Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33342d3334203d3e20323734363633.roa
File:                     323830343a393163343a3a2f33342d3334203d3e20323734363633.roa (raw, json)
Hash identifier:          9VVqEpzGdTfypFJ05vJKGqSsybVjtc6kt5jtaOb/Hgk=
Subject key identifier:   AC:4A:5C:9B:04:24:03:D5:D2:42:A6:67:91:AA:CC:8B:F7:09:4E:12
Certificate issuer:       /CN=4DB58D6D5379E6850FB673874006B19E2ED30FE6
Certificate serial:       139ED553D5EA25C8C8AAB19A301592A092A5715C
Authority key identifier: 4D:B5:8D:6D:53:79:E6:85:0F:B6:73:87:40:06:B1:9E:2E:D3:0F:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33342d3334203d3e20323734363633.roa
Signing time:             Fri 08 Nov 2024 16:19:49 +0000
ROA not before:           Fri 08 Nov 2024 16:14:49 +0000
ROA not after:            Fri 07 Nov 2025 16:19:49 +0000
asID:                     274663
IP address blocks:        2804:91c4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.crl
                          rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9e:d5:53:d5:ea:25:c8:c8:aa:b1:9a:30:15:92:a0:92:a5:71:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DB58D6D5379E6850FB673874006B19E2ED30FE6
        Validity
            Not Before: Nov  8 16:14:49 2024 GMT
            Not After : Nov  7 16:19:49 2025 GMT
        Subject: CN=AC4A5C9B042403D5D242A66791AACC8BF7094E12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:57:38:f0:ba:7a:ed:1e:30:6d:fe:f8:43:
                    f3:3f:8c:88:8f:b1:f3:be:7e:6b:bb:4c:0c:e6:b2:
                    f7:ef:92:f0:6e:e0:a1:67:a2:18:77:83:90:0a:75:
                    b0:22:a4:3e:40:22:e2:4d:47:02:66:6e:ed:d9:84:
                    95:fe:0d:f8:9c:a6:45:2a:bd:98:ce:9d:1e:bc:d4:
                    f3:13:86:c1:bb:f3:61:bc:f1:e8:51:7d:97:cd:49:
                    9b:a8:41:2d:92:1b:28:15:ef:07:11:25:7a:34:b5:
                    2a:16:02:77:7b:74:fc:41:d1:83:32:1f:5f:41:80:
                    a0:19:3c:16:b9:65:ae:62:6c:80:af:88:cb:06:78:
                    24:fa:e2:ad:36:43:d9:81:0b:fd:80:3a:33:5b:10:
                    f8:c3:55:0a:c5:99:39:0a:81:4b:ad:27:01:6d:b3:
                    64:84:ea:c4:00:2e:fd:d0:7a:8f:f0:5f:b4:36:2f:
                    39:71:ac:ca:55:b7:47:fc:97:fd:31:05:c0:89:f1:
                    a1:ce:5c:75:16:7e:07:cd:49:a5:b5:8d:20:27:04:
                    77:ce:ab:5d:4a:7a:89:de:26:63:9a:9d:7e:9d:02:
                    f8:95:bc:ab:20:49:5c:f8:92:71:d4:66:c7:9a:88:
                    7a:84:c1:a2:59:4d:48:29:dc:18:13:a9:7a:89:ff:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:5C:9B:04:24:03:D5:D2:42:A6:67:91:AA:CC:8B:F7:09:4E:12
            X509v3 Authority Key Identifier:
                keyid:4D:B5:8D:6D:53:79:E6:85:0F:B6:73:87:40:06:B1:9E:2E:D3:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/4DB58D6D5379E6850FB673874006B19E2ED30FE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DB58D6D5379E6850FB673874006B19E2ED30FE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X8XGChRSNLLgkwybJbu8B93EwWFYUoGPBdmKbykEmbd/0/323830343a393163343a3a2f33342d3334203d3e20323734363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:91c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:f4:b7:2a:1c:b9:a0:42:e5:d9:2d:02:2e:c7:42:0f:47:
         a9:5c:b9:61:a7:3c:b6:59:70:a5:0e:0d:56:f4:29:76:df:db:
         bc:5a:7c:83:f1:58:7f:32:f1:fe:1b:5e:2b:e1:22:a4:a4:49:
         85:1e:99:f3:73:de:d2:ed:33:8d:03:d8:11:6c:77:75:91:d8:
         b8:32:ad:03:83:be:7d:05:77:c1:0f:5a:00:11:0b:9a:33:9f:
         61:a6:95:4a:ca:f6:25:57:a1:38:5f:6a:6a:18:3f:20:84:5a:
         ad:97:be:68:09:68:21:3d:a8:8b:74:74:4d:69:a0:08:a5:6d:
         b8:49:5c:49:f4:1e:f0:83:de:4c:b1:ad:1a:0e:9a:ad:68:99:
         ee:21:8b:31:87:d6:fc:50:bf:84:aa:01:be:f7:de:de:c5:ea:
         8b:b0:d7:77:82:68:1c:b3:4b:d0:da:bc:a2:85:86:b4:dc:1c:
         bd:9b:9e:73:b7:0e:0e:9a:6f:ab:11:58:e9:09:1d:01:00:2f:
         af:6d:ee:80:eb:4d:3d:08:eb:1d:f9:24:87:82:b3:22:7f:37:
         b0:5d:7f:4d:f9:a7:1c:7b:c5:6d:ce:39:6c:50:64:9f:86:f7:
         f2:bb:88:14:5a:12:6d:d6:79:07:99:97:f9:07:6c:15:a1:8a:
         45:49:76:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:35 2024 by rpki-client on console-ams.rpki-client.org