Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/323830343a343731303a3a2f33322d313238203d3e20323637303239.roa
File:                     323830343a343731303a3a2f33322d313238203d3e20323637303239.roa (raw, json)
Hash identifier:          v9YIBhgqCua491S70z30pg96APKJTGn4wKCFm/TM+CE=
Subject key identifier:   A6:E5:1A:CF:1A:DC:B8:96:0E:1E:00:2C:FE:8D:8D:36:B7:69:7C:26
Certificate issuer:       /CN=D83F5B28EED481E4CC7896586669CBA72D35CF20
Certificate serial:       4A410344712B6DD78E4CD0B5248B8BD70582B654
Authority key identifier: D8:3F:5B:28:EE:D4:81:E4:CC:78:96:58:66:69:CB:A7:2D:35:CF:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/323830343a343731303a3a2f33322d313238203d3e20323637303239.roa
Signing time:             Wed 31 Jul 2024 17:17:52 +0000
ROA not before:           Wed 31 Jul 2024 17:12:52 +0000
ROA not after:            Wed 30 Jul 2025 17:17:52 +0000
asID:                     267029
IP address blocks:        2804:4710::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.crl
                          rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:41:03:44:71:2b:6d:d7:8e:4c:d0:b5:24:8b:8b:d7:05:82:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83F5B28EED481E4CC7896586669CBA72D35CF20
        Validity
            Not Before: Jul 31 17:12:52 2024 GMT
            Not After : Jul 30 17:17:52 2025 GMT
        Subject: CN=A6E51ACF1ADCB8960E1E002CFE8D8D36B7697C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:de:78:6b:84:03:2a:24:6c:6e:d4:6a:64:fe:
                    61:96:af:dc:f0:75:f7:3b:46:4b:64:29:df:5c:dd:
                    02:e0:b4:10:11:95:f2:b3:35:ec:e0:78:c8:f9:7f:
                    47:f7:20:17:82:2a:80:7e:1f:a3:5f:75:9b:bb:05:
                    b6:f0:86:3b:c4:7d:fc:cd:86:64:64:76:29:50:5a:
                    dd:1d:2c:b3:ea:aa:f0:1a:23:fc:46:e6:88:e7:aa:
                    cd:62:23:f0:8a:bf:55:09:1c:c7:b5:00:ee:80:72:
                    47:d0:80:81:ae:71:81:70:95:63:64:4f:07:f6:52:
                    a8:26:39:6a:b2:80:0d:d4:b9:f1:5e:19:9a:c5:97:
                    19:0d:6c:47:8a:7f:86:4b:33:8a:33:ae:a3:c9:73:
                    06:a4:6f:ad:ca:bc:67:2d:e3:32:07:c9:10:ae:d5:
                    82:86:ee:02:2b:35:bc:f7:c3:66:91:dd:9b:c4:28:
                    0d:da:d9:81:65:ae:2b:a2:75:22:20:c9:b0:12:88:
                    b6:67:e9:2c:ce:81:76:94:45:e9:bb:db:fa:3a:f8:
                    ac:33:30:88:b7:6a:7c:6c:0b:1b:49:99:af:18:ef:
                    a8:6c:a6:bd:06:c9:c9:f0:ba:ba:b9:ae:16:c7:d1:
                    af:85:58:5d:22:35:9e:af:57:c7:0b:2e:23:3f:71:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E5:1A:CF:1A:DC:B8:96:0E:1E:00:2C:FE:8D:8D:36:B7:69:7C:26
            X509v3 Authority Key Identifier:
                keyid:D8:3F:5B:28:EE:D4:81:E4:CC:78:96:58:66:69:CB:A7:2D:35:CF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/D83F5B28EED481E4CC7896586669CBA72D35CF20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83F5B28EED481E4CC7896586669CBA72D35CF20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvozf5b9A3V4SyeRUB7F9YkuD97aGfpRuerw37Ek9S12/0/323830343a343731303a3a2f33322d313238203d3e20323637303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4710::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:0d:ad:f3:67:ff:de:e8:e2:14:2a:f5:3b:5f:91:58:35:63:
         34:f7:74:a4:a2:98:84:77:fd:40:cf:53:cd:f4:38:f0:2b:bc:
         0d:0d:db:10:04:63:a4:f2:8a:82:c2:70:8d:da:20:ae:2e:1e:
         ec:2c:e6:69:08:ed:a2:4f:28:99:dd:92:80:53:76:9c:83:93:
         67:15:9f:08:c2:1d:2b:f7:e3:ff:d0:20:a2:8f:e8:65:eb:94:
         b7:65:20:a8:66:73:2b:f1:98:83:e7:4e:42:59:e5:5d:d3:39:
         aa:a8:30:c6:2f:32:a0:dd:a8:8a:df:88:23:ac:36:83:6d:3d:
         01:e0:f0:3b:52:54:85:fa:84:31:7b:8a:cb:4a:65:8f:f4:ed:
         2c:66:6b:d7:8a:84:17:76:ac:4c:81:8e:42:19:72:df:00:c7:
         ed:2a:5d:6c:a7:33:06:b7:52:9a:11:f7:0b:31:4f:91:1c:9f:
         8a:21:ab:04:b5:10:27:5c:9b:3a:6a:48:71:c7:98:61:01:15:
         78:ca:c5:c6:7f:3b:43:15:cb:0b:d3:26:a1:14:97:72:50:d7:
         c5:09:64:96:ff:de:13:ee:9e:43:c2:ee:73:a4:62:d1:aa:18:
         b1:1f:b9:2a:d6:f7:9d:fd:14:0d:b1:12:20:4e:59:55:40:bc:
         21:54:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:39 2024 by rpki-client on console-ams.rpki-client.org