Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
File:                     323830343a326436343a3a2f33322d3430203d3e20323635323739.roa (raw, json)
Hash identifier:          pbeT/G4JdkQypJYScb1Q+4LyA/gS0m9VIJ9nKKWAdps=
Subject key identifier:   0B:9A:D4:26:26:58:35:02:59:BD:9F:C4:34:41:A9:96:08:50:3A:8C
Certificate issuer:       /CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Certificate serial:       0CD6B5120688DE30F9F8475DD4D6619A676C484A
Authority key identifier: 23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
Signing time:             Thu 04 Apr 2024 12:41:44 +0000
ROA not before:           Thu 04 Apr 2024 12:36:44 +0000
ROA not after:            Thu 03 Apr 2025 12:41:44 +0000
asID:                     265279
IP address blocks:        2804:2d64::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl
                          rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 12:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d6:b5:12:06:88:de:30:f9:f8:47:5d:d4:d6:61:9a:67:6c:48:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
        Validity
            Not Before: Apr  4 12:36:44 2024 GMT
            Not After : Apr  3 12:41:44 2025 GMT
        Subject: CN=0B9AD4262658350259BD9FC43441A99608503A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4a:a7:4f:06:06:af:1d:8d:79:7f:2c:f9:39:
                    22:88:9e:b5:a7:e9:9e:2a:39:ed:e3:e3:6f:ac:68:
                    89:40:21:6e:da:ab:77:17:12:7b:d5:96:2d:1c:2f:
                    7e:2a:e1:40:bd:b8:ef:b9:60:d6:e0:5c:02:04:0c:
                    24:8d:a8:9d:7f:28:9e:58:2f:c4:f9:e5:57:de:68:
                    00:10:d8:19:21:05:e9:d6:12:1c:a6:7e:a3:41:7c:
                    ca:b6:5c:a6:21:7a:b0:56:bf:ab:14:43:db:1e:e1:
                    94:31:c9:7a:c4:f4:26:e4:94:7e:f3:6d:55:81:35:
                    28:81:13:14:10:ec:b8:ab:4d:57:0f:f3:60:0a:df:
                    bb:76:6a:5f:fe:e3:c3:23:bd:cb:68:7a:c1:e3:62:
                    b6:ab:de:f3:78:b2:37:e1:5d:ce:d2:f5:ee:d9:21:
                    db:d4:d9:b1:13:22:81:7e:23:36:ea:fe:d5:d9:66:
                    20:9a:52:43:64:1e:80:9d:bf:c3:31:4b:80:0e:07:
                    d6:f3:28:2f:46:7a:7a:2f:a8:55:61:73:4b:55:18:
                    35:55:3a:66:7f:07:aa:a0:87:ba:b9:23:66:ec:38:
                    19:ff:4b:a9:62:45:b8:1e:9b:32:95:c9:32:a8:cd:
                    7f:d7:65:86:94:da:1d:81:3a:94:52:cb:31:a1:dd:
                    98:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:D4:26:26:58:35:02:59:BD:9F:C4:34:41:A9:96:08:50:3A:8C
            X509v3 Authority Key Identifier:
                keyid:23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:0f:71:5e:2a:db:28:00:b6:9a:64:d9:e5:53:5b:25:4c:
         f1:1a:f4:0e:31:1e:62:de:ce:0a:8f:5d:3c:76:15:f0:c4:50:
         8c:74:33:f1:e5:f8:4f:ed:cf:27:77:08:6f:a2:3e:8f:c5:b5:
         00:25:0b:70:cc:f8:0f:f3:07:af:b4:41:f0:d2:3d:7c:70:58:
         1d:c2:f3:e8:f0:12:98:e1:97:88:61:c7:d3:0a:76:6f:91:b8:
         f7:b5:1f:59:5b:b5:ab:e3:84:80:2b:cc:b9:58:7f:ae:65:05:
         63:00:45:29:98:d9:38:c5:72:ac:f1:01:d2:78:f3:23:44:92:
         51:dc:8f:18:4a:ef:20:f3:e5:03:09:39:15:49:b8:f2:e6:4b:
         74:8d:5c:2b:73:29:3b:0a:85:5d:05:4d:0b:65:1c:11:00:b2:
         bf:08:2d:70:73:c3:a8:66:5a:30:35:69:36:9c:53:78:23:bc:
         87:e8:e3:83:2b:39:6b:49:9b:39:cf:27:ea:d9:18:5d:31:2f:
         ec:6e:a2:07:9a:e8:e2:de:2a:26:cd:cd:ae:10:7a:0b:84:65:
         50:18:c4:3e:6f:cd:3c:16:24:35:dd:62:d8:57:7e:9e:86:ba:
         ae:7f:5c:c7:cd:a9:e0:bf:c4:f0:39:84:56:21:51:0b:9c:ff:
         da:e2:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 12:21:58 2024 by rpki-client on console-fra.rpki-client.org