Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/323830343a343738303a3a2f33322d3438203d3e20323637303538.roa
File:                     323830343a343738303a3a2f33322d3438203d3e20323637303538.roa (raw, json)
Hash identifier:          MNaZhFKao53N6SKXIe5xpVPAf73l6G8T7+Q9CahWCBk=
Subject key identifier:   DE:F4:EF:DF:FA:0F:C7:47:61:89:91:5C:49:47:55:B9:E0:47:B3:79
Certificate issuer:       /CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
Certificate serial:       7928E89D98533B598D0C2DD69CB9B31CC60C61DE
Authority key identifier: 9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/323830343a343738303a3a2f33322d3438203d3e20323637303538.roa
Signing time:             Thu 04 Apr 2024 06:47:05 +0000
ROA not before:           Thu 04 Apr 2024 06:42:05 +0000
ROA not after:            Thu 03 Apr 2025 06:47:05 +0000
asID:                     267058
IP address blocks:        2804:4780::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl
                          rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:e8:9d:98:53:3b:59:8d:0c:2d:d6:9c:b9:b3:1c:c6:0c:61:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE
        Validity
            Not Before: Apr  4 06:42:05 2024 GMT
            Not After : Apr  3 06:47:05 2025 GMT
        Subject: CN=DEF4EFDFFA0FC7476189915C494755B9E047B379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:62:f0:59:bd:0a:af:12:a5:6f:ff:16:f7:
                    31:7e:38:c1:51:90:55:a8:b2:b5:71:f7:28:54:0b:
                    ac:84:08:31:ac:56:5c:10:e1:61:40:05:5b:01:25:
                    84:f2:5c:bf:2d:02:3f:3b:67:d6:ad:e4:bf:12:86:
                    45:17:41:8a:60:f7:37:e1:e8:14:eb:86:5d:f3:16:
                    41:eb:4a:fa:98:d4:38:1b:67:c1:bb:0f:b1:79:d0:
                    67:50:73:07:a1:a0:72:65:6e:4e:57:03:30:40:94:
                    71:f2:39:b0:eb:56:c5:10:fd:29:a9:16:c9:cb:e4:
                    02:08:d2:62:45:74:c0:4c:8e:11:f7:99:bd:dc:bc:
                    0e:70:85:0c:d1:7b:41:d4:6a:98:e0:e1:f6:b9:81:
                    db:c7:5c:40:e0:43:ee:c8:e3:91:06:15:cb:2f:c6:
                    18:94:f0:21:15:74:85:b5:42:35:0e:7f:22:d9:07:
                    af:c7:7a:29:1b:3c:08:28:c0:13:75:38:dc:5f:6d:
                    0a:9c:a6:7d:b5:7e:5a:06:64:2d:3e:58:41:3e:77:
                    49:2e:f9:86:5c:f9:c0:bf:36:63:c0:8a:a0:ee:7e:
                    b8:08:53:7c:07:41:27:46:b4:68:3d:38:bc:89:08:
                    46:3a:73:91:32:5e:82:72:cb:71:44:aa:99:ea:ed:
                    c1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:EF:DF:FA:0F:C7:47:61:89:91:5C:49:47:55:B9:E0:47:B3:79
            X509v3 Authority Key Identifier:
                keyid:9D:E0:0F:E8:DD:E4:9E:9E:2F:56:E2:61:AA:1C:3E:93:13:EE:B3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DE00FE8DDE49E9E2F56E261AA1C3E9313EEB3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwFn7q56b8g8wHPZP6eGpKoQMu1nbWhVvdyN7Ckicxw3/1/323830343a343738303a3a2f33322d3438203d3e20323637303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4780::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:44:d2:1e:29:f7:9b:46:d5:45:63:76:34:c4:03:96:f4:
         86:40:57:3c:05:8a:e0:01:52:d1:b4:05:b2:13:fb:34:1c:68:
         74:a3:86:8c:fc:ba:a3:36:aa:7b:d3:87:fc:4e:d1:ad:f0:fc:
         72:8b:13:0f:49:0e:b2:86:7f:ca:d2:90:54:0e:3a:4c:d6:6c:
         65:58:ed:81:56:66:4a:fd:8d:d1:22:e0:d9:92:5b:a4:d9:45:
         50:92:f2:94:57:ce:0a:77:59:ad:45:ca:aa:ce:97:7b:5b:e1:
         1b:0b:6f:9c:75:f9:5c:c6:af:b0:ee:dd:87:8f:4d:d5:3a:62:
         ed:bc:37:9b:79:ee:72:8e:83:c5:09:a1:c8:c3:a5:25:d6:73:
         46:2b:90:28:d6:88:92:f5:c9:81:f9:46:0c:24:aa:06:b2:b6:
         30:d2:dd:ad:6b:10:a0:a9:d0:da:f0:2c:c0:97:8a:41:33:ff:
         87:0e:45:d7:26:d9:06:df:68:25:50:10:a9:0b:5e:fe:bf:d3:
         74:34:c4:73:26:9a:55:04:87:08:c1:ca:eb:d6:54:32:74:6a:
         e8:69:8a:22:d2:37:29:96:6e:04:46:9b:3b:5d:56:14:1e:b7:
         cc:c5:e1:9a:48:17:1d:79:d3:9d:ac:48:b1:d1:7c:1d:01:10:
         9d:ab:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:11 2024 by rpki-client on console-ams.rpki-client.org