Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
File:                     323830343a393138383a3a2f33322d3332203d3e20323734363437.roa (raw, json)
Hash identifier:          ot7Z3qNPZ+f8R2sX19P4veGewRsOLpkPjqO3AV6eUX0=
Subject key identifier:   4C:25:8D:C4:74:6C:AE:D3:24:C0:26:F9:3A:1D:AA:59:5A:30:FA:97
Certificate issuer:       /CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Certificate serial:       7EC77787AD5A700C53F37E3295F9B2BA0B512CD0
Authority key identifier: B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa
Signing time:             Thu 14 Nov 2024 16:56:24 +0000
ROA not before:           Thu 14 Nov 2024 16:51:24 +0000
ROA not after:            Thu 13 Nov 2025 16:56:24 +0000
asID:                     274647
IP address blocks:        2804:9188::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl
                          rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c7:77:87:ad:5a:70:0c:53:f3:7e:32:95:f9:b2:ba:0b:51:2c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
        Validity
            Not Before: Nov 14 16:51:24 2024 GMT
            Not After : Nov 13 16:56:24 2025 GMT
        Subject: CN=4C258DC4746CAED324C026F93A1DAA595A30FA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:91:fc:91:57:b6:4b:24:42:d2:d1:1e:ac:
                    e3:65:72:93:41:7c:74:02:7c:c2:88:d0:72:cc:21:
                    33:b3:5e:08:60:1e:03:46:de:07:93:e1:31:4c:3f:
                    8b:4d:0d:f8:cc:06:59:ac:2c:b1:fc:a4:b8:a4:24:
                    9a:71:e0:8d:33:68:75:b0:d6:db:c6:f3:18:2f:38:
                    86:ef:34:dc:b9:77:8f:73:35:71:22:3b:db:b9:70:
                    13:1d:8e:3e:01:60:ee:d9:50:ca:d0:1d:f5:a8:00:
                    11:e5:71:0f:5f:14:cc:c3:5a:94:d7:2e:e8:9f:b2:
                    25:bb:44:2f:d2:18:d2:30:39:4d:ae:71:89:cc:e5:
                    97:5f:40:9f:07:0d:d8:9b:db:12:84:13:7e:a6:54:
                    f9:cd:8e:8b:f2:ba:22:98:b3:a7:fd:c4:91:d4:6b:
                    ac:3e:49:c3:cd:82:9c:35:a5:f3:36:3b:1f:f4:65:
                    dd:55:33:56:69:a3:6a:84:10:43:55:81:78:e0:d0:
                    4c:9d:a3:2c:20:3e:ac:4c:d0:40:d4:92:32:f7:02:
                    98:b3:75:d3:dc:83:b2:14:bd:f7:87:37:0b:6c:d2:
                    e5:e0:80:f9:2b:c8:d0:e0:7d:91:01:5b:70:9c:e5:
                    90:5d:3c:18:b8:35:77:74:08:ba:27:f2:d6:7d:39:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:8D:C4:74:6C:AE:D3:24:C0:26:F9:3A:1D:AA:59:5A:30:FA:97
            X509v3 Authority Key Identifier:
                keyid:B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a3a2f33322d3332203d3e20323734363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9188::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:a1:1e:67:7d:bf:8f:bd:2e:5c:9c:ca:2c:a2:50:d3:94:
         09:2f:1a:ef:ae:49:36:3d:0d:49:0e:de:c1:50:df:0c:d7:b9:
         d2:9a:29:89:cb:1c:75:c8:50:4a:0c:9b:8b:70:8b:ce:34:af:
         fd:2f:80:f1:e5:1e:65:88:9d:8b:78:f3:f8:ef:4d:14:24:33:
         1e:42:bd:04:69:a7:67:6b:17:f1:20:7a:9e:8c:b1:6c:c4:57:
         8b:e8:bb:17:41:54:77:f5:60:35:70:fd:16:0a:88:74:e9:6e:
         3d:f6:4d:56:47:4d:42:8b:57:a0:e1:57:b2:66:af:ac:c9:9f:
         37:97:ce:38:68:93:aa:7d:58:8a:c3:cf:48:d8:eb:68:41:8e:
         25:90:3f:3e:40:a0:b8:22:07:10:cb:d9:4d:8d:ba:2d:25:cb:
         8e:7e:8f:60:c9:19:a9:26:19:8f:20:67:37:e6:02:c0:1c:11:
         62:85:7a:08:3e:ff:c9:e1:11:a3:db:a1:c2:16:7b:5b:2c:34:
         7c:04:4b:90:4e:bc:b0:15:ee:97:61:62:cf:49:b5:82:f4:2c:
         51:e3:4a:90:a3:ad:c4:d3:f0:85:01:81:ae:87:43:35:95:75:
         f3:e6:ea:cf:82:da:ec:55:e3:ea:e1:eb:6c:66:aa:db:4d:b8:
         16:7c:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:43 2024 by rpki-client on console-ams.rpki-client.org