17:99:ca:54:77:38:ec:2e:0a:df:7e:
         72:31:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:41 2024 by rpki-client on console-fra.rpki-client.org