Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33342d3334203d3e20323634393532.roa
File:                     323830343a333037343a3a2f33342d3334203d3e20323634393532.roa (raw, json)
Hash identifier:          8uOqdODjPofmRH9w5T4SNS7N76nLuw1W3lLCxXGK/T4=
Subject key identifier:   C8:3F:97:C0:19:4C:E4:E5:B5:30:78:9C:0A:47:7F:9C:29:70:8B:08
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       565E32BB2A5A2B930653AF7D65C32446B3C87395
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33342d3334203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:27:59 +0000
ROA not before:           Tue 30 Apr 2024 15:22:59 +0000
ROA not after:            Tue 29 Apr 2025 15:27:59 +0000
asID:                     264952
IP address blocks:        2804:3074::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 00:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5e:32:bb:2a:5a:2b:93:06:53:af:7d:65:c3:24:46:b3:c8:73:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:22:59 2024 GMT
            Not After : Apr 29 15:27:59 2025 GMT
        Subject: CN=C83F97C0194CE4E5B530789C0A477F9C29708B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:0c:9f:60:f1:96:29:fb:a1:59:da:4f:b2:
                    c5:8a:41:bf:68:15:32:31:eb:1c:ea:f3:00:73:0d:
                    73:0a:a0:51:23:42:9c:00:09:ee:3f:70:18:0d:2b:
                    98:7d:5b:59:2f:52:7d:17:81:5d:28:f1:a3:79:57:
                    c6:c8:af:7c:c1:41:de:0d:13:51:f6:c6:a7:a0:69:
                    e2:6d:89:1e:b6:b1:86:19:f7:f0:0a:17:2a:86:db:
                    be:67:c6:03:ae:a6:43:dc:e8:07:05:e0:ef:3f:b8:
                    49:a6:b2:01:50:70:2b:34:e9:bc:fb:8b:51:cd:3d:
                    93:7e:2e:fc:91:c4:94:af:fe:f8:ad:a3:74:3e:3e:
                    32:07:7a:01:23:cd:86:4f:aa:3b:54:da:ec:f2:1b:
                    4d:07:a3:4b:b3:39:9b:4c:f3:bc:a0:53:12:30:c0:
                    a9:93:9c:88:bb:cf:b4:1e:38:92:37:e6:87:1d:ab:
                    47:5a:22:63:21:b8:57:97:0d:d4:9c:2f:f8:3b:15:
                    80:d6:19:e2:7c:d5:03:0d:e7:12:fa:6a:3f:3e:dc:
                    f1:3b:fd:ac:ee:81:79:0a:dc:42:b6:c2:27:c9:21:
                    ab:97:47:db:88:99:87:90:8d:89:1c:83:11:0c:61:
                    1b:98:e3:3c:6c:f6:ca:9a:e7:0f:fd:7d:7d:b3:57:
                    32:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:97:C0:19:4C:E4:E5:B5:30:78:9C:0A:47:7F:9C:29:70:8B:08
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a3a2f33342d3334203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074::/34

    Signature Algorithm: sha256WithRSAEncryption
         c3:2e:94:e8:74:48:47:a0:19:86:f4:a8:70:14:88:10:74:53:
         1d:ee:6d:fc:66:7e:b5:ed:7c:1e:99:ae:5b:5e:f3:f0:c3:b9:
         c9:55:0a:eb:05:da:a1:14:57:bc:05:7e:24:ba:d9:93:eb:36:
         b7:0b:4b:e9:de:5a:be:6c:4b:d8:eb:e9:7f:d9:f6:1a:a6:57:
         39:92:a9:24:e8:3c:3a:d9:87:c8:8b:08:34:3c:cc:99:b8:cb:
         47:a0:f0:07:97:3b:d1:4a:c5:5b:ec:f7:36:70:27:ce:d1:f8:
         bd:bf:68:ba:52:42:a2:f4:14:3f:f8:07:f1:84:55:c4:d0:7a:
         2d:24:c0:db:26:bc:d3:48:53:29:eb:2b:6d:8b:10:a6:d8:ea:
         dd:6a:43:b6:e5:be:6f:47:a6:f4:6b:1e:e0:53:83:63:29:cb:
         36:46:8d:12:c1:89:ee:b1:01:2a:79:f3:89:2e:3e:5f:9a:6c:
         2d:0b:eb:92:69:26:cd:2f:95:12:c7:39:b1:6d:e2:db:af:48:
         9c:22:fb:ef:8f:1e:82:c9:df:e8:be:a1:a8:a0:fa:f2:57:da:
         69:f1:11:7d:6c:70:9d:3d:c4:a9:55:e5:4e:e6:10:ef:cf:fe:
         89:7d:97:93:2b:db:17:83:fc:66:16:f6:c8:65:be:c6:48:5d:
         7c:13:04:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:48 2024 by rpki-client on console-ams.rpki-client.org