Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa
File:                     323830343a356466383a3a2f33322d313238203d3e20323639303034.roa (raw, json)
Hash identifier:          hz9pExm3r4sKvLAPBfM3h6dMFNf5WnV2LfYak6476bI=
Subject key identifier:   93:39:4D:21:C1:3B:B8:2A:78:9F:E8:D0:25:29:3C:EF:E3:5E:54:C9
Certificate issuer:       /CN=151447ACA4E09209C53F7216E3E910244FF0C5A5
Certificate serial:       455DE8EEC652901D85D460F7499DEC0AEE9C0DD5
Authority key identifier: 15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa
Signing time:             Thu 07 Nov 2024 19:24:29 +0000
ROA not before:           Thu 07 Nov 2024 19:19:29 +0000
ROA not after:            Thu 06 Nov 2025 19:24:29 +0000
asID:                     269004
IP address blocks:        2804:5df8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.crl
                          rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 20:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5d:e8:ee:c6:52:90:1d:85:d4:60:f7:49:9d:ec:0a:ee:9c:0d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151447ACA4E09209C53F7216E3E910244FF0C5A5
        Validity
            Not Before: Nov  7 19:19:29 2024 GMT
            Not After : Nov  6 19:24:29 2025 GMT
        Subject: CN=93394D21C13BB82A789FE8D025293CEFE35E54C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:b0:b2:a1:27:a2:72:30:0f:83:c9:c9:c2:
                    e0:49:69:a5:fa:f2:59:ee:e2:72:ec:86:ac:5e:ae:
                    ec:56:bf:13:33:fa:f4:65:98:79:07:04:e0:b6:d9:
                    a4:65:18:43:14:f5:8e:57:ce:09:55:29:83:5b:f1:
                    69:7e:7c:ab:cd:74:14:22:83:1f:67:5a:13:68:4d:
                    54:fc:83:3d:8b:a9:01:03:70:f9:83:e9:6f:01:d7:
                    c3:ed:93:4c:9c:02:0a:e4:f0:c7:f6:3d:7d:bf:f0:
                    d6:27:d3:94:0a:5c:7c:2d:65:cc:ec:0a:91:7d:d3:
                    0e:0f:9b:7a:08:7f:51:c8:3d:76:20:63:14:d8:cc:
                    66:33:a7:b7:cb:71:e5:3a:b5:fe:2a:7e:38:95:eb:
                    5a:ba:2b:80:42:e5:2e:32:2a:80:06:fd:cc:50:ec:
                    d5:ee:09:88:e3:a1:38:5a:47:a2:da:34:f5:82:76:
                    c5:57:33:0c:1d:0a:6c:85:b3:17:bf:af:aa:0a:97:
                    bc:8e:9d:44:5a:43:5e:9c:2e:ec:3c:ed:7a:40:b8:
                    d4:96:cd:90:44:7a:3d:df:41:94:5d:fa:a9:99:23:
                    db:98:22:f1:e8:94:e9:2d:7a:a3:5f:44:ce:bb:c7:
                    ce:7a:26:45:76:d2:81:c2:86:fd:19:b9:5b:76:61:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:39:4D:21:C1:3B:B8:2A:78:9F:E8:D0:25:29:3C:EF:E3:5E:54:C9
            X509v3 Authority Key Identifier:
                keyid:15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/323830343a356466383a3a2f33322d313238203d3e20323639303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:36:fc:e1:9b:ba:11:17:35:ea:98:5b:3d:32:6f:9c:94:
         31:5b:8d:9e:64:93:e1:59:ca:d4:7c:76:74:da:d1:0e:c5:a0:
         18:b0:e2:63:b0:d3:05:42:0b:e9:78:a5:8e:f8:e3:89:dd:14:
         31:ab:2e:a5:56:26:e9:de:ab:4c:9a:e8:68:6a:21:ab:60:0a:
         99:a8:03:3b:89:a7:15:5a:cc:7b:14:97:85:1f:ee:7d:04:2f:
         a8:7f:74:13:51:06:6f:96:26:1d:4f:90:5c:ca:05:6c:95:9e:
         74:65:30:6c:dc:02:3c:78:fe:eb:2a:a3:b8:0d:52:3b:32:df:
         6d:47:f3:8b:8a:85:70:fa:15:48:75:14:45:2d:a4:97:04:51:
         f0:d9:3b:7c:17:7c:fd:d9:c8:62:53:9f:5c:86:e5:a8:0c:eb:
         04:af:7a:db:ed:96:c2:b7:de:b3:0a:57:c9:ef:f1:7c:8f:36:
         e9:bc:5f:87:7b:1a:70:b8:d0:95:23:64:b1:3c:7a:93:27:b5:
         65:0a:78:80:32:3b:64:73:06:85:c7:56:60:ac:57:cc:fc:1f:
         3a:83:b6:8c:f1:00:8a:99:96:f8:77:73:97:5f:23:dc:06:d3:
         8c:a8:80:a1:2b:53:9a:81:d6:c2:e6:14:10:2c:c9:0f:55:1f:
         52:79:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:53 2024 by rpki-client on console-ams.rpki-client.org