Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          aKfiWJVrKweBQK/uEfhoatdC1VlCcAmXFAwmXZnxZic=
Subject key identifier:   DB:F0:1B:33:CB:E2:A1:CC:AD:6A:73:68:55:DF:98:A9:28:DD:9B:47
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       0844842E01F00DB2277D08C2B9527B8ED879F977
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Mon 14 Oct 2024 13:20:42 +0000
ROA not before:           Mon 14 Oct 2024 13:15:42 +0000
ROA not after:            Mon 13 Oct 2025 13:20:42 +0000
asID:                     265282
IP address blocks:        2804:2d70:280::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:44:84:2e:01:f0:0d:b2:27:7d:08:c2:b9:52:7b:8e:d8:79:f9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Oct 14 13:15:42 2024 GMT
            Not After : Oct 13 13:20:42 2025 GMT
        Subject: CN=DBF01B33CBE2A1CCAD6A736855DF98A928DD9B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:1f:14:32:95:19:55:fa:00:20:9f:1a:a7:
                    71:a8:d3:15:97:23:a8:93:99:2e:26:5c:69:66:8e:
                    97:54:7c:eb:4d:19:f1:7f:ee:b7:3e:c4:b1:79:83:
                    55:14:80:f5:17:55:97:dd:e4:5c:9f:f3:a2:90:c2:
                    f4:83:8a:87:fd:8c:c7:ce:c0:c7:7d:c2:ee:ad:28:
                    ad:d3:6d:60:f1:05:ba:73:86:b0:2f:18:1e:ac:87:
                    d9:1e:3a:9b:1b:05:64:a1:f6:f3:c4:51:53:44:0e:
                    3a:03:ea:20:14:03:d8:4d:94:4a:5b:d7:64:17:f2:
                    82:52:ab:7f:b0:c7:f2:6e:ac:bf:1e:e2:17:d6:5b:
                    1e:e7:3a:43:00:ae:92:fd:6b:23:73:b2:fd:15:14:
                    4c:c7:a6:93:f8:1a:d5:6a:e9:bd:8f:1c:4c:14:73:
                    bc:81:19:b6:c1:3e:08:c5:a8:4b:ec:a6:1a:fc:d5:
                    62:b3:da:63:6c:38:fd:90:b2:4e:57:46:db:3f:6a:
                    e0:fd:a0:a4:dd:a3:a1:84:21:58:a0:2d:26:2f:c5:
                    20:2f:d3:63:1f:55:74:e1:05:4f:da:be:ef:db:d9:
                    ac:cc:cf:9d:34:4d:0d:58:88:03:67:88:7a:25:5a:
                    32:c9:0f:7d:01:8e:62:eb:cc:df:c8:8d:35:4c:fe:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:1B:33:CB:E2:A1:CC:AD:6A:73:68:55:DF:98:A9:28:DD:9B:47
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3238303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:280::/41

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:58:0a:e0:64:46:8c:e7:8b:a1:5f:c0:fd:ae:fb:2f:05:
         8d:2d:6f:6f:e3:86:f9:ef:82:b3:8b:04:d8:28:5e:3d:16:c4:
         ed:5e:69:f8:d6:53:41:15:2f:13:4f:5c:7a:02:a9:73:e2:c7:
         44:a2:0b:2e:d1:dd:7f:5b:19:eb:ea:89:8f:07:33:6d:69:f7:
         95:77:a4:f6:99:17:f6:71:b5:4f:b2:1e:c0:31:02:c9:b8:47:
         d7:36:e8:44:d4:24:d2:86:33:1b:36:c4:68:4c:20:73:f4:1c:
         21:2a:f9:37:7c:5c:c8:b1:51:e5:f0:de:27:c2:41:a6:a1:12:
         bd:3b:12:bc:49:1f:2d:3f:30:3c:71:6e:e9:69:ac:bb:26:d0:
         52:e2:75:d6:37:17:27:9b:0a:a1:0d:50:46:dd:11:65:f2:b6:
         35:af:6c:7c:6b:e8:fe:10:1d:37:8c:bd:53:fa:ef:3d:05:27:
         98:34:25:a5:cd:ed:fe:90:c0:f6:73:74:16:83:77:5f:68:c7:
         75:20:fb:59:73:28:a5:5a:d9:59:39:5c:3d:e3:de:ae:f0:72:
         f3:77:a7:e7:59:a2:37:a7:23:16:d8:1d:8c:4f:b4:a2:3b:8d:
         28:6e:46:0b:92:3a:92:63:d4:e9:41:48:6f:75:25:1b:05:e1:
         a3:7e:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:16 2024 by rpki-client on console-fra.rpki-client.org