Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/323830343a336238303a3a2f33322d313238203d3e20323636313533.roa
File:                     323830343a336238303a3a2f33322d313238203d3e20323636313533.roa (raw, json)
Hash identifier:          u777v63DMa0+pMabj+jB74ZkKy1K+7kXCfBJg+hy++I=
Subject key identifier:   D9:39:C2:84:75:19:5E:C4:D2:B0:60:DF:09:22:6E:6A:E7:1F:5A:78
Certificate issuer:       /CN=48F2B2A91F796982ADA6E093AE2391942ED8774B
Certificate serial:       6A23F1D2E1BD83512D9C890E71FFD8C754A5F8BC
Authority key identifier: 48:F2:B2:A9:1F:79:69:82:AD:A6:E0:93:AE:23:91:94:2E:D8:77:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48F2B2A91F796982ADA6E093AE2391942ED8774B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/323830343a336238303a3a2f33322d313238203d3e20323636313533.roa
Signing time:             Mon 16 Sep 2024 02:25:23 +0000
ROA not before:           Mon 16 Sep 2024 02:20:23 +0000
ROA not after:            Mon 15 Sep 2025 02:25:23 +0000
asID:                     266153
IP address blocks:        2804:3b80::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/48F2B2A91F796982ADA6E093AE2391942ED8774B.crl
                          rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/48F2B2A91F796982ADA6E093AE2391942ED8774B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48F2B2A91F796982ADA6E093AE2391942ED8774B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:23:f1:d2:e1:bd:83:51:2d:9c:89:0e:71:ff:d8:c7:54:a5:f8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48F2B2A91F796982ADA6E093AE2391942ED8774B
        Validity
            Not Before: Sep 16 02:20:23 2024 GMT
            Not After : Sep 15 02:25:23 2025 GMT
        Subject: CN=D939C28475195EC4D2B060DF09226E6AE71F5A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:9f:7f:8a:53:f4:35:76:e5:25:f6:b5:90:
                    95:e1:1e:21:11:af:d1:29:f7:11:6c:27:12:e6:17:
                    d5:76:d5:a7:dd:9f:be:b1:e4:23:b4:c9:0e:47:01:
                    fb:03:a3:08:2c:5a:05:cf:9f:73:e1:ee:b8:a8:d6:
                    7b:98:cb:83:ca:b3:2e:15:0c:fa:e5:2d:6a:7f:14:
                    b9:f1:f1:14:90:81:d9:3c:b3:a2:04:a6:0f:e9:cd:
                    d9:b4:cd:f2:63:b0:f4:6c:1c:23:e1:cb:f6:63:5e:
                    8f:dc:e1:e0:14:d5:e4:3f:94:92:c7:09:30:ea:ae:
                    a2:f8:8b:be:e9:45:46:8d:36:b2:9c:bc:b8:db:fa:
                    ff:fc:fe:40:40:d8:29:31:a1:ee:48:4a:e2:40:9d:
                    5e:a6:99:37:ab:70:20:6a:0c:a5:80:11:c7:b0:f5:
                    15:80:ca:12:d1:72:22:ca:fe:ac:5a:68:af:17:87:
                    9c:a4:75:b4:1e:91:8f:66:8a:fb:89:46:72:54:b5:
                    8a:74:b1:d6:fd:8f:59:4c:87:8d:7a:02:01:23:e3:
                    f9:de:e8:30:44:83:94:b8:59:0b:75:62:2a:cc:d5:
                    7c:9e:00:d8:27:cb:6b:32:b3:c2:c3:ac:77:48:0d:
                    81:30:8d:63:a2:a7:0b:e9:54:b6:f9:7c:16:1a:20:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:39:C2:84:75:19:5E:C4:D2:B0:60:DF:09:22:6E:6A:E7:1F:5A:78
            X509v3 Authority Key Identifier:
                keyid:48:F2:B2:A9:1F:79:69:82:AD:A6:E0:93:AE:23:91:94:2E:D8:77:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/48F2B2A91F796982ADA6E093AE2391942ED8774B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48F2B2A91F796982ADA6E093AE2391942ED8774B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hamm3Je2crZq1P9nqwQ5YN8V228g1xEHMt23dHR3Y4a/0/323830343a336238303a3a2f33322d313238203d3e20323636313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:93:0e:91:cf:85:09:8d:bd:44:46:81:b8:0e:a4:c5:b2:1c:
         df:3b:aa:d8:d0:51:91:80:35:b9:83:07:a0:8f:18:4d:28:eb:
         b5:8e:bd:4a:7a:c3:65:18:f5:ac:2e:dd:1e:63:2a:d0:1c:16:
         d7:7c:f3:70:f5:b0:d0:53:bc:bf:09:ba:f8:05:27:93:a3:2e:
         78:70:de:ae:4b:7a:89:28:63:be:7c:54:4b:64:12:54:29:4a:
         41:5e:fe:78:85:e1:9c:33:96:bd:5f:de:b9:1b:b6:24:9f:1b:
         93:62:6e:89:b8:e9:a1:07:c8:b5:4f:d1:ef:e5:86:96:a4:a4:
         d2:4b:a4:9f:d2:e0:2d:2b:73:82:ca:ae:5b:75:2b:a1:ed:28:
         29:69:a6:34:76:ed:f5:3a:2a:42:34:cd:92:41:4b:3a:96:d5:
         c2:c9:50:53:68:c6:07:4a:8a:1c:bc:04:1a:5e:99:1f:16:85:
         e8:cf:7e:83:ee:7f:d4:33:ff:b5:5e:db:b7:1f:82:e7:14:b1:
         ec:21:85:f0:89:05:eb:ca:58:20:15:f4:d8:c1:4b:bb:3d:e3:
         b1:5f:b4:a6:40:4c:f2:6c:a4:7a:f5:cb:15:75:43:37:23:86:
         95:e7:aa:a8:09:2a:da:12:14:52:6a:5e:b4:1d:cd:77:1a:49:
         5c:b1:52:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:16 2024 by rpki-client on console-fra.rpki-client.org