Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
File:                     323830343a3262383a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier:          dO4yOv/MIU0InHRkp5Vuwric3RjJ5YYjmCevNzo1pNM=
Subject key identifier:   07:1B:15:CA:04:5A:9E:78:D3:80:06:33:A8:E0:08:43:BC:11:E3:B3
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       6A11002FC227958DE003EC133E062173222B8690
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
Signing time:             Thu 04 Apr 2024 07:32:49 +0000
ROA not before:           Thu 04 Apr 2024 07:27:49 +0000
ROA not after:            Thu 03 Apr 2025 07:32:49 +0000
asID:                     28130
IP address blocks:        2804:2b8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:11:00:2f:c2:27:95:8d:e0:03:ec:13:3e:06:21:73:22:2b:86:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Apr  4 07:27:49 2024 GMT
            Not After : Apr  3 07:32:49 2025 GMT
        Subject: CN=071B15CA045A9E78D3800633A8E00843BC11E3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:41:fb:65:35:69:ad:cc:db:8f:bd:32:84:d9:
                    23:98:01:7c:6c:5c:4a:8d:04:d8:a5:3b:ff:e7:25:
                    cb:91:8b:e8:93:9d:af:75:cc:bd:33:eb:fc:c7:08:
                    61:e4:b5:9d:7c:24:82:50:7d:4f:4a:7a:2a:87:00:
                    b3:a0:11:75:5b:fd:9b:57:1f:24:85:b0:42:bb:44:
                    46:3b:ab:89:ef:04:3d:94:62:6f:23:63:47:1b:d2:
                    f8:55:af:b7:4e:8a:db:a0:69:1e:d2:b0:af:83:7b:
                    e1:b4:59:ad:ff:8d:fc:9f:a4:33:a3:eb:76:e0:f4:
                    e5:39:8a:ad:77:5a:c0:38:3e:b1:2e:c3:c2:18:aa:
                    77:34:fc:4c:a7:6b:bd:c1:e8:75:68:ac:9e:7f:d5:
                    50:a9:ac:6b:5a:64:49:85:ef:a9:28:22:02:0b:09:
                    f0:21:03:58:09:c5:53:fd:b0:8d:69:1c:cf:3d:8b:
                    6e:89:c4:65:5a:66:98:d1:23:87:d7:37:eb:17:b3:
                    46:91:34:94:c4:4b:df:b7:21:4f:a0:be:87:97:da:
                    71:a0:2b:4b:ed:22:a9:1b:7c:7a:14:38:2d:9d:17:
                    98:b1:67:a8:09:e0:f4:98:09:73:68:af:c2:19:93:
                    8c:2f:bd:1d:85:f5:51:54:3a:37:e1:4b:6c:d8:5a:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1B:15:CA:04:5A:9E:78:D3:80:06:33:A8:E0:08:43:BC:11:E3:B3
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:f0:46:62:90:9e:e0:d1:99:5e:20:95:d5:b0:0d:72:b7:
         3a:f6:71:1c:5a:b3:a9:23:14:5b:7a:23:8e:19:76:3d:e9:9d:
         bf:7f:d5:0c:11:fe:ee:44:c4:42:99:0f:c5:5d:6c:91:90:bc:
         30:ca:cd:6e:20:3e:5f:87:e5:4f:16:4a:5c:d2:bc:30:c3:6e:
         7b:34:84:8b:1c:ab:a3:2f:9a:dc:79:c6:dd:99:d6:ca:10:bf:
         5a:98:10:00:5c:94:dd:37:4d:7a:48:ce:0b:58:8e:cd:7d:a6:
         57:43:b8:6f:58:df:b7:ed:76:ed:03:e0:85:a8:2d:7f:d7:90:
         67:4a:d1:91:d6:76:c0:b7:98:50:a6:8d:f2:9f:10:5a:5f:d0:
         8c:24:b4:21:8d:2a:0a:c2:f7:d9:02:79:fa:b0:7b:dd:2e:46:
         de:d8:3a:13:f7:65:12:8c:57:20:1a:39:e8:c0:b2:d0:79:29:
         7b:c7:9a:a5:6c:31:d2:81:71:8e:60:60:70:96:3a:f1:50:61:
         a2:85:fc:22:31:03:96:32:85:c6:2e:c9:43:ac:33:1b:b6:8a:
         61:f2:25:15:44:c8:a0:2f:8c:22:ae:3d:99:03:ad:c3:77:f4:
         f2:0e:4b:df:93:7c:2e:a5:4d:34:f6:9b:70:2b:70:08:23:e5:
         59:d5:41:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:59 2024 by rpki-client on console-fra.rpki-client.org