Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa
File:                     323830343a323262303a3a2f33322d3438203d3e20323634313136.roa (raw, json)
Hash identifier:          QXNnnsSekudtlkp86dBK3BtxcaPlOJIQb1WJsSK8Vxc=
Subject key identifier:   74:9E:C6:54:BA:09:73:F9:82:FC:50:1F:84:A6:3D:72:0F:D8:05:EA
Certificate issuer:       /CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
Certificate serial:       1814F2D02EEFF4846069292C1F5F99B0F37E2970
Authority key identifier: 22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa
Signing time:             Wed 29 May 2024 13:57:13 +0000
ROA not before:           Wed 29 May 2024 13:52:13 +0000
ROA not after:            Wed 28 May 2025 13:57:13 +0000
asID:                     264116
IP address blocks:        2804:22b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl
                          rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:14:f2:d0:2e:ef:f4:84:60:69:29:2c:1f:5f:99:b0:f3:7e:29:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB
        Validity
            Not Before: May 29 13:52:13 2024 GMT
            Not After : May 28 13:57:13 2025 GMT
        Subject: CN=749EC654BA0973F982FC501F84A63D720FD805EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:06:ed:ce:05:66:2a:bd:b2:c0:11:c2:b0:
                    eb:35:09:43:ce:ba:9a:c3:10:41:1c:68:d1:06:26:
                    f4:2a:53:96:4b:90:de:74:cc:9c:7d:7c:90:47:eb:
                    b8:27:ae:37:72:bc:9a:4d:84:c9:1a:e3:05:b4:42:
                    58:02:9f:db:79:92:21:87:a4:91:71:57:76:f0:55:
                    bd:05:03:e2:8a:4a:c9:b9:b9:2f:02:ca:73:47:7b:
                    15:71:9b:e9:c4:33:0f:a0:55:bb:61:dd:3b:ed:53:
                    89:be:21:d2:61:8d:01:0e:78:0b:ec:d0:4d:62:19:
                    fd:1b:e2:28:c1:8d:17:e2:23:4e:e1:18:47:9a:68:
                    bf:d1:57:bb:a8:0a:3f:8d:9b:1e:23:8c:85:a7:7c:
                    88:1e:ec:a2:a3:c8:43:29:70:9b:29:97:ee:1b:46:
                    00:ce:70:f2:8a:b9:67:c0:6f:66:bc:45:59:fb:76:
                    35:e3:32:d6:07:24:25:0d:95:ae:2e:a8:cc:3c:21:
                    76:7a:c4:3d:7c:7b:4b:06:ab:e9:14:49:93:77:ef:
                    c9:bf:0a:79:29:b8:68:80:64:73:2f:67:42:d4:73:
                    f8:72:88:ae:e9:76:cf:13:33:5d:da:46:7d:86:7b:
                    29:19:ef:54:f7:81:69:f9:80:9d:f8:d2:f3:68:c8:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9E:C6:54:BA:09:73:F9:82:FC:50:1F:84:A6:3D:72:0F:D8:05:EA
            X509v3 Authority Key Identifier:
                keyid:22:DE:B3:D2:A1:4F:98:97:27:53:CA:F8:B7:BC:5C:5E:20:27:F7:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22DEB3D2A14F98972753CAF8B7BC5C5E2027F7FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuXR5ApuXpTaxFzzG5GTUpBBs4TuUSU9vEP3zfVtZX4d/0/323830343a323262303a3a2f33322d3438203d3e20323634313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:d9:3a:ba:c3:22:92:30:8f:4c:77:24:e9:14:61:c9:23:
         73:54:ac:ad:76:2a:f7:10:5f:c6:e9:6f:01:e2:dd:10:f7:f1:
         71:71:8d:e6:a1:d3:16:ba:c3:16:f9:a0:79:af:20:59:7a:0d:
         90:c3:25:4a:7f:38:55:cc:5c:6a:a3:62:d8:6a:7d:c1:14:df:
         0b:2e:95:76:2c:0e:c8:49:37:d7:f2:2f:51:77:df:53:1e:8c:
         28:0d:0c:5b:dc:e0:fe:b8:54:3c:ae:5c:8a:53:53:2e:43:91:
         68:f2:c4:18:53:24:eb:45:4f:b7:98:7a:0f:51:a5:f7:b5:87:
         d8:01:57:ec:6a:81:a9:dc:8a:e8:68:8a:6e:7a:5d:8c:5b:f1:
         2b:51:b9:91:a2:c7:06:17:e9:c6:48:ad:70:4d:1c:0a:6e:94:
         8e:7b:af:65:e4:3f:cb:45:79:45:51:0c:8b:17:9f:ba:70:29:
         6e:05:07:f6:ec:e8:0d:80:12:b2:76:0c:98:1f:f3:53:23:20:
         cb:65:74:38:31:5c:ae:47:29:c4:69:7c:9e:a5:72:4c:a2:d8:
         18:a6:f9:ff:0a:b7:57:f4:ba:4a:24:dd:e9:92:ef:dd:1f:06:
         50:92:73:82:28:9f:45:0f:1d:c2:31:be:14:0d:d6:a1:ee:36:
         48:2a:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:51:12 2024 by rpki-client on console-fra.rpki-client.org