Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
File:                     323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier:          YSCfowzW3KMoe95OlyYYdP+DomVVjKMOTIlEA3npwJY=
Subject key identifier:   3E:E7:46:E7:F6:E6:18:59:8E:23:51:E8:C2:3D:69:38:52:9F:3F:E4
Certificate issuer:       /CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Certificate serial:       1E78FEB2523DF5E86D8D07BD43BC6CAB3F5B3061
Authority key identifier: B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa
Signing time:             Thu 14 Nov 2024 16:57:52 +0000
ROA not before:           Thu 14 Nov 2024 16:52:52 +0000
ROA not after:            Thu 13 Nov 2025 16:57:52 +0000
asID:                     274647
IP address blocks:        2804:9188:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:78:fe:b2:52:3d:f5:e8:6d:8d:07:bd:43:bc:6c:ab:3f:5b:30:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
        Validity
            Not Before: Nov 14 16:52:52 2024 GMT
            Not After : Nov 13 16:57:52 2025 GMT
        Subject: CN=3EE746E7F6E618598E2351E8C23D6938529F3FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:85:40:2b:d7:1d:e2:33:4c:45:81:1e:bb:
                    e9:bd:97:8a:cb:6c:ae:a9:be:76:08:3c:15:16:c6:
                    6c:49:3a:cb:ab:df:5d:e6:35:d7:3a:07:a7:7d:d9:
                    62:71:cb:f1:d9:bd:53:e1:65:13:df:83:59:6f:52:
                    5e:5f:ae:7a:7e:72:1c:01:91:5e:da:6f:42:08:eb:
                    6c:53:f5:1c:ca:b9:31:5e:01:c5:9d:c4:d0:0a:52:
                    df:20:86:15:ea:d6:e1:29:27:89:12:1a:fa:b8:52:
                    2f:cb:93:83:dc:d7:d6:28:03:9a:da:04:96:3c:a3:
                    08:9d:93:2f:2b:41:bf:54:94:59:ea:33:b9:82:70:
                    6a:95:e3:d6:ab:5e:f0:ae:54:80:1d:84:67:3c:3c:
                    51:8c:28:4d:e8:6b:bc:5a:c6:0b:51:77:1d:df:3c:
                    0d:e3:b6:97:47:1d:5b:b9:bb:8f:94:3d:5e:ff:e8:
                    23:e9:29:ef:71:0b:77:a5:de:73:bd:35:e0:3a:c9:
                    05:4b:c5:f1:74:4e:87:95:56:57:6f:c8:58:ad:9d:
                    e1:e5:bc:af:f2:0a:98:a2:28:5f:21:58:2e:c5:9a:
                    f0:8a:9a:84:8c:69:15:fe:dd:38:5d:ce:fd:62:61:
                    8c:ba:c2:e0:fd:bf:eb:11:54:79:5c:0a:cc:47:f6:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:46:E7:F6:E6:18:59:8E:23:51:E8:C2:3D:69:38:52:9F:3F:E4
            X509v3 Authority Key Identifier:
                keyid:B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33342d3334203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:d7:e6:af:30:87:84:b2:68:a8:de:80:04:3a:9d:d7:38:
         b7:fc:6a:56:80:26:2e:85:66:7d:ee:08:f3:d5:ba:fd:f4:d4:
         c7:39:cf:63:dd:30:14:b5:84:0c:73:6b:2f:66:99:77:06:af:
         f5:e3:38:0a:eb:d6:37:15:aa:a1:bb:30:58:19:1f:e6:27:65:
         e2:9e:ab:f4:71:f7:b1:5c:fd:68:8d:2d:b2:8f:7a:1d:7a:21:
         e6:91:64:32:12:32:62:6b:e5:41:03:cd:12:b6:ed:e7:41:e0:
         a0:ea:1f:be:41:68:24:4d:d1:3f:f6:57:88:94:6f:a7:f5:01:
         80:0f:d9:4b:de:b7:b5:89:97:fd:5c:53:a8:9d:d9:df:cf:a3:
         08:08:02:8c:7c:4a:60:05:47:4a:a8:77:07:10:32:81:52:ab:
         ed:57:c7:f0:c4:b6:93:fd:7a:f7:e4:ae:a7:9e:a4:8a:3c:15:
         f8:88:52:d0:c9:fa:fd:51:d4:a1:75:00:03:71:31:98:8e:a6:
         40:f9:c0:d6:d7:ee:b2:aa:10:ba:94:39:e8:bf:94:cc:22:63:
         ec:48:12:20:91:6d:13:13:5e:e7:3b:85:db:e1:f5:0b:65:fb:
         87:4b:06:92:05:3f:61:c7:7f:8f:03:6d:fb:9b:c4:fd:33:d6:
         2e:91:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:43 2024 by rpki-client on console-ams.rpki-client.org