Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a3a2f33342d3334203d3e20323639313831.roa
File:                     323830343a363061303a3a2f33342d3334203d3e20323639313831.roa (raw, json)
Hash identifier:          C9Dzi/tZKmZzh2kIScwrPLKcajDKYsSOCBFj00Na0gw=
Subject key identifier:   82:D0:8D:85:08:80:A5:DD:06:F6:4D:64:EB:B5:3B:15:5B:12:DB:0A
Certificate issuer:       /CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
Certificate serial:       383AF2BAD55651FD776017D6E0B10B67DA4E82B6
Authority key identifier: 58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a3a2f33342d3334203d3e20323639313831.roa
Signing time:             Fri 08 Nov 2024 18:44:01 +0000
ROA not before:           Fri 08 Nov 2024 18:39:01 +0000
ROA not after:            Fri 07 Nov 2025 18:44:01 +0000
asID:                     269181
IP address blocks:        2804:60a0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl
                          rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3a:f2:ba:d5:56:51:fd:77:60:17:d6:e0:b1:0b:67:da:4e:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585B464DD14FF8DEED6908CBFA9AAE5AAA748C23
        Validity
            Not Before: Nov  8 18:39:01 2024 GMT
            Not After : Nov  7 18:44:01 2025 GMT
        Subject: CN=82D08D850880A5DD06F64D64EBB53B155B12DB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:40:f8:e3:12:fd:a5:14:40:ca:a7:75:6d:
                    aa:6d:f1:d9:29:b6:2a:ec:b2:b7:57:f8:ba:db:ca:
                    46:16:f5:67:db:19:7c:f2:ce:b6:a6:39:2a:5a:5c:
                    d9:b2:8d:a6:bc:61:3e:71:ac:a3:8e:64:6d:4c:59:
                    75:4b:57:f4:f2:e0:cc:9f:a1:6c:d6:2a:51:ba:90:
                    0e:7a:e2:95:0f:a0:a9:80:e6:93:84:cb:c6:29:74:
                    47:5a:07:f9:0c:cb:c0:cc:fd:94:75:c6:05:d3:de:
                    49:27:96:7f:b1:c2:60:a3:b9:bd:a7:5d:ea:08:16:
                    2b:47:6d:c9:dc:b8:61:c6:d7:b9:4f:25:08:58:6b:
                    a6:37:b5:01:f0:bf:a7:88:d4:c1:c6:5c:0f:5a:1a:
                    f9:e0:4f:1f:9c:ad:59:8f:35:f4:af:31:29:75:07:
                    6b:57:86:2f:c0:29:a9:3f:c1:12:e4:cc:61:ae:da:
                    34:c2:8d:ac:40:cd:1a:02:1d:df:74:30:3f:8f:da:
                    c4:5c:8d:1c:e1:a6:c9:3f:42:3c:ae:9b:17:2d:51:
                    df:77:e1:b6:c7:a3:25:ad:1c:74:e6:5a:90:1e:b8:
                    ac:b3:4e:f7:17:e3:a4:8c:82:7c:a4:f0:fb:42:e0:
                    04:82:ae:a3:da:70:96:0d:57:dc:ee:ee:cb:b1:3c:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:8D:85:08:80:A5:DD:06:F6:4D:64:EB:B5:3B:15:5B:12:DB:0A
            X509v3 Authority Key Identifier:
                keyid:58:5B:46:4D:D1:4F:F8:DE:ED:69:08:CB:FA:9A:AE:5A:AA:74:8C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/585B464DD14FF8DEED6908CBFA9AAE5AAA748C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnbCW2nuKW9vnWVUQsbLgDcDGsiMA5xuP7uCio9X97Yr/1/323830343a363061303a3a2f33342d3334203d3e20323639313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60a0::/34

    Signature Algorithm: sha256WithRSAEncryption
         d3:e8:26:a7:c3:7f:bb:1b:dd:6f:a2:2a:ab:a9:fd:a5:e6:22:
         0f:bd:6b:9e:8c:f3:f5:9c:29:bc:8b:ff:45:d3:5a:a6:44:51:
         1b:d5:48:0e:14:66:72:af:79:f0:3c:66:0c:70:2c:c7:c0:c7:
         cc:ac:e7:04:a4:d8:a4:fa:dd:32:1f:af:00:9c:66:fa:2e:25:
         8f:0d:69:9a:5b:a9:52:9a:05:d0:67:0a:77:30:fa:ea:7d:ac:
         d5:2e:49:bc:69:5a:95:80:88:11:6a:48:72:33:36:69:c2:91:
         a9:10:23:84:88:5f:07:c3:15:bb:4c:7d:ae:07:8f:1e:c4:53:
         53:23:61:ef:42:fe:b8:06:81:ac:f1:3d:2b:dc:8a:41:0b:f7:
         e7:a9:99:7a:d5:ab:21:35:71:ee:ac:54:df:a5:6c:36:de:75:
         cb:78:40:41:cc:6e:d3:25:92:e7:1e:4b:22:92:ea:12:b2:94:
         e1:52:b2:14:29:a7:04:d9:5c:09:2a:cf:d1:18:0c:ae:43:86:
         94:e4:62:1b:ab:c2:dc:a1:23:d5:8e:04:10:ad:72:71:94:96:
         b3:5f:c2:57:58:8b:f8:e9:51:68:07:f0:74:39:40:cf:1e:69:
         9a:37:bb:e6:1e:1a:77:09:5e:a7:18:b5:b4:96:17:b3:8f:61:
         71:45:b6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:26 2024 by rpki-client on console-ams.rpki-client.org