Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          Q5MeIWmyB03XwAkdD/k9i2PYLFFj8uaarFymN86cf0w=
Subject key identifier:   35:9A:17:0D:0F:43:3E:1A:CE:F0:7E:12:B2:BE:02:17:C7:1B:2B:CE
Certificate issuer:       /CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Certificate serial:       60838989C6EF56F06B9150A1688F729F5AFAF3BA
Authority key identifier: B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 14 Nov 2024 16:57:36 +0000
ROA not before:           Thu 14 Nov 2024 16:52:36 +0000
ROA not after:            Thu 13 Nov 2025 16:57:36 +0000
asID:                     274647
IP address blocks:        2804:9188:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:83:89:89:c6:ef:56:f0:6b:91:50:a1:68:8f:72:9f:5a:fa:f3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
        Validity
            Not Before: Nov 14 16:52:36 2024 GMT
            Not After : Nov 13 16:57:36 2025 GMT
        Subject: CN=359A170D0F433E1ACEF07E12B2BE0217C71B2BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a1:13:d6:c9:12:a5:97:36:5c:6c:7f:bc:fa:
                    bf:5d:9b:9c:78:08:af:62:ea:f7:e8:eb:5c:1d:26:
                    68:6d:3b:02:38:ad:3d:8f:9f:0b:a5:cc:e2:5f:57:
                    3d:fd:e6:c3:69:e2:91:86:f6:62:98:df:ef:62:f5:
                    fa:77:be:a1:dc:52:16:c8:0c:e9:1d:ed:66:17:18:
                    37:45:a5:22:ac:bf:a6:9c:df:2c:8c:fd:5d:03:cb:
                    28:ed:e9:64:b7:ba:7f:51:2b:b8:f7:1a:98:81:c5:
                    0a:10:16:23:7d:98:b1:9f:0c:66:95:ab:88:5b:be:
                    47:aa:18:75:3d:28:d4:ec:52:45:ca:3d:25:62:aa:
                    f0:90:77:2a:0d:14:e5:58:65:32:da:e4:7c:ca:51:
                    0f:94:74:d7:27:75:e8:85:1a:5f:96:bc:31:ee:8f:
                    55:92:b7:f1:39:e7:4c:28:0f:e5:e9:40:51:42:6c:
                    75:1c:0a:4e:2b:78:4f:7c:98:92:bb:65:ed:3a:cd:
                    68:a8:8f:13:37:87:cf:e1:26:cb:78:4b:17:6d:b2:
                    70:3a:95:aa:bf:d2:9e:75:45:40:40:bc:d5:e6:38:
                    88:80:ae:1b:b1:fc:a0:ba:92:0d:88:92:b1:c5:60:
                    8c:dd:24:88:33:02:7f:5a:58:39:bf:48:97:ee:5a:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9A:17:0D:0F:43:3E:1A:CE:F0:7E:12:B2:BE:02:17:C7:1B:2B:CE
            X509v3 Authority Key Identifier:
                keyid:B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a343030303a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:52:98:10:f3:f6:52:2d:86:10:26:de:8d:67:cd:70:bb:91:
         f2:a4:9f:3f:e1:5f:79:52:08:f6:7e:8d:b7:5b:ee:7b:70:8a:
         c3:4b:7a:c0:0b:1b:64:90:df:c4:b6:6d:b5:b5:70:e9:e0:02:
         6b:4d:4d:ac:e4:a9:90:d4:cd:25:e8:75:d0:e9:0b:b3:d8:60:
         8d:20:b5:e5:d6:de:e0:cd:7e:4f:ac:88:4e:5e:1c:9d:e7:15:
         a1:21:bd:8a:3b:41:f0:90:cc:b6:cf:3b:b3:1f:cb:bf:ad:96:
         a4:df:a2:c5:bb:3b:7e:37:6c:aa:c4:2d:b9:3f:a0:79:aa:d7:
         d9:d9:4c:2c:0a:36:0a:99:2f:1b:c5:11:33:ad:1b:33:55:f9:
         5c:d5:f4:f5:51:bd:f1:3e:4e:17:9e:03:0c:48:27:98:84:3f:
         c9:c2:06:57:4e:13:87:da:e1:3e:6b:45:30:9b:98:fc:9a:1c:
         cd:e1:ce:af:95:9c:22:b1:d2:a0:ee:c4:c0:3b:7b:85:d4:f6:
         8d:db:53:17:c0:df:ae:8f:ec:55:e0:25:ca:f0:b5:f1:95:89:
         5b:ee:59:58:65:e7:fe:9d:8e:15:9a:49:40:53:72:c9:07:6e:
         d8:61:c1:81:74:ff:4b:b1:aa:06:63:3e:07:9e:33:20:93:8b:
         07:cc:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org