Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3438203d3e20323635323739.roa
File:                     323830343a326436343a3a2f33322d3438203d3e20323635323739.roa (raw, json)
Hash identifier:          LKfIPSpRhuxrIxtXFU3pao2diwFff0WSPAJmKv9hW1E=
Subject key identifier:   B8:46:4D:5E:1B:24:EB:A6:16:F5:38:BB:F0:8A:E5:39:EF:A0:48:46
Certificate issuer:       /CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
Certificate serial:       46600B4EF9078206295F4903D49899801E59B561
Authority key identifier: 23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3438203d3e20323635323739.roa
Signing time:             Thu 11 Jul 2024 17:49:09 +0000
ROA not before:           Thu 11 Jul 2024 17:44:09 +0000
ROA not after:            Thu 10 Jul 2025 17:49:09 +0000
asID:                     265279
IP address blocks:        2804:2d64::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl
                          rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:0b:4e:f9:07:82:06:29:5f:49:03:d4:98:99:80:1e:59:b5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2348176CD3158AFA70E70E5727DF6BF014A4E45D
        Validity
            Not Before: Jul 11 17:44:09 2024 GMT
            Not After : Jul 10 17:49:09 2025 GMT
        Subject: CN=B8464D5E1B24EBA616F538BBF08AE539EFA04846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:72:71:7c:27:3e:7f:db:0a:98:0e:0d:1d:
                    c0:75:57:3f:dc:5f:f0:70:2d:92:54:1c:5d:8b:53:
                    23:8b:61:01:00:f8:7f:c0:15:e0:04:f8:44:29:a3:
                    fc:37:63:6d:73:67:a6:c8:2e:67:20:97:44:57:18:
                    cf:5c:99:16:fa:1b:1f:7f:1c:1d:a8:00:ba:2c:d0:
                    d5:ef:78:99:b1:38:48:b9:29:fd:2c:f0:d9:82:2f:
                    53:fa:4d:04:14:b8:b1:04:38:7a:8b:d8:67:8e:7b:
                    1d:4d:5d:bd:c8:a5:a5:21:d2:df:10:2f:b8:7f:fc:
                    75:24:3b:85:0a:8b:21:95:35:5d:91:06:76:e9:02:
                    e9:53:47:d8:cf:3a:77:f0:c5:0e:2e:81:4f:39:be:
                    ec:9f:80:e9:07:ed:60:ed:44:e2:60:6a:8c:39:02:
                    15:28:6c:ae:c5:3b:05:1a:af:97:05:15:e0:5c:c3:
                    1d:98:f6:5b:2d:63:55:9c:12:9f:b2:33:9c:37:73:
                    a6:9a:c6:0c:2f:60:35:27:af:94:54:b5:4e:7d:6b:
                    45:20:f3:5e:84:44:9a:69:23:49:0e:e8:74:cb:8a:
                    3f:49:09:de:7a:89:ce:63:ae:d9:c0:17:87:0d:90:
                    07:7d:c8:57:28:a2:11:7c:bc:bc:6d:66:ab:8e:bd:
                    de:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:46:4D:5E:1B:24:EB:A6:16:F5:38:BB:F0:8A:E5:39:EF:A0:48:46
            X509v3 Authority Key Identifier:
                keyid:23:48:17:6C:D3:15:8A:FA:70:E7:0E:57:27:DF:6B:F0:14:A4:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2348176CD3158AFA70E70E5727DF6BF014A4E45D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/1/323830343a326436343a3a2f33322d3438203d3e20323635323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:ff:6f:e3:36:a7:71:b8:f2:75:3a:a2:ea:29:3b:bd:22:
         bc:e0:99:59:94:c3:cb:68:e9:12:77:4e:5d:96:52:ed:22:92:
         c7:11:c5:63:95:be:7d:12:f1:d6:d7:61:aa:2d:6b:c2:0a:f9:
         2a:88:90:af:09:4f:86:9b:36:6f:01:af:13:3a:54:d0:08:6a:
         20:8d:a8:67:e0:aa:1c:d0:26:d3:a6:7e:61:14:f8:e2:c2:a0:
         97:2a:a5:53:42:27:f6:c5:42:f0:8e:7b:78:9e:47:f1:79:16:
         1f:98:cf:6a:5c:cf:f8:05:74:f4:04:fa:4d:c1:40:58:11:0c:
         6e:0d:7c:c6:2b:e4:53:d7:9c:14:64:d6:f3:9a:f9:69:3b:6f:
         24:7d:7c:76:da:72:50:94:6e:65:51:d6:79:cb:00:b5:4a:36:
         5f:2a:cc:16:0a:00:03:4e:83:c6:f2:c1:31:4a:ab:8c:f0:4e:
         e1:16:c1:43:5f:46:77:35:e9:a8:39:01:cd:3d:40:d5:3d:81:
         96:92:ed:96:e0:5b:cc:75:a5:65:d3:30:d1:17:7b:94:01:79:
         e3:e0:c6:c1:87:01:0a:4d:fc:11:09:a7:58:fb:c5:e0:02:d1:
         8b:6b:3b:ee:c9:2f:ef:06:be:c5:a3:e8:46:73:5a:92:4d:b2:
         c7:fc:9f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:41 2024 by rpki-client on console-ams.rpki-client.org