Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa
File:                     323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa (raw, json)
Hash identifier:          1VRrn2iOno+zuXW45Okci19Vc/Osjszi3E1Jne/26+Q=
Subject key identifier:   CE:61:D9:A5:B6:7A:69:3A:75:A6:C0:0B:23:05:6F:43:43:86:3F:A4
Certificate issuer:       /CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Certificate serial:       4896235CEE28215E6D0F4185DB09CACA745CB909
Authority key identifier: B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa
Signing time:             Thu 14 Nov 2024 16:58:07 +0000
ROA not before:           Thu 14 Nov 2024 16:53:07 +0000
ROA not after:            Thu 13 Nov 2025 16:58:07 +0000
asID:                     274647
IP address blocks:        2804:9188:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:96:23:5c:ee:28:21:5e:6d:0f:41:85:db:09:ca:ca:74:5c:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
        Validity
            Not Before: Nov 14 16:53:07 2024 GMT
            Not After : Nov 13 16:58:07 2025 GMT
        Subject: CN=CE61D9A5B67A693A75A6C00B23056F4343863FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:4a:06:c8:d9:ed:06:59:a5:2d:45:1f:ae:
                    de:86:02:14:8d:47:5d:96:66:f6:50:1a:9b:3a:64:
                    b4:e8:5e:b5:fa:fd:24:a7:d9:40:09:80:e2:8b:41:
                    ef:b1:ad:88:06:83:c0:c3:d9:ba:8f:d0:a8:d4:9c:
                    90:a1:94:61:c9:48:7a:43:2d:3e:ce:23:2a:4a:f7:
                    e6:ba:0e:25:f9:d7:a8:31:77:f6:ce:9a:86:56:92:
                    81:38:8b:14:11:51:2a:97:cf:56:ba:16:48:f9:2a:
                    0f:db:ed:59:74:92:9e:f0:7d:40:ba:fa:8b:e5:e0:
                    40:c1:a3:b6:ea:c3:34:fa:3b:05:0c:e2:f3:6a:aa:
                    ce:eb:a5:67:8b:28:30:6b:34:77:13:ab:8e:a1:6d:
                    e6:3b:99:de:a9:54:50:29:27:be:c0:1e:8c:de:70:
                    ee:c3:d3:47:ac:55:0c:db:98:87:f8:7e:62:e5:5e:
                    b5:f6:8a:9e:8c:0e:93:2b:1f:91:1d:3e:ad:e0:0f:
                    49:7b:4c:d1:e3:5e:f5:ca:58:84:5b:0c:7f:38:d2:
                    da:85:d6:89:0a:0f:67:b7:98:eb:b1:44:37:5b:f2:
                    0f:a1:82:dd:66:db:7d:80:fa:36:48:4f:d3:2a:17:
                    52:f4:25:5d:4d:d4:ac:57:39:ef:b3:2a:e2:57:90:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:D9:A5:B6:7A:69:3A:75:A6:C0:0B:23:05:6F:43:43:86:3F:A4
            X509v3 Authority Key Identifier:
                keyid:B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2a:88:14:b7:50:83:ac:80:0f:91:42:ab:75:55:24:4b:3e:9a:
         79:69:fb:66:8a:5f:31:fe:cc:b0:ff:c0:9c:c9:f5:ad:4e:df:
         c7:e2:42:c8:00:6b:ad:e5:f7:79:48:a3:a8:8d:09:2a:d0:4e:
         e6:40:16:03:10:db:60:d1:ad:c9:9a:f9:b6:39:81:b4:9e:18:
         59:6e:0b:2e:64:20:56:c6:95:bc:43:9d:5b:46:bd:eb:7d:f3:
         19:4b:9f:8a:ab:ec:22:5c:d3:97:61:14:b0:78:88:3c:90:52:
         a6:e1:de:aa:6a:3a:44:42:30:7c:e4:33:6a:f2:30:2e:2d:f9:
         53:49:a3:ba:4d:e1:7e:42:2e:96:d5:3e:74:68:34:37:25:57:
         a9:08:cc:6a:0a:8f:0e:d6:84:69:bf:9b:27:4a:fc:7d:1d:97:
         90:e2:f9:25:7d:9f:08:6e:c2:2b:78:1f:bd:de:84:6c:4c:9a:
         e6:a2:8c:dd:28:9b:8b:7e:04:94:ed:b7:ff:93:2a:00:30:ae:
         02:67:33:7f:11:11:e5:27:4e:03:bd:19:39:b6:df:5e:f5:9b:
         7f:be:a6:a3:13:84:26:60:45:2d:7e:db:71:08:59:34:a7:bb:
         a9:85:72:93:64:ba:fd:da:53:a7:59:f6:b0:e9:ce:ba:94:71:
         b3:bb:29:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUSJYjXO4oIV5tD0GF2wnKynRcuQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ3RTQ3NUY0MzM3NDQ0MDRGOTBDQ0RGODVGRDVDMEY2
MTI4MUZENTAeFw0yNDExMTQxNjUzMDdaFw0yNTExMTMxNjU4MDdaMDMxMTAvBgNV
BAMTKENFNjFEOUE1QjY3QTY5M0E3NUE2QzAwQjIzMDU2RjQzNDM4NjNGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwD0oGyNntBlmlLUUfrt6GAhSN
R12WZvZQGps6ZLToXrX6/SSn2UAJgOKLQe+xrYgGg8DD2bqP0KjUnJChlGHJSHpD
LT7OIypK9+a6DiX516gxd/bOmoZWkoE4ixQRUSqXz1a6Fkj5Kg/b7Vl0kp7wfUC6
+ovl4EDBo7bqwzT6OwUM4vNqqs7rpWeLKDBrNHcTq46hbeY7md6pVFApJ77AHoze
cO7D00esVQzbmIf4fmLlXrX2ip6MDpMrH5EdPq3gD0l7TNHjXvXKWIRbDH840tqF
1okKD2e3mOuxRDdb8g+hgt1m232A+jZIT9MqF1L0JV1N1KxXOe+zKuJXkPtPAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUzmHZpbZ6aTp1psALIwVvQ0OGP6QwHwYDVR0j
BBgwFoAUtH5HX0M3REBPkMzfhf1cD2EoH9UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENHTXJESjViRkFZVEw2bk1rVHREYzFKdmZnd3l0WmN3ck1SbjFrclJ6
akcvMC9CNDdFNDc1RjQzMzc0NDQwNEY5MENDREY4NUZENUMwRjYxMjgxRkQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0N0U0NzVGNDMzNzQ0NDA0
RjkwQ0NERjg1RkQ1QzBGNjEyODFGRDUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDR01yREo1YkZBWVRMNm5Na1R0RGMxSnZmZ3d5dFpjd3JNUm4xa3JSempHLzAv
MzIzODMwMzQzYTM5MzEzODM4M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzczNDM2MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEkYiAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqiBS3UIOsgA+RQqt1VSRLPpp5aftmil8x/syw/8CcyfWtTt/H4kLIAGut
5fd5SKOojQkq0E7mQBYDENtg0a3Jmvm2OYG0nhhZbgsuZCBWxpW8Q51bRr3rffMZ
S5+Kq+wiXNOXYRSweIg8kFKm4d6qajpEQjB85DNq8jAuLflTSaO6TeF+Qi6W1T50
aDQ3JVepCMxqCo8O1oRpv5snSvx9HZeQ4vklfZ8IbsIreB+93oRsTJrmoozdKJuL
fgSU7bf/kyoAMK4CZzN/ERHlJ04DvRk5tt9e9Zt/vqajE4QmYEUtfttxCFk0p7up
hXKTZLr92lOnWfaw6c66lHGzuyk/
-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:15 2024 by rpki-client on console-fra.rpki-client.org