Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33322d3332203d3e20323639313731.roa
File:                     323830343a363038303a3a2f33322d3332203d3e20323639313731.roa (raw, json)
Hash identifier:          jaNZa+TJoaU1oEihZkWdVnkjZ7TBXLdr1iGsKZ7zB14=
Subject key identifier:   46:DD:32:74:A9:48:5C:77:E5:BF:13:20:77:99:18:82:B2:E3:12:E6
Certificate issuer:       /CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
Certificate serial:       47755BC4D4A462D7FE10F6D130D1050BBD5FB59F
Authority key identifier: 36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33322d3332203d3e20323639313731.roa
Signing time:             Mon 23 Sep 2024 18:34:17 +0000
ROA not before:           Mon 23 Sep 2024 18:29:17 +0000
ROA not after:            Mon 22 Sep 2025 18:34:17 +0000
asID:                     269171
IP address blocks:        2804:6080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl
                          rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:75:5b:c4:d4:a4:62:d7:fe:10:f6:d1:30:d1:05:0b:bd:5f:b5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C
        Validity
            Not Before: Sep 23 18:29:17 2024 GMT
            Not After : Sep 22 18:34:17 2025 GMT
        Subject: CN=46DD3274A9485C77E5BF132077991882B2E312E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:9b:55:80:a8:c3:74:ae:8e:cf:28:f4:8d:
                    1a:74:76:f1:e0:78:7c:28:6a:96:90:23:d6:9f:4f:
                    b0:75:b0:5e:0b:f4:eb:1c:cc:1f:33:f6:14:60:db:
                    b3:37:21:3e:83:78:5d:0b:0c:ea:1d:9f:7f:85:75:
                    59:d3:1b:e2:06:55:92:6e:d3:1d:4d:cc:18:f7:93:
                    db:aa:24:93:ab:88:4f:70:28:1e:11:85:8d:d6:d2:
                    df:6d:87:13:23:fd:ca:38:c5:3c:5c:eb:f3:89:86:
                    09:9d:65:5c:a1:bd:bf:4e:14:4a:98:a7:36:b9:a2:
                    98:f2:42:3c:7b:5b:c1:2e:51:c2:8b:79:22:f3:ff:
                    42:44:2c:3f:fb:c4:b0:ee:2e:e4:db:c3:92:3a:5b:
                    05:7d:37:27:11:6c:79:4b:37:b6:85:2f:46:ee:84:
                    d9:ea:37:76:ca:d5:ec:08:63:6a:a8:99:83:fe:d3:
                    30:b0:09:9c:af:50:cc:f6:f5:d4:a1:a4:a3:e6:13:
                    a3:14:13:2d:68:80:3f:23:b4:54:fc:99:6d:bc:63:
                    b5:56:7b:9a:71:0d:3d:e2:99:a4:34:ad:3b:d4:fe:
                    69:89:c1:f5:61:fd:ff:a3:2e:9c:4c:48:64:5a:56:
                    be:9a:9c:3e:d8:97:c9:73:4d:60:16:bb:b6:14:1a:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:32:74:A9:48:5C:77:E5:BF:13:20:77:99:18:82:B2:E3:12:E6
            X509v3 Authority Key Identifier:
                keyid:36:1C:4B:6D:73:C6:56:15:DB:AF:B3:E6:05:DF:B7:72:0F:9D:2C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/361C4B6D73C65615DBAFB3E605DFB7720F9D2C5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnxcHRLMq4ywDDs2VVu93L6Y3AJYZdCmM7ND5ngqBYiN/0/323830343a363038303a3a2f33322d3332203d3e20323639313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6080::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:23:00:2a:32:ce:0e:23:ce:00:2c:48:9f:db:48:7c:8d:3e:
         eb:fb:16:4d:a3:c2:05:ef:cb:12:08:87:96:94:d1:1b:0c:56:
         75:29:06:00:43:88:0d:68:67:de:f4:90:e1:da:16:14:df:e1:
         fb:6a:d1:81:a1:7b:ff:70:31:dd:23:f0:37:4e:d3:31:80:b0:
         3f:95:9d:86:75:0f:6a:b0:98:90:de:f6:48:82:09:b8:f1:05:
         20:20:35:7a:7a:c7:e6:7d:5a:90:a0:68:1c:23:7b:b3:73:f9:
         42:47:9b:cf:e3:ba:d8:d7:21:5d:02:4a:17:0c:6b:2d:d4:6d:
         08:50:c2:39:cf:d9:54:ac:51:87:d9:bd:f5:61:05:ae:61:23:
         84:43:81:ec:c5:74:e6:d9:46:50:f0:84:e7:56:5a:39:83:0b:
         ad:54:0a:1e:cd:4f:92:02:da:6d:1e:8d:29:ee:dc:ea:c9:0c:
         ae:2d:db:b2:3f:9a:d2:5c:fa:8f:4d:2a:74:86:0c:6f:a4:99:
         5d:40:b1:ad:3e:fa:e5:6b:a8:ec:f6:fc:fd:09:64:d3:8e:fa:
         98:3a:f9:69:76:ee:61:d3:e0:1a:06:94:36:27:db:2f:12:14:
         ad:9d:b5:34:4f:52:15:e2:b5:f7:cd:b1:cb:1c:6a:be:91:06:
         ab:e7:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:42 2024 by rpki-client on console-ams.rpki-client.org