Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a633030303a3a2f33342d3334203d3e20323634393532.roa
File:                     323830343a333037343a633030303a3a2f33342d3334203d3e20323634393532.roa (raw, json)
Hash identifier:          09zgKP/BKpl+OX6JdZWGs8seUP24+C0JKrLdn0YHK5g=
Subject key identifier:   12:D1:27:8A:EB:2B:EA:B4:AB:1A:49:3E:82:B1:DF:07:18:B5:70:55
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       63FD655E982E522315A9599E2B9D4781DF98049C
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a633030303a3a2f33342d3334203d3e20323634393532.roa
Signing time:             Tue 30 Apr 2024 15:28:39 +0000
ROA not before:           Tue 30 Apr 2024 15:23:39 +0000
ROA not after:            Tue 29 Apr 2025 15:28:39 +0000
asID:                     264952
IP address blocks:        2804:3074:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Oct 2024 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fd:65:5e:98:2e:52:23:15:a9:59:9e:2b:9d:47:81:df:98:04:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Apr 30 15:23:39 2024 GMT
            Not After : Apr 29 15:28:39 2025 GMT
        Subject: CN=12D1278AEB2BEAB4AB1A493E82B1DF0718B57055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:df:d9:08:69:1d:21:95:c8:f4:ee:45:60:
                    82:ec:e3:fe:c6:ed:57:f2:b9:fd:8d:1c:97:1e:1a:
                    3c:17:fb:c9:49:e6:8a:08:f1:f2:91:1c:4b:2d:4d:
                    06:a2:60:4e:55:09:fa:f2:25:7d:66:2c:ed:78:58:
                    01:1b:54:42:91:92:63:b8:ec:57:bd:49:10:78:1b:
                    ab:7d:e8:80:9e:b9:92:00:2f:32:44:00:34:bb:da:
                    63:e0:48:ff:01:ec:5b:50:4d:a0:d0:e2:41:97:84:
                    f7:a3:e7:59:a5:19:ad:1a:03:c6:0b:f2:65:0a:50:
                    34:c9:59:4c:a7:8e:5e:93:e4:a4:79:06:64:05:63:
                    50:71:a3:10:f7:60:1c:e9:bc:44:80:63:70:19:3d:
                    95:69:e0:4a:b7:3c:2d:73:97:e2:86:64:d4:1a:96:
                    e9:d3:36:87:85:de:c9:5a:14:ab:10:97:b9:6f:6c:
                    33:da:ad:3c:20:fb:9c:3c:60:bb:f6:ff:34:60:fc:
                    e7:e2:89:17:99:38:28:2d:a1:11:92:67:7e:3c:15:
                    bd:27:58:3c:b6:22:86:69:a4:80:72:3c:34:82:76:
                    28:a8:a9:01:d7:f6:51:8b:88:cb:3a:d8:b5:3a:a3:
                    15:85:b8:13:02:53:a4:9c:be:27:aa:ac:92:81:59:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D1:27:8A:EB:2B:EA:B4:AB:1A:49:3E:82:B1:DF:07:18:B5:70:55
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a633030303a3a2f33342d3334203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:3f:4a:99:b1:c3:a1:f9:c7:6d:23:e6:e7:77:28:85:b7:b2:
         68:bb:ba:93:46:fa:15:52:90:23:5e:23:03:49:ff:67:84:98:
         38:61:75:3b:91:58:c2:ff:a3:e4:3f:b6:25:08:e9:33:4a:2d:
         a3:c3:25:6a:f3:60:fc:f7:75:45:18:9b:10:62:8f:ef:c2:60:
         10:17:52:8f:2b:32:e7:f0:f2:f6:5f:b6:83:64:69:e5:74:27:
         a4:e5:ab:02:76:9b:cd:d7:b4:66:86:5f:5e:b4:8a:cf:f9:eb:
         c0:0e:43:8d:ed:50:ec:c2:00:55:fb:5e:9b:4b:40:ce:1b:23:
         bf:f1:4a:79:ac:57:3b:c2:95:72:01:9c:dd:28:73:a9:de:e8:
         be:c0:91:e6:c8:51:e0:5e:85:21:61:43:f8:45:02:31:75:19:
         64:37:24:b7:ce:44:64:08:bf:fb:e8:69:50:4f:ef:db:78:51:
         eb:3f:2f:19:73:19:e2:6b:9e:3d:ba:d2:63:f8:82:3c:71:ae:
         58:0b:64:66:2d:51:b8:ed:37:76:6e:b7:30:da:b9:90:2d:b0:
         54:ca:c0:9b:4a:57:57:f6:f5:6b:90:cf:a7:2c:6f:31:61:42:
         f7:9b:3b:0a:25:79:54:31:be:b9:f2:b4:59:36:41:35:1a:6a:
         6e:2e:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 22:57:32 2024 by rpki-client on console-fra.rpki-client.org