Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/323830343a373166343a3a2f33322d313238203d3e20323730383232.roa
File:                     323830343a373166343a3a2f33322d313238203d3e20323730383232.roa (raw, json)
Hash identifier:          HSf4+Q8NVGE4u931oK61jd40YX/w4BcIr0eqLxA4dM8=
Subject key identifier:   EF:BC:F6:B8:0F:FE:B7:6F:9F:2C:19:8E:7E:4B:F3:4C:2B:F9:F4:8D
Certificate issuer:       /CN=97987E59FF7A68A6D674B51B1420A36FEEB15532
Certificate serial:       52E376645894B377B0269C40E8F7EBFF048A69A9
Authority key identifier: 97:98:7E:59:FF:7A:68:A6:D6:74:B5:1B:14:20:A3:6F:EE:B1:55:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/323830343a373166343a3a2f33322d313238203d3e20323730383232.roa
Signing time:             Thu 04 Apr 2024 22:05:36 +0000
ROA not before:           Thu 04 Apr 2024 22:00:36 +0000
ROA not after:            Thu 03 Apr 2025 22:05:36 +0000
asID:                     270822
IP address blocks:        2804:71f4::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.crl
                          rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e3:76:64:58:94:b3:77:b0:26:9c:40:e8:f7:eb:ff:04:8a:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97987E59FF7A68A6D674B51B1420A36FEEB15532
        Validity
            Not Before: Apr  4 22:00:36 2024 GMT
            Not After : Apr  3 22:05:36 2025 GMT
        Subject: CN=EFBCF6B80FFEB76F9F2C198E7E4BF34C2BF9F48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:62:cc:bb:27:6f:1a:b6:82:49:b1:83:95:
                    3a:ee:15:b0:13:c0:b2:a6:60:e2:f1:9e:d5:70:3e:
                    26:d9:30:d6:16:2f:e9:15:06:6e:91:b9:43:c4:fb:
                    94:37:71:d9:5f:bb:2d:87:43:11:00:e0:a3:d7:82:
                    9b:58:d4:c2:8c:f9:01:f0:78:9b:00:1b:bc:d7:77:
                    06:e2:23:5c:00:43:1d:83:86:9c:7c:1c:bd:42:71:
                    5f:e5:8c:14:db:20:ad:49:f7:e3:b3:55:1c:d5:b8:
                    f9:94:76:52:26:b0:dd:cc:a8:5b:12:43:d4:33:10:
                    d9:2a:01:61:ed:f3:c3:16:a9:5f:5f:48:5f:6c:a5:
                    1c:1d:20:f4:30:34:d0:0c:29:6a:e6:83:1c:f8:a8:
                    24:db:33:3d:72:3c:5d:e8:a6:6a:fd:6e:ce:84:8d:
                    bf:cd:82:86:80:7a:74:e5:46:8a:36:1f:94:08:5b:
                    02:19:ff:e5:aa:b6:50:50:28:e4:6e:f8:e8:34:90:
                    60:b8:bd:cc:56:73:73:1f:9e:4d:1d:7b:05:6e:d2:
                    4c:4e:1e:01:ec:75:91:22:42:d5:a8:c4:d4:1e:98:
                    7f:37:ab:8f:3a:55:ef:62:7b:d8:79:a1:e3:4e:80:
                    66:79:40:14:4f:b9:f9:95:40:53:75:34:ed:2a:3e:
                    cf:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BC:F6:B8:0F:FE:B7:6F:9F:2C:19:8E:7E:4B:F3:4C:2B:F9:F4:8D
            X509v3 Authority Key Identifier:
                keyid:97:98:7E:59:FF:7A:68:A6:D6:74:B5:1B:14:20:A3:6F:EE:B1:55:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97987E59FF7A68A6D674B51B1420A36FEEB15532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvRd3YQHzjuVVq8ktxp3QDexQFpiQwnVBhFZuxr9oALs/1/323830343a373166343a3a2f33322d313238203d3e20323730383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:a9:29:4c:08:a9:88:92:35:37:4d:42:9e:e9:c4:46:6e:37:
         14:f8:1b:c2:f8:45:7d:03:99:2d:f1:51:64:2c:d0:3d:82:aa:
         62:0d:28:eb:99:a9:6e:d4:c1:2e:5a:52:9e:d0:c6:9f:f6:a9:
         f1:b0:96:cd:96:61:67:f6:6a:e2:b7:b9:ae:62:da:7c:29:4b:
         f4:42:a5:f8:e1:68:f2:91:16:7c:d4:cb:e5:27:c2:9a:2d:05:
         1c:6b:dc:29:63:fa:27:19:ae:66:09:d6:f1:86:6e:d2:e7:c8:
         39:a8:fd:ca:22:3e:5b:de:2a:62:47:ee:54:59:c8:9c:30:20:
         c9:af:7e:97:52:03:5c:d9:55:21:9b:8f:d9:a4:a2:e4:72:2a:
         35:2f:14:00:83:72:bb:b5:2e:7d:e2:61:26:2d:1c:e6:09:19:
         4e:c4:28:c2:b9:c8:31:d7:c9:fd:fd:ad:32:28:4e:1d:89:07:
         c7:86:1d:65:c4:aa:0b:01:b8:f7:4a:80:08:79:8b:47:6e:d2:
         97:a1:07:a0:f9:cb:d1:f3:46:2c:ad:94:5d:1c:b7:bc:ee:79:
         8a:e5:5b:86:36:cd:71:1a:3e:f0:f9:eb:34:6f:03:9d:fe:73:
         6d:b2:bd:3e:19:c7:9d:ea:04:2f:5c:5c:45:b4:e4:63:a7:91:
         35:8a:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:06 2024 by rpki-client on console-fra.rpki-client.org