Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa
File:                     323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa (raw, json)
Hash identifier:          dVARaFVMdMdHQ6Bld5pZ0sktZQcdpKzswuC/8qU7v78=
Subject key identifier:   6D:84:8E:6F:EA:57:3F:19:C8:6B:02:EC:56:75:4E:8E:28:B4:20:35
Certificate issuer:       /CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
Certificate serial:       29E786B9360BB69BEB2B6313AFA0FF633D7C5888
Authority key identifier: 9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa
Signing time:             Mon 14 Oct 2024 13:20:51 +0000
ROA not before:           Mon 14 Oct 2024 13:15:51 +0000
ROA not after:            Mon 13 Oct 2025 13:20:51 +0000
asID:                     265282
IP address blocks:        2804:2d70:300::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl
                          rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:86:b9:36:0b:b6:9b:eb:2b:63:13:af:a0:ff:63:3d:7c:58:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC
        Validity
            Not Before: Oct 14 13:15:51 2024 GMT
            Not After : Oct 13 13:20:51 2025 GMT
        Subject: CN=6D848E6FEA573F19C86B02EC56754E8E28B42035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:99:16:36:fb:66:9b:65:c5:ba:0b:3d:0b:6f:
                    dc:e3:c4:78:05:a2:55:b8:65:99:eb:a6:c4:57:2a:
                    4d:89:71:27:c3:15:04:b2:cc:79:8f:28:15:be:80:
                    bc:f0:79:5f:79:7c:24:eb:b4:15:3f:97:a5:5a:93:
                    d5:14:2c:b0:af:63:ca:92:ad:9e:15:0f:a3:5c:39:
                    38:71:c8:fb:b6:4b:8b:93:25:f9:ea:43:2d:d1:cd:
                    b6:5d:c8:90:b9:3b:78:5f:57:0d:3e:d2:32:ed:f7:
                    98:c1:10:57:27:3a:df:c0:c2:de:bc:20:75:78:00:
                    fb:8e:99:5c:14:be:c6:d3:62:3d:1a:0d:a4:eb:04:
                    29:e7:19:74:e8:ba:4c:d4:2d:f8:bc:d5:f7:f5:f8:
                    51:21:8d:67:49:f1:39:37:22:a5:42:b5:f7:c7:2e:
                    f7:0a:34:20:ea:5c:cb:5c:37:ce:df:be:99:93:05:
                    74:cc:d5:f4:e5:df:de:56:45:9e:3a:e7:7d:65:59:
                    a2:37:b8:cf:61:87:a5:2c:63:10:2c:b2:5c:8a:96:
                    47:7d:3e:39:1a:eb:29:a5:04:69:d3:c6:4f:1d:ce:
                    ba:50:b4:16:41:6a:54:ff:11:b7:d2:4a:6b:a9:97:
                    1e:36:0e:f2:f5:27:40:1a:e1:bd:89:9f:45:34:fd:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:8E:6F:EA:57:3F:19:C8:6B:02:EC:56:75:4E:8E:28:B4:20:35
            X509v3 Authority Key Identifier:
                keyid:9C:B6:D5:EC:53:00:D1:A3:6F:F8:93:C6:0F:39:0D:64:BF:00:F1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CB6D5EC5300D1A36FF893C60F390D64BF00F1EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hvxf3eJ5x2CLxk2NFaUFaRxhGmWxR1Go3tWYttD8dENN/0/323830343a326437303a3330303a3a2f34312d3431203d3e20323635323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d70:300::/41

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:43:28:d8:ea:cc:0c:2e:ad:0d:db:93:10:d5:6a:cc:96:
         6f:7d:7c:aa:22:53:81:5b:f0:6a:7e:9d:27:9c:4f:69:1a:59:
         d3:e1:01:42:82:38:8b:72:9c:78:c4:6e:28:35:f0:53:c4:f3:
         61:9c:2f:5b:aa:d8:b3:e7:ed:36:c9:99:55:78:d0:5a:9c:27:
         01:14:a8:6a:c1:33:8f:ce:10:f3:4a:a5:f5:71:70:4e:63:62:
         66:5b:5c:12:e9:87:f5:0b:2e:a8:7b:d2:4e:a3:53:d7:57:1e:
         1f:ee:ee:5f:a8:0f:fa:fa:58:56:e7:32:70:49:f1:99:32:fb:
         db:e4:e7:ac:27:be:6e:de:19:ea:d0:9d:fc:b3:4a:53:89:79:
         f0:32:17:36:7c:73:eb:14:ef:4c:ec:17:6f:2a:e1:98:43:22:
         fe:00:04:74:02:24:53:5e:c8:73:8b:ed:3a:e2:f0:42:7d:06:
         c3:52:8d:87:5f:b6:47:ee:2d:22:8a:84:6b:c1:f0:18:81:69:
         e3:ce:bc:55:56:d6:2b:c7:4a:43:e4:1f:73:c4:e8:12:3e:fa:
         3a:57:09:80:c8:28:1e:fb:f6:68:23:93:e3:7a:df:17:38:03:
         12:bd:2e:68:41:c4:d8:cb:0a:16:1d:20:2f:3e:4f:c6:bd:f9:
         49:51:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:16 2024 by rpki-client on console-fra.rpki-client.org