Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33322d3332203d3e20323639343233.roa (raw, json)
Hash identifier:          xGNYObocw5KpqILKyy5T69OA4yOeaSO/sGQON7tpz4Q=
Subject key identifier:   F9:B3:66:D4:34:7C:91:D8:B1:58:9E:ED:B9:B1:0C:09:5A:2C:E2:E2
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       1234FB48863FBE9461DAAC19BB0564A93F5E82A5
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:55 +0000
ROA not before:           Thu 02 May 2024 17:53:55 +0000
ROA not after:            Thu 01 May 2025 17:58:55 +0000
asID:                     269423
IP address blocks:        2804:645c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:34:fb:48:86:3f:be:94:61:da:ac:19:bb:05:64:a9:3f:5e:82:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:55 2024 GMT
            Not After : May  1 17:58:55 2025 GMT
        Subject: CN=F9B366D4347C91D8B1589EEDB9B10C095A2CE2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:ee:52:63:7e:44:94:4b:56:f6:f8:d5:a4:
                    84:1c:81:da:d6:6f:53:a9:46:0c:32:2b:36:be:c2:
                    25:63:c7:ac:cb:d4:96:70:0b:c1:b8:61:aa:9e:65:
                    bb:bb:0f:1a:62:eb:cf:4e:f1:21:bc:43:2f:26:e3:
                    df:22:26:be:33:2d:c3:b3:70:cb:05:84:db:0c:be:
                    2e:fa:fb:ea:94:7e:90:23:36:fd:47:f3:d0:70:92:
                    a9:47:4f:41:bb:65:48:d0:18:e5:c4:d7:86:39:52:
                    6f:6a:a1:7d:6f:89:38:4a:8a:7e:f6:e4:64:20:11:
                    e6:d4:78:2a:2a:5c:93:99:2b:5a:af:7c:de:b2:43:
                    2b:6e:65:19:7e:d4:6c:ac:db:bc:38:e4:6e:e7:d0:
                    36:32:96:99:ca:77:81:57:41:c8:87:26:a9:85:3a:
                    d0:ea:f1:23:c8:81:6d:98:50:e2:b0:bc:7b:d4:65:
                    1b:a4:44:1e:22:f1:ab:3a:d6:65:b3:e7:d9:1f:49:
                    ba:ec:2e:80:a9:53:f3:2b:ec:b5:93:3a:57:a4:8b:
                    ee:0b:c0:99:63:ad:35:06:29:47:02:b8:74:55:f9:
                    36:09:8c:28:29:8e:ec:3a:74:8e:90:c6:a4:55:1d:
                    bf:45:0f:9c:94:f6:4c:84:1d:21:14:99:38:50:ed:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:66:D4:34:7C:91:D8:B1:58:9E:ED:B9:B1:0C:09:5A:2C:E2:E2
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33322d3332203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:e8:79:27:ee:ce:2a:cf:45:68:e8:7f:38:f9:42:6f:c1:35:
         b9:98:8c:db:1a:81:c7:b2:bc:0a:a5:e2:d1:35:26:3f:47:63:
         c2:6f:4e:8a:6a:57:90:48:44:c2:1a:81:d9:dd:03:20:fa:e7:
         bc:2f:d6:25:bd:5a:b7:cf:06:a2:18:58:41:f6:2f:1b:9e:e9:
         31:9d:16:e7:18:c0:d9:81:ab:8f:5d:37:67:6b:44:85:69:17:
         b2:f9:a1:c3:ef:af:f0:36:a0:31:e9:15:6a:c7:99:dc:c3:42:
         12:83:13:0c:13:bf:ab:df:9b:3b:da:fa:74:9c:ce:33:ab:52:
         13:df:f0:42:c1:57:9f:1f:ae:1b:b1:6c:61:2b:3b:4b:5d:a1:
         65:90:d9:05:99:00:3f:5f:18:27:60:91:3d:3f:be:37:12:ea:
         0c:38:3a:6b:c6:60:e3:48:1c:78:e4:0f:3b:86:e6:91:65:d9:
         16:f0:6d:bc:06:a7:bd:30:93:c2:d0:38:13:ac:03:08:ae:cd:
         7f:13:e3:e4:5d:14:ec:ee:58:c0:db:39:5f:f6:60:70:8a:89:
         5d:43:74:4e:1b:b5:3b:77:9c:e2:b5:d0:a7:86:14:ef:7b:76:
         f9:91:d5:f4:1d:dc:86:21:63:7f:30:24:d2:4f:41:7f:2d:56:
         c6:8f:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org