Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
File:                     323830343a363435633a3a2f33332d3333203d3e20323639343233.roa (raw, json)
Hash identifier:          d4s0X102FWMyN2GKbojYcZkg7oAFNe7WG6t8I9WkaQQ=
Subject key identifier:   07:5D:DB:A4:F5:93:54:22:A8:3B:65:B1:44:AF:87:E7:56:49:D6:14
Certificate issuer:       /CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
Certificate serial:       46C9C60ED4906FB4BF9AB474425F8BAE63C459C1
Authority key identifier: F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa
Signing time:             Thu 02 May 2024 17:58:56 +0000
ROA not before:           Thu 02 May 2024 17:53:56 +0000
ROA not after:            Thu 01 May 2025 17:58:56 +0000
asID:                     269423
IP address blocks:        2804:645c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl
                          rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c9:c6:0e:d4:90:6f:b4:bf:9a:b4:74:42:5f:8b:ae:63:c4:59:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0
        Validity
            Not Before: May  2 17:53:56 2024 GMT
            Not After : May  1 17:58:56 2025 GMT
        Subject: CN=075DDBA4F5935422A83B65B144AF87E75649D614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:c0:32:fc:d3:af:41:f1:b9:80:4f:f7:06:
                    29:a0:55:a3:af:7e:2d:15:38:ad:bb:7f:d4:9a:ec:
                    fd:77:e1:ca:2d:86:a7:b6:12:46:05:f0:6d:01:18:
                    34:89:97:ba:2d:54:6f:d3:88:d3:38:8a:eb:9a:0a:
                    21:f4:cf:cc:f7:bd:d7:85:26:73:5c:90:ef:5b:4b:
                    cc:fe:36:3e:65:3e:fe:9c:3c:07:3d:ed:fe:fc:bf:
                    bd:67:95:26:9b:f9:f9:e9:54:5b:55:d5:e4:8a:18:
                    92:10:da:f9:1e:0c:26:6d:20:0f:59:2e:da:a2:ad:
                    cf:0d:ce:b0:dc:46:b9:9d:69:8f:61:ab:42:99:07:
                    2e:bc:68:0a:eb:b7:20:52:e1:f2:ff:2f:25:71:47:
                    9e:59:20:ab:a5:97:78:50:29:f9:db:43:c1:92:c4:
                    60:86:5a:eb:2f:c2:8a:52:d4:54:d0:44:c4:bb:e8:
                    a7:94:40:a4:1a:9a:89:25:16:0a:86:e9:09:a4:4d:
                    f0:8e:08:e7:2e:d6:fe:4d:d7:f9:63:7a:af:1e:8c:
                    f7:0b:96:3e:7f:b6:f6:2a:ca:b4:a0:35:ad:3f:90:
                    54:76:7f:5e:9b:d4:af:e5:be:aa:5e:ad:10:f2:58:
                    14:7f:b5:0b:16:5f:53:92:57:54:37:4c:db:32:0d:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5D:DB:A4:F5:93:54:22:A8:3B:65:B1:44:AF:87:E7:56:49:D6:14
            X509v3 Authority Key Identifier:
                keyid:F0:E2:45:D2:CA:D0:9D:3E:65:9F:55:20:93:C7:FF:CB:E1:D2:5D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0E245D2CAD09D3E659F552093C7FFCBE1D25DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxLJuAoqpynb3Z1LSbgrfzZZwfYSyKokPfs3L6BzszAj/0/323830343a363435633a3a2f33332d3333203d3e20323639343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:645c::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:15:d3:be:e2:ea:56:59:c0:29:f3:42:21:95:b7:96:66:fb:
         cd:b4:ea:40:c4:a7:9d:5a:54:6c:71:83:db:15:26:cc:be:f1:
         eb:81:ce:d4:f5:b5:5f:22:3c:93:b4:bc:b7:f5:87:83:b7:2e:
         fa:11:d1:d0:12:ad:c3:e0:09:98:3f:e6:7f:9d:71:41:1b:21:
         b2:93:5e:94:f4:ae:05:5e:8e:c1:b2:ba:45:d3:85:a1:bc:42:
         7e:fb:65:c7:df:40:a9:38:91:f8:97:3f:59:91:ba:fc:30:75:
         87:1b:48:32:e3:da:b1:56:ea:a1:4c:1a:94:0b:5a:1c:91:50:
         11:3c:41:34:74:0f:15:fb:13:62:f5:7f:3c:de:ca:ae:2f:0e:
         09:d1:e7:4f:ee:07:71:3a:2b:8f:13:7b:5b:7a:00:70:02:77:
         bc:ba:27:2e:90:10:34:37:70:08:07:3c:a6:5a:02:77:30:2e:
         0c:f4:fb:5d:0e:2c:74:79:d0:6b:79:12:1c:90:57:bb:f8:64:
         6e:88:b6:86:17:da:9e:ec:db:64:f2:1a:b1:53:39:0a:c7:b0:
         ce:cd:5a:39:a7:92:74:50:8a:9c:1d:44:2c:3d:94:0a:41:c6:
         06:ca:19:35:d0:c5:b7:c1:95:5d:3b:d9:65:f7:86:c1:ed:dc:
         1d:02:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:32 2024 by rpki-client on console-ams.rpki-client.org