Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa
File:                     323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa (raw, json)
Hash identifier:          q9/d+tfkGUHAOipUh4poy0Okvs8WQU10xObsbSxSR8Q=
Subject key identifier:   4F:76:20:AE:F4:08:A8:28:78:37:E1:69:13:F4:F1:AE:EA:50:E2:F5
Certificate issuer:       /CN=79798C354EE82F89133F9F2BDCA4F8220483498E
Certificate serial:       0C9724E90DD09D542EEAAB61CF1CCFA697767619
Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa
Signing time:             Wed 06 Nov 2024 18:43:11 +0000
ROA not before:           Wed 06 Nov 2024 18:38:11 +0000
ROA not after:            Wed 05 Nov 2025 18:43:11 +0000
asID:                     273316
IP address blocks:        2804:8cd4:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl
                          rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:15:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:24:e9:0d:d0:9d:54:2e:ea:ab:61:cf:1c:cf:a6:97:76:76:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E
        Validity
            Not Before: Nov  6 18:38:11 2024 GMT
            Not After : Nov  5 18:43:11 2025 GMT
        Subject: CN=4F7620AEF408A8287837E16913F4F1AEEA50E2F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:28:c2:bf:c8:66:d6:7a:96:44:3b:94:16:
                    b9:8e:d2:d2:c8:f9:0b:09:f9:77:6e:25:45:33:a0:
                    74:4d:e1:bb:70:8b:f7:a6:6b:14:2c:47:aa:44:94:
                    b8:58:5c:3d:3a:61:95:ea:27:9f:10:41:91:8d:a9:
                    90:a6:56:e2:40:75:18:e2:29:81:a2:d5:22:20:84:
                    1a:0e:60:93:54:63:94:52:6d:81:45:93:fc:fd:54:
                    89:64:4c:71:21:e2:48:39:c1:4e:db:98:d3:20:64:
                    c3:e0:be:8e:08:0b:17:8f:b8:a7:60:52:ec:20:96:
                    f1:b7:b7:0b:1c:68:00:3e:42:f0:3b:2b:d4:50:2f:
                    a2:3d:6d:c6:e3:53:90:2a:dd:70:4e:a5:33:dd:f6:
                    16:bf:b9:1e:7d:07:b0:66:1f:b6:ae:a6:9f:48:e7:
                    ba:7c:93:28:69:aa:1a:0d:a0:3e:f1:68:e2:b5:91:
                    f0:16:bc:6e:6e:0e:a6:40:9a:a3:75:d5:d3:ec:3b:
                    45:1a:d9:08:7e:79:47:c1:f2:36:8f:ee:7a:ca:54:
                    ec:6a:84:2b:ce:41:50:66:90:6f:e7:c5:f7:b7:f3:
                    2d:7c:ce:83:9b:e2:47:b7:51:03:59:46:c5:1f:47:
                    38:00:b4:08:d2:04:7e:2f:5a:8c:a3:5c:91:6d:c4:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:20:AE:F4:08:A8:28:78:37:E1:69:13:F4:F1:AE:EA:50:E2:F5
            X509v3 Authority Key Identifier:
                keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a633030303a3a2f33342d3334203d3e20323733333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8cd4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:11:07:aa:bd:76:db:3e:e7:bb:cd:6f:58:89:ff:48:75:7d:
         aa:ff:03:da:f2:47:f6:c7:c7:64:d7:c7:6e:c8:7d:4c:1b:f7:
         b7:f3:80:01:55:45:79:24:2e:d8:7e:84:73:dd:32:36:f8:ff:
         1b:e2:50:c2:98:be:b7:94:66:b6:37:c0:3a:98:c2:f7:8e:a0:
         a8:d1:f8:1e:87:de:8f:e4:4c:49:59:a5:73:5b:59:60:a8:8a:
         61:75:d5:5c:49:d0:67:ce:d9:59:8f:e0:aa:51:b5:72:7e:f2:
         4f:20:91:8d:fd:e9:7c:21:d1:e8:91:50:84:a4:0a:83:9f:5d:
         56:58:78:c6:f1:1c:b9:7c:7c:68:3d:93:bf:eb:18:32:35:03:
         53:e4:ee:3a:6b:cf:b7:cb:23:f8:79:be:48:ad:93:c2:9f:dc:
         36:79:52:34:49:ee:55:8b:fc:0b:62:01:d4:b6:4e:84:9c:09:
         01:b6:bf:3d:b5:27:2c:e9:2f:50:bd:74:16:ad:6e:f5:0b:ef:
         cd:63:f8:16:f3:bb:38:43:1b:c0:ec:5f:f6:a8:21:56:cb:d0:
         1e:33:44:41:9f:32:23:a8:69:1b:c1:53:bc:69:36:40:04:16:
         99:75:cf:45:96:8e:45:43:3b:1d:0c:83:13:66:83:ea:ef:d1:
         15:b8:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:57 2024 by rpki-client on console-ams.rpki-client.org