Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663138303a3a2f34312d3431203d3e20323634393532.roa
File:                     323830343a333037343a663138303a3a2f34312d3431203d3e20323634393532.roa (raw, json)
Hash identifier:          64nXc4M6iGoBx9ryfR3b8IkhSrJa0gtKMDuKuvYzj74=
Subject key identifier:   CC:07:28:22:84:EB:F6:BC:7C:93:55:29:EC:FE:FA:E1:E0:37:4E:96
Certificate issuer:       /CN=3E212DB1B302950E59672700155B176D07CFDAEA
Certificate serial:       20BF3136F13701D1EDD83C4C9DD881A6323D1924
Authority key identifier: 3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663138303a3a2f34312d3431203d3e20323634393532.roa
Signing time:             Sat 23 Nov 2024 13:52:27 +0000
ROA not before:           Sat 23 Nov 2024 13:47:27 +0000
ROA not after:            Sat 22 Nov 2025 13:52:27 +0000
asID:                     264952
IP address blocks:        2804:3074:f180::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl
                          rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 00:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bf:31:36:f1:37:01:d1:ed:d8:3c:4c:9d:d8:81:a6:32:3d:19:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E212DB1B302950E59672700155B176D07CFDAEA
        Validity
            Not Before: Nov 23 13:47:27 2024 GMT
            Not After : Nov 22 13:52:27 2025 GMT
        Subject: CN=CC07282284EBF6BC7C935529ECFEFAE1E0374E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:39:9f:9c:1b:02:d5:a9:ac:f8:ea:a3:99:
                    08:e0:a1:13:2c:e4:e7:e4:c3:32:fc:6f:c8:b8:31:
                    01:ff:d8:31:b7:a2:1f:67:5a:14:3e:02:1f:ed:3c:
                    91:10:db:f9:fd:c6:15:d7:7b:67:75:1d:24:0e:99:
                    ac:24:5f:d4:4d:b3:02:82:1d:3d:1f:6f:b2:4f:fa:
                    1d:4e:94:e8:b7:11:a4:d3:9c:2a:7e:a7:b7:7c:5d:
                    ee:56:af:1d:00:4f:12:f7:ec:7a:5d:89:50:cd:8a:
                    4a:64:7b:20:8a:6a:a7:fd:52:1e:a1:45:4b:0b:c8:
                    61:b4:db:89:34:f4:21:6a:77:9d:1a:9d:3b:88:2a:
                    68:78:bc:13:58:a5:00:1d:0c:c8:98:66:44:46:00:
                    38:9d:c2:f1:57:24:10:20:9e:a0:c4:41:df:2d:81:
                    a9:87:7b:22:39:34:c1:3c:95:87:54:4b:61:3c:c6:
                    b4:ae:a0:c0:fb:82:c1:2b:80:b0:e5:27:60:09:d1:
                    1d:19:ed:b6:84:af:a3:14:66:35:87:e3:70:16:9c:
                    82:71:9e:1d:04:95:48:fe:42:4c:a9:fb:17:59:32:
                    b3:3b:8d:95:8c:2f:6e:d6:5a:1f:1c:07:15:b0:16:
                    a1:7c:78:c9:3d:26:26:56:1d:a0:c8:65:37:d8:03:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:07:28:22:84:EB:F6:BC:7C:93:55:29:EC:FE:FA:E1:E0:37:4E:96
            X509v3 Authority Key Identifier:
                keyid:3E:21:2D:B1:B3:02:95:0E:59:67:27:00:15:5B:17:6D:07:CF:DA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/3E212DB1B302950E59672700155B176D07CFDAEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E212DB1B302950E59672700155B176D07CFDAEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuUsg4KdrKFxq9qg8LzgkVLkqdAEc9km7eVdyDFRCSKa/0/323830343a333037343a663138303a3a2f34312d3431203d3e20323634393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3074:f180::/41

    Signature Algorithm: sha256WithRSAEncryption
         3d:69:4f:a7:78:f8:27:dd:39:18:70:32:2d:0d:4f:eb:93:a9:
         c0:bf:2f:a5:1b:f1:6f:59:36:81:27:39:49:70:ab:ce:e5:49:
         09:da:c9:7e:98:ce:89:f8:e5:51:2a:f8:21:9b:7b:8b:26:44:
         81:c7:fa:78:8f:8d:3e:3a:4e:4d:36:5f:d1:50:40:9f:94:11:
         d6:67:ae:87:22:41:50:b3:9c:d6:f3:39:79:e9:49:6c:d7:e8:
         6b:6c:5f:a4:d4:e6:6c:1f:8f:4a:94:e0:df:bb:2b:3b:c2:03:
         8a:7b:15:69:1d:7c:45:4f:e8:33:39:b0:24:fa:97:f8:aa:5b:
         a1:a8:89:7c:db:b3:01:cf:2b:6a:a3:b2:2d:9a:4a:82:8a:91:
         df:c1:11:e7:b6:6e:05:81:95:c2:33:5e:47:0d:b2:07:41:d5:
         94:68:4e:80:67:8f:a6:1a:21:73:78:86:c4:93:9a:e8:bc:8e:
         b8:f3:0c:0d:b3:27:11:b3:14:d0:2c:e1:24:25:4c:4c:4a:0d:
         3f:91:44:1e:68:8d:29:e7:b9:97:cf:ea:77:00:f5:5a:f7:36:
         8b:b6:90:7f:a8:30:b5:d3:d0:98:7f:b2:b2:54:94:92:96:ef:
         21:f3:0c:ac:39:5c:20:1f:2c:34:8b:9c:91:40:a2:49:1d:35:
         b4:49:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:48 2024 by rpki-client on console-ams.rpki-client.org