Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa
File:                     323830343a316562303a3a2f33322d3438203d3e20323634343434.roa (raw, json)
Hash identifier:          Xruk5pZAsyyCIm4fX7yN5nM+lidH2lD014DGNkQboJY=
Subject key identifier:   B9:19:D4:9C:F4:19:E8:C5:48:04:39:93:E6:D3:B1:F7:4C:64:50:3D
Certificate issuer:       /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial:       7A742879A6810EB545EBF62CDB077301503B4B34
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa
Signing time:             Wed 03 Apr 2024 20:29:43 +0000
ROA not before:           Wed 03 Apr 2024 20:24:43 +0000
ROA not after:            Wed 02 Apr 2025 20:29:43 +0000
asID:                     264444
IP address blocks:        2804:1eb0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
                          rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:74:28:79:a6:81:0e:b5:45:eb:f6:2c:db:07:73:01:50:3b:4b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
        Validity
            Not Before: Apr  3 20:24:43 2024 GMT
            Not After : Apr  2 20:29:43 2025 GMT
        Subject: CN=B919D49CF419E8C548043993E6D3B1F74C64503D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:53:85:2b:e8:18:d8:b2:e7:50:e5:06:0b:
                    0a:78:a7:d3:c4:5d:99:cc:4f:db:4d:57:79:12:19:
                    93:9d:9b:31:aa:d1:58:ba:fd:c4:bf:74:95:ff:f9:
                    8a:c6:03:ba:14:75:5f:92:6f:bb:c5:2c:3f:e5:5f:
                    f9:21:f9:ef:76:6f:1b:81:56:e8:7d:79:2f:0f:ca:
                    07:fe:58:8d:43:46:b1:ca:76:94:f6:46:5d:0b:42:
                    cb:19:27:09:e2:14:d3:07:77:38:06:08:cf:95:70:
                    db:9c:f9:42:ec:4c:39:65:a8:e5:f2:f4:d0:84:51:
                    26:61:5c:c0:64:6b:5f:5a:0f:57:9a:62:bf:f5:de:
                    cc:73:ab:5b:84:2c:be:82:20:c5:8d:29:26:19:f9:
                    8d:f2:76:8b:a5:0d:3c:f7:63:71:dc:be:80:0d:fe:
                    c7:87:ed:cd:6a:48:ac:02:76:44:92:84:f7:ea:f2:
                    a4:3a:02:46:1b:82:8e:0a:da:65:09:62:c1:5d:20:
                    b2:03:04:99:0c:1e:76:69:b9:58:69:74:f6:50:85:
                    22:49:2b:4f:86:90:3f:67:45:6c:58:40:9c:c6:7d:
                    67:10:5d:83:26:37:3c:bd:ba:c5:2e:08:ff:c1:a3:
                    4c:62:4c:40:a6:9a:1e:ac:67:6f:fa:98:c2:bf:10:
                    0f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:19:D4:9C:F4:19:E8:C5:48:04:39:93:E6:D3:B1:F7:4C:64:50:3D
            X509v3 Authority Key Identifier:
                keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:be:02:71:07:87:6d:cd:f0:65:23:7e:f8:5c:87:d1:d5:
         99:f5:fb:f3:6a:5f:3b:bf:1b:21:34:39:77:ef:cf:3e:21:af:
         84:56:65:c3:7b:ae:fa:c5:9e:0a:63:61:5a:16:cb:90:5c:95:
         1d:11:34:c4:d9:f3:35:87:54:c3:86:c5:cd:e2:4a:04:a7:f4:
         51:64:32:32:1a:58:dc:54:19:63:f5:13:08:f5:79:f3:31:cd:
         1f:bd:06:bf:98:6a:b7:9a:23:ed:ad:d3:7b:f9:3c:25:3b:5d:
         a5:92:fe:6c:bd:b6:d3:48:8a:b0:fb:a7:83:29:76:74:2c:c6:
         79:12:2b:e9:57:66:47:c0:4d:47:e4:a8:ca:87:23:94:1a:2d:
         9a:cf:94:d0:60:2c:c6:25:39:cd:0d:fb:8b:5a:88:c0:3d:31:
         8c:5b:da:98:ab:be:8b:36:47:b4:bc:d1:b5:24:4d:6c:4c:05:
         d6:18:ab:eb:6b:65:bb:04:05:7b:46:cc:b1:6f:f8:8b:a1:86:
         1d:71:59:2d:9b:31:ba:18:f3:9c:84:ca:a7:ea:18:ff:92:bc:
         cb:0c:94:3e:98:7f:1e:6a:be:b2:1f:8c:be:f0:b3:f3:72:af:
         60:69:f2:e4:1a:83:d5:8d:37:6d:c4:29:5c:fe:1a:93:1e:38:
         75:65:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:21 2024 by rpki-client on console-ams.rpki-client.org