Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33332d3333203d3e20323634393532.roa
File:                     323830343a333037343a383030303a3a2f33332d3333203d3e20323634393532.roa (raw, json)
Hash identifier:          G1/E1iDTPGD8IUbYTqiBq+hz05HCvFjpzQ3jgpZneEQ=
Subject key identifier:   60:D1:1B:61:92:39:8D:67:15:A2:82:37:34:D6:71:61:F3:66:1D:F3
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       0BA849ADCB7C78C8D0FE926414BEC9CE17868767
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33332d3333203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:27:43 +0000
ROA not before:           Tue 30 Apr 2024 15:22:43 +0000
ROA not after:            Tue 29 Apr 2025 15:27:43 +0000
asID:                     264952
IP address blocks:        2804:3074:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Oct 2024 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a8:49:ad:cb:7c:78:c8:d0:fe:92:64:14:be:c9:ce:17:86:87:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:22:43 2024 GMT
            Not After : Apr 29 15:27:43 2025 GMT
        Subject: CN=60D11B6192398D6715A2823734D67161F3661DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:c5:56:82:a0:62:e5:57:ff:91:b5:68:65:
                    e9:d5:a3:c0:e2:3f:6f:91:1b:57:ac:55:5b:6c:2e:
                    46:3b:a3:17:0e:04:93:a5:db:79:f8:d8:d1:51:c8:
                    82:dc:12:21:c3:21:21:f0:a7:29:38:b6:3c:06:93:
                    15:fb:10:05:71:ff:76:d7:3b:57:1e:29:6c:25:ab:
                    64:0a:c5:39:14:24:2f:b4:7d:59:5d:d2:e3:fb:a4:
                    6d:6c:2b:e7:89:cc:7c:2a:af:b5:b7:00:1b:ec:71:
                    58:86:0c:3f:62:ad:9c:44:15:8b:2c:72:29:c2:74:
                    99:f0:ab:9b:3d:16:30:e9:d5:5d:12:62:26:25:45:
                    d3:5e:02:b3:87:f7:a9:4a:25:82:92:1c:dc:cb:f5:
                    7a:ce:19:b4:f8:50:c8:a9:55:3d:c6:1a:b6:a0:dc:
                    0a:0e:c4:95:c0:5b:ff:60:d1:b9:b3:fd:74:a9:e9:
                    6e:7e:77:b8:cc:7e:b9:3f:5a:8c:d4:f9:80:f0:d3:
                    43:56:de:fd:1e:8d:5b:f4:53:7c:ea:ad:30:4b:ed:
                    6d:14:89:f2:b7:27:e5:01:00:c2:e8:a5:02:df:f7:
                    c3:dc:b0:e4:ca:e4:85:8a:6f:bf:f2:78:e5:40:d1:
                    ea:d9:af:ee:cc:4c:c0:8c:75:28:b7:b5:7d:3c:2b:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:1B:61:92:39:8D:67:15:A2:82:37:34:D6:71:61:F3:66:1D:F3
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a383030303a3a2f33332d3333203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ce:af:7c:cc:e5:87:f0:3f:02:69:42:d4:55:69:86:84:e9:c1:
         48:d8:17:ca:57:d7:7a:38:49:44:4a:42:ad:35:99:aa:8d:18:
         0e:1b:e9:50:18:f1:89:14:39:39:25:bb:2b:1b:6e:23:11:93:
         9a:8f:60:b7:28:32:da:9f:28:e1:a7:49:c8:10:b8:dc:f1:dc:
         cd:58:02:26:8c:a9:4e:01:a4:b3:a6:ef:72:b1:ff:bb:73:e9:
         77:1a:e5:af:dd:6a:c7:f3:d5:87:07:dc:50:71:8e:69:87:e1:
         37:55:95:fe:67:84:70:ea:b2:15:20:10:46:67:fa:27:16:da:
         c5:da:5d:aa:e9:12:e0:68:2c:02:1b:00:7e:01:77:d8:df:f2:
         6d:35:b2:43:63:15:40:43:d4:82:b8:33:2e:a8:6f:ad:9f:42:
         dc:39:d9:d8:fd:f6:d0:0c:b0:c3:c8:49:27:d2:37:f1:46:10:
         5d:a1:30:06:97:7b:a3:61:33:01:21:42:4d:bd:0f:91:05:72:
         87:04:9f:9f:a2:95:98:30:b4:e0:37:55:11:01:fc:a7:a2:f5:
         8c:aa:15:e6:40:f9:7e:c7:de:0e:09:6d:a9:3c:e7:9a:3e:b3:
         45:bf:b2:0f:67:e4:32:d8:78:ca:cc:19:a4:af:50:73:12:cf:
         07:44:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:42:38 2024 by rpki-client on console-ams.rpki-client.org