Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a3a2f33342d3334203d3e20323733333136.roa
File:                     323830343a386364343a3a2f33342d3334203d3e20323733333136.roa (raw, json)
Hash identifier:          4oErWlm0XMim6aQ3uvDbqikaWeckc08wsJmz25gvNf4=
Subject key identifier:   AF:1F:3B:B8:68:48:37:F7:89:83:1E:CC:54:1B:B7:ED:BC:5F:82:52
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       1D7A47C97A222795ABD758B5DFF2E1BB29659DBC
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a3a2f33342d3334203d3e20323733333136.roa
Signing time:             Wed 06 Nov 2024 18:43:05 +0000
ROA not before:           Wed 06 Nov 2024 18:38:05 +0000
ROA not after:            Wed 05 Nov 2025 18:43:05 +0000
asID:                     273316
IP address blocks:        2804:8cd4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7a:47:c9:7a:22:27:95:ab:d7:58:b5:df:f2:e1:bb:29:65:9d:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Nov  6 18:38:05 2024 GMT
            Not After : Nov  5 18:43:05 2025 GMT
        Subject: CN=AF1F3BB8684837F789831ECC541BB7EDBC5F8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:61:07:29:79:c6:cd:94:4f:f2:e0:15:00:
                    e5:fd:6d:a1:f3:6c:62:24:f3:b3:67:05:fe:be:63:
                    d7:98:ae:fa:27:4d:89:74:fb:94:1b:39:bf:a2:37:
                    99:2e:ac:ce:1b:a5:39:ab:a8:2d:54:03:9a:47:d8:
                    67:72:18:7a:20:28:8c:13:25:75:15:37:03:46:21:
                    4f:17:c9:b0:52:79:ed:7f:e7:c4:4d:b7:ce:c0:87:
                    de:09:4a:0d:f1:aa:45:00:18:3c:e3:23:27:69:58:
                    99:9e:6f:aa:9b:53:99:b8:db:77:17:c6:53:25:f7:
                    5c:64:1c:0e:40:20:4e:2c:cd:9c:65:83:ef:72:e9:
                    37:64:a3:86:a6:26:01:cd:21:ca:30:29:43:3b:0d:
                    55:3f:ee:2f:bd:48:41:9c:17:77:ff:1f:b1:50:cf:
                    27:ef:58:a2:e2:d4:53:84:0d:6c:d6:3f:16:23:c0:
                    1f:33:3b:ab:2c:08:8f:25:36:ab:e6:63:92:f8:d2:
                    13:22:79:a0:37:ab:7f:4a:04:83:5a:97:f1:97:1a:
                    85:7b:5b:a9:57:13:e1:35:6a:a1:b8:ef:16:6d:a5:
                    02:89:a9:34:4f:a2:7e:a9:41:b7:fa:b5:25:0b:f9:
                    83:88:5d:e0:46:80:08:84:59:6a:80:6b:65:92:c8:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1F:3B:B8:68:48:37:F7:89:83:1E:CC:54:1B:B7:ED:BC:5F:82:52
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a3a2f33342d3334203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:23:91:10:6a:1b:a6:39:91:3d:7b:d2:0f:91:b6:b0:8f:
         5d:b1:9a:d1:58:8e:5d:5d:60:93:31:e3:17:37:c9:7e:f5:1b:
         c4:8a:f5:c9:05:55:01:cb:47:25:df:60:75:b5:1a:f9:45:71:
         9d:49:a9:da:26:07:25:73:40:19:3c:1b:db:7c:61:62:3d:aa:
         e1:01:38:63:8f:b8:8c:3f:9c:09:25:c6:b5:a8:65:ba:37:96:
         70:3c:b5:6c:2b:46:07:4d:82:d2:d5:10:1f:50:59:56:5c:e2:
         76:33:7c:ca:56:2d:c3:00:d7:84:45:89:db:74:57:e9:7c:b2:
         be:9c:e2:7b:5a:f2:35:78:de:d1:5f:a1:12:8b:53:04:54:31:
         ae:fb:5b:0d:ab:70:79:2f:9a:64:e7:15:c8:5e:3d:de:55:d6:
         e6:e2:c9:12:98:b4:44:d7:28:df:3d:58:60:33:06:28:3f:fa:
         69:7b:ff:db:dd:52:00:99:e6:cf:f1:22:03:f6:32:e9:91:6d:
         eb:c9:f4:c3:3f:be:bd:6d:56:2f:82:c4:af:12:60:ca:39:5c:
         ff:ac:c2:67:c9:5a:bb:d8:80:e3:98:38:c2:6f:c8:14:a4:6d:
         7e:58:48:cc:7b:4b:52:e5:39:01:89:ea:2c:43:ec:6e:50:f7:
         52:65:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:04 2024 by rpki-client on console-fra.rpki-client.org