Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33342d3334203d3e20323733333136.roa
File:                     323830343a386364343a383030303a3a2f33342d3334203d3e20323733333136.roa (raw, json)
Hash identifier:          GrIz5jURnTW3DiQzIwr9E10o0CuioVB1+7DoqMXPyhg=
Subject key identifier:   79:83:49:1A:3B:8E:CE:E8:78:42:56:A3:1F:DA:31:AA:17:70:72:C3
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       2205E57E4D477C24215BB88975EA96E32C6255E0
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33342d3334203d3e20323733333136.roa
Signing time:             Wed 06 Nov 2024 18:43:09 +0000
ROA not before:           Wed 06 Nov 2024 18:38:09 +0000
ROA not after:            Wed 05 Nov 2025 18:43:09 +0000
asID:                     273316
IP address blocks:        2804:8cd4:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:05:e5:7e:4d:47:7c:24:21:5b:b8:89:75:ea:96:e3:2c:62:55:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Nov  6 18:38:09 2024 GMT
            Not After : Nov  5 18:43:09 2025 GMT
        Subject: CN=7983491A3B8ECEE8784256A31FDA31AA177072C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:b7:3b:9b:13:3c:fb:5d:24:cf:e6:1c:b5:
                    12:75:f7:3f:8c:45:00:11:23:5d:e9:5b:70:6c:b5:
                    47:24:70:91:8c:cf:a9:eb:55:71:2b:fd:47:d1:fb:
                    8b:17:1c:ac:ec:13:a9:35:c8:2d:60:59:fc:64:84:
                    2e:b1:5b:c8:58:ed:17:bf:77:1b:6f:9e:a6:34:28:
                    30:84:18:5a:55:db:17:fe:70:f0:85:77:f0:7f:13:
                    b3:35:e9:5b:e4:05:fe:dd:25:43:61:27:c4:4f:fd:
                    6f:9a:8b:4e:be:59:98:a6:f5:e0:31:94:13:9d:ce:
                    ee:cd:74:e9:7b:bf:20:1c:bb:4c:26:59:cd:35:66:
                    2a:e9:2a:55:6e:ef:e7:d9:32:16:2f:49:6f:7e:a7:
                    d2:2e:71:b9:63:be:38:00:ca:05:2e:b3:b8:71:91:
                    10:e4:c1:c3:1c:0e:d5:47:87:58:9a:bf:d3:d6:95:
                    15:b2:78:cb:82:55:be:aa:f3:95:4e:f0:90:a7:b3:
                    af:98:82:fc:25:e2:fb:38:f8:22:25:57:ba:ad:59:
                    83:73:6a:db:cf:ee:c7:2b:bd:c0:33:85:53:fc:6a:
                    a1:45:7e:24:37:64:f6:f9:d7:6f:0f:07:c6:49:b2:
                    52:53:3a:9b:3a:30:08:6b:50:24:59:7d:a2:f4:90:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:49:1A:3B:8E:CE:E8:78:42:56:A3:1F:DA:31:AA:17:70:72:C3
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33342d3334203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:b4:c3:0a:a6:f4:1a:52:22:17:ee:02:74:c7:e6:12:ab:2d:
         17:32:db:a0:41:41:75:fb:26:8f:2d:f9:87:0e:cf:d6:eb:8a:
         3d:c9:5f:ee:ed:0e:ae:8e:c2:a3:b1:8e:e3:51:b4:21:07:70:
         77:e5:c6:e1:02:31:50:41:ab:2b:4c:a5:9d:9e:f4:d1:b5:44:
         f8:44:8f:a0:a6:b9:00:ee:12:0e:61:9d:a7:c1:ac:ae:ac:3f:
         7f:e9:b5:05:b2:98:3a:f1:d8:62:b6:eb:9e:74:06:c3:b7:ae:
         8a:80:53:e7:72:ce:8e:a3:77:32:2b:98:ad:03:e5:a9:06:18:
         57:e9:de:34:5e:8a:f7:89:b2:38:5b:0b:38:7c:95:0d:ff:c7:
         9c:b7:65:88:6c:36:0e:d1:14:9b:55:bf:39:68:f4:97:7d:06:
         e4:49:e1:ca:4f:94:bb:52:e7:3a:98:be:ba:63:39:be:df:1b:
         cc:6c:e8:c4:8b:fb:ab:3b:f2:41:4a:9b:27:40:c0:fd:08:cb:
         57:7f:c1:85:bc:e5:ed:0a:49:2d:c9:05:20:fb:9a:8a:48:27:
         bd:9f:c2:77:3a:f1:83:bb:18:1f:68:44:0d:29:7d:d8:19:33:
         73:7c:a5:68:65:ab:61:b8:a4:3d:0c:b4:a1:b1:d5:b9:ae:51:
         63:0c:05:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:04 2024 by rpki-client on console-fra.rpki-client.org