Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
File:                     323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa (raw, json)
Hash identifier:          rQabrSLl4GSjLNIxkevB2dBKRnYYB5fGRCLMnCZzjIU=
Subject key identifier:   82:AE:DE:2F:2A:B2:C5:4D:3A:AF:24:20:DC:4A:45:06:23:EA:E2:BB
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       32694AB12CD5069FB0AD1C8F2EC178069FED0F7D
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa
Signing time:             Thu 04 Apr 2024 08:19:25 +0000
ROA not before:           Thu 04 Apr 2024 08:14:25 +0000
ROA not after:            Thu 03 Apr 2025 08:19:25 +0000
asID:                     269181
IP address blocks:        2804:60a0:8000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:4a:b1:2c:d5:06:9f:b0:ad:1c:8f:2e:c1:78:06:9f:ed:0f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Apr  4 08:14:25 2024 GMT
            Not After : Apr  3 08:19:25 2025 GMT
        Subject: CN=82AEDE2F2AB2C54D3AAF2420DC4A450623EAE2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9f:03:be:36:cc:5a:2c:a9:8d:2a:7e:91:0e:
                    1b:f8:c1:26:78:79:9f:a2:42:5a:c2:eb:32:f5:cd:
                    f4:e4:11:2a:c8:1e:63:1c:43:27:6a:db:19:0d:05:
                    3a:cb:0f:fa:d7:bb:cd:fd:c3:3c:3e:a7:2d:6c:09:
                    3b:44:3e:a1:a9:b8:bf:66:69:a2:7a:ff:5f:58:ad:
                    95:41:6a:3e:96:1d:01:fb:86:b3:7c:52:42:67:4a:
                    90:4e:5d:cb:9c:f6:16:5a:14:c8:f8:65:43:9e:0b:
                    c9:3f:18:63:7a:72:7d:fe:8e:ee:b5:a8:d0:aa:2e:
                    21:10:9a:3e:5e:bc:cb:93:9a:18:48:55:98:9c:48:
                    a1:25:67:94:2e:39:24:c4:df:dc:e5:c6:3d:1e:2d:
                    bd:f2:05:e3:a0:e6:27:3a:b7:36:0f:48:a1:46:49:
                    4a:6f:d8:0d:31:23:86:b2:3e:95:ed:73:e4:f9:24:
                    93:af:b2:97:72:c9:57:0b:4a:69:e3:4f:d2:18:0a:
                    1a:c8:1c:d0:a0:91:a8:09:26:79:d9:cb:c4:9e:68:
                    cb:44:94:35:f3:28:4e:e1:f7:46:44:7b:0f:3b:2d:
                    20:ca:59:f3:bf:8b:88:dd:b9:3e:23:7b:9d:e5:19:
                    c8:4c:9e:c6:21:2a:23:3f:eb:ec:0d:70:87:0b:2d:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AE:DE:2F:2A:B2:C5:4D:3A:AF:24:20:DC:4A:45:06:23:EA:E2:BB
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a383030303a3a2f33342d3438203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:74:fc:32:f0:d9:6e:57:e5:24:b8:68:5f:1b:4c:33:77:
         b7:9a:42:9e:40:b2:72:a3:50:e7:6a:ff:28:e9:79:fa:49:03:
         a6:c6:aa:60:ef:43:99:1f:78:6d:52:43:f1:2a:92:bb:65:c9:
         45:e8:ed:01:fe:2e:a9:94:2a:32:f1:5b:13:75:0c:30:3d:bf:
         a7:d5:a2:96:35:50:07:29:e6:12:0f:2d:12:bc:f1:e9:3e:54:
         b8:1d:12:c8:cd:c4:23:70:03:48:12:f6:d8:fe:cd:91:cb:89:
         3f:67:b1:b9:62:68:ac:9d:d6:5b:f3:8b:fa:92:45:b8:a1:c7:
         a8:ff:c2:ae:82:c3:64:71:2d:10:c9:f9:cf:93:45:bb:4b:8e:
         fa:17:21:bc:3a:24:0f:fd:48:7a:14:86:6b:0d:4e:16:87:cf:
         83:79:f2:f1:87:bc:43:d7:ad:48:56:70:15:ca:2a:23:c0:99:
         b2:48:c0:fc:ea:17:4e:d8:c9:eb:1c:85:a7:b0:8c:ed:92:69:
         54:ea:95:51:75:9a:c0:cc:98:77:6b:a6:3b:9b:bf:90:1a:6f:
         e3:4e:e3:d2:51:ba:cb:bb:ec:b3:e2:86:13:4e:9a:93:7f:7e:
         b6:c4:de:97:af:3a:4f:73:68:09:91:b2:9e:cc:70:1a:47:b5:
         1f:c6:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org