Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a383030303a3a2f33342d3334203d3e20323734363633.roa
File:                     323830343a393163343a383030303a3a2f33342d3334203d3e20323734363633.roa (raw, json)
Hash identifier:          TidmkzBLpNbORMVkmyAgJ2qTuYwF4Y50nCrCMcXolic=
Subject key identifier:   89:1C:C1:63:C9:3B:AD:16:C6:71:B7:44:8B:9D:49:26:97:07:1E:06
Certificate issuer:       /CN=4DB58D6D5379E6850FB673874006B19E2ED30FE6
Certificate serial:       7DE77D843942E69ECD526492F2F25CA523AA1AB7
Authority key identifier: 4D:B5:8D:6D:53:79:E6:85:0F:B6:73:87:40:06:B1:9E:2E:D3:0F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a383030303a3a2f33342d3334203d3e20323734363633.roa
Signing time:             Fri 08 Nov 2024 16:19:49 +0000
ROA not before:           Fri 08 Nov 2024 16:14:49 +0000
ROA not after:            Fri 07 Nov 2025 16:19:49 +0000
asID:                     274663
IP address blocks:        2804:91c4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.crl
                          rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e7:7d:84:39:42:e6:9e:cd:52:64:92:f2:f2:5c:a5:23:aa:1a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DB58D6D5379E6850FB673874006B19E2ED30FE6
        Validity
            Not Before: Nov  8 16:14:49 2024 GMT
            Not After : Nov  7 16:19:49 2025 GMT
        Subject: CN=891CC163C93BAD16C671B7448B9D492697071E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:1d:6b:dd:9d:18:b9:a1:0c:4d:c6:92:3f:
                    85:46:8e:3b:91:ef:81:e7:94:80:c1:f6:29:a8:5f:
                    3d:0e:ff:1d:27:08:f2:fd:8c:3e:f4:59:97:f0:8e:
                    ad:31:fe:98:d9:8a:a7:5e:dd:c1:3e:f5:b0:96:53:
                    a5:cd:49:3c:21:1a:45:11:c1:bc:c3:f6:13:09:5f:
                    09:d2:a8:ef:76:35:3f:f3:19:0e:4f:dd:b5:d8:57:
                    ee:a2:77:9a:eb:cb:45:59:42:90:83:96:ba:6c:ff:
                    7f:f7:70:cc:56:00:d9:b4:c9:41:68:1c:1f:70:14:
                    8e:e6:7a:80:52:a2:8b:05:ee:ac:0f:ee:c7:61:bc:
                    6e:60:37:21:3b:02:37:ba:67:00:1d:55:df:f0:eb:
                    72:d7:c2:b2:0a:1e:a1:87:1e:3e:cb:a7:1c:14:60:
                    46:20:86:ca:4a:90:3f:21:96:29:70:96:6b:db:80:
                    ac:be:5a:f0:9d:28:cd:dd:76:67:73:7d:3a:b3:dd:
                    19:52:78:6c:e4:be:78:03:4f:e9:78:84:1c:02:6d:
                    85:7d:21:bd:5c:53:6d:31:15:87:b5:9c:50:75:c8:
                    f5:cd:86:ee:8b:f7:70:bb:a8:8b:e4:a5:d5:90:72:
                    60:36:20:12:16:a9:91:46:3c:e8:97:6e:8c:4d:51:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:C1:63:C9:3B:AD:16:C6:71:B7:44:8B:9D:49:26:97:07:1E:06
            X509v3 Authority Key Identifier:
                keyid:4D:B5:8D:6D:53:79:E6:85:0F:B6:73:87:40:06:B1:9E:2E:D3:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a383030303a3a2f33342d3334203d3e20323734363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:e3:e5:d1:50:d7:65:ab:dd:d8:bf:78:90:d8:7c:2f:61:
         26:90:ff:3e:48:62:b5:60:20:e1:0e:ed:d9:4d:af:ba:01:e1:
         74:66:c4:80:ef:e4:d0:ad:09:85:51:27:e8:91:70:67:89:84:
         2e:eb:08:57:bc:ea:6b:71:8f:04:0e:dc:4f:bc:ce:ca:4c:e6:
         0d:fe:a4:17:5b:fc:03:4a:86:0f:aa:c6:df:dd:c4:3c:cd:d0:
         04:c9:32:a8:fc:eb:90:24:1b:69:94:53:6d:5e:da:6a:b9:f5:
         bf:70:6e:93:13:2f:f7:4f:0d:cd:9a:b8:1b:54:1e:82:d5:40:
         2d:6c:64:7d:22:97:97:3d:4f:96:d6:3f:5f:9e:38:4b:01:ed:
         d0:76:15:fd:32:de:8e:72:11:be:d7:0a:dc:07:c9:6e:63:1a:
         fd:8f:30:6f:de:e9:2a:4c:c3:8b:03:10:99:50:e9:86:a1:a8:
         b0:16:6b:99:c4:f4:e6:23:ef:34:82:f2:ba:c5:c0:36:f9:6c:
         a3:1d:44:6a:71:a7:73:f9:96:79:8f:04:af:a8:97:ba:67:58:
         24:00:90:c7:64:a1:d7:41:4b:57:d0:b7:57:c1:f3:29:4b:33:
         7b:fc:71:cd:67:6a:3e:89:6f:5c:d6:c0:74:dd:35:c0:d3:f5:
         b4:c2:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:35 2024 by rpki-client on console-ams.rpki-client.org