Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/323830343a383037343a3a2f33352d3335203d3e20323731373531.roa
File:                     323830343a383037343a3a2f33352d3335203d3e20323731373531.roa (raw, json)
Hash identifier:          CdP3tshGoaMZ4evVosfiACDB4FzsOfn8Ouq+2WqxyBQ=
Subject key identifier:   F6:18:80:E6:AC:C8:73:D8:21:86:65:5F:FD:E9:AB:0A:51:6A:32:08
Certificate issuer:       /CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
Certificate serial:       36F3E7E635851B515F02B6B4CC1D7B44E57E16BE
Authority key identifier: D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/323830343a383037343a3a2f33352d3335203d3e20323731373531.roa
Signing time:             Fri 29 Nov 2024 13:28:51 +0000
ROA not before:           Fri 29 Nov 2024 13:23:51 +0000
ROA not after:            Fri 28 Nov 2025 13:28:51 +0000
asID:                     271751
IP address blocks:        2804:8074::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl
                          rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f3:e7:e6:35:85:1b:51:5f:02:b6:b4:cc:1d:7b:44:e5:7e:16:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
        Validity
            Not Before: Nov 29 13:23:51 2024 GMT
            Not After : Nov 28 13:28:51 2025 GMT
        Subject: CN=F61880E6ACC873D82186655FFDE9AB0A516A3208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:d5:1b:66:b7:cf:69:99:a6:06:5b:65:fe:
                    67:58:e5:e4:b6:6c:a5:b7:44:b6:13:b1:46:c2:26:
                    b0:71:20:1d:da:c4:bf:71:38:26:3a:a1:a5:f0:ee:
                    fd:7d:95:65:29:62:19:0a:db:49:85:5e:ef:14:3c:
                    31:f2:8a:6f:ec:62:02:e5:a9:bb:87:11:e9:43:61:
                    3c:fa:bb:77:e5:2b:f7:03:a6:a7:67:29:b2:87:84:
                    37:b3:7d:e3:cc:ff:4e:55:01:75:0a:57:35:19:75:
                    4c:de:26:aa:14:b8:71:63:49:22:a7:ce:28:5b:5f:
                    93:80:f2:2e:32:90:ac:b9:fb:12:7e:ff:3c:3e:d9:
                    ad:11:bb:ac:f6:a9:e4:8f:44:e5:be:cf:8b:83:30:
                    eb:c0:d4:35:c1:73:f9:3e:46:cf:7f:82:8c:7a:90:
                    26:0b:a6:d5:59:eb:0f:b3:6e:77:7b:ea:3f:07:ac:
                    82:7d:1c:86:08:8f:f9:fa:0d:d5:d4:42:a7:a0:dd:
                    80:54:2f:c4:ac:1d:e5:c9:a3:92:f0:45:50:5a:c4:
                    c1:d8:c3:42:8a:61:60:90:72:81:be:10:a6:50:45:
                    5b:e2:79:34:bb:55:47:e1:79:0a:75:d7:98:44:34:
                    31:a1:a8:98:5b:06:b0:27:26:72:b1:ff:80:c0:2b:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:80:E6:AC:C8:73:D8:21:86:65:5F:FD:E9:AB:0A:51:6A:32:08
            X509v3 Authority Key Identifier:
                keyid:D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/323830343a383037343a3a2f33352d3335203d3e20323731373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8074::/35

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:89:67:e5:3f:74:df:a0:3a:7c:d2:7e:43:9e:0a:15:dd:
         78:f0:73:f9:13:7d:73:68:db:65:45:34:97:5a:66:3c:3e:fc:
         ee:7c:3f:33:18:c9:5e:d6:7e:c1:8d:52:67:d9:9e:f2:f5:77:
         59:0b:41:0f:a3:83:d6:05:9d:20:a8:20:01:c7:0c:68:7d:85:
         b0:dc:9b:a3:ba:67:0d:9d:c8:a4:15:05:57:06:36:c3:97:d8:
         ca:01:d5:6b:7e:1b:8c:5c:da:4d:c4:d4:52:b5:a8:25:fd:a9:
         fa:e5:e4:c4:06:fe:f0:70:1a:86:0a:bd:05:3a:1f:57:fb:79:
         15:bb:8e:69:f4:b5:70:c4:c1:57:2f:9e:4c:34:37:96:f1:b1:
         ab:68:2c:f0:f2:da:d1:ff:3a:2e:e3:37:8e:a1:8a:85:eb:af:
         3c:d7:b0:4e:60:d9:0f:47:49:52:5d:28:6a:e3:63:39:8f:50:
         a6:86:a8:59:39:2b:bf:a9:e0:88:c2:02:10:69:7e:be:c2:59:
         65:3a:c6:f7:19:a0:3a:ba:53:f9:01:eb:64:a3:b1:b4:2b:db:
         bf:07:3d:07:d8:52:b3:52:c9:32:d6:13:bf:38:11:b0:64:79:
         e6:d8:66:6b:dd:3e:31:50:85:65:a3:56:73:1a:28:2e:4d:97:
         29:6c:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:17 2025 by rpki-client