Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa
File:                     323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa (raw, json)
Hash identifier:          KVl13VTjU7DC9SIi8TuJEMS85HGCaJim6uMF5h8KUig=
Subject key identifier:   1C:F0:95:29:E9:F4:B1:66:49:F2:3B:CE:95:FC:0E:3E:F6:E6:1F:5B
Certificate issuer:       /CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
Certificate serial:       1ACB2AEDFA664579F64F2924160D172FA5F773A2
Authority key identifier: 81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa
Signing time:             Tue 10 Sep 2024 14:21:27 +0000
ROA not before:           Tue 10 Sep 2024 14:16:27 +0000
ROA not after:            Tue 09 Sep 2025 14:21:27 +0000
asID:                     262352
IP address blocks:        2804:820:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cb:2a:ed:fa:66:45:79:f6:4f:29:24:16:0d:17:2f:a5:f7:73:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97
        Validity
            Not Before: Sep 10 14:16:27 2024 GMT
            Not After : Sep  9 14:21:27 2025 GMT
        Subject: CN=1CF09529E9F4B16649F23BCE95FC0E3EF6E61F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:aa:82:30:71:9f:98:e2:3a:c5:72:c1:25:d9:
                    2f:1e:1f:66:e5:59:b9:9e:66:3b:07:63:09:b7:22:
                    8d:37:14:74:7a:b4:94:24:a1:85:10:05:e5:bf:4b:
                    76:f2:39:45:5f:c1:43:5f:b1:1b:ba:df:ce:92:5b:
                    57:55:6b:e6:5c:3a:e1:f6:28:fe:fb:d9:ba:8a:f3:
                    97:f5:87:f6:bf:14:ff:43:24:4b:4d:76:3c:79:d8:
                    e8:29:97:48:91:21:ef:39:43:30:b3:03:ba:19:d0:
                    00:0a:19:09:eb:53:6b:fc:28:e8:1e:31:2e:6e:f4:
                    79:f4:62:cb:80:a6:df:87:27:50:c2:d1:65:b5:e7:
                    02:60:4c:dc:9a:df:f8:25:18:6f:83:04:d1:e6:4b:
                    5e:33:44:a8:c7:1f:2b:6a:b6:8a:3d:58:c1:17:51:
                    9a:04:07:23:3d:45:fa:04:f8:9d:8d:6a:54:2c:9b:
                    ed:06:9b:b2:eb:45:f3:fd:a9:94:3d:86:23:4c:0c:
                    fb:06:3f:e0:cf:75:50:aa:fe:b0:d9:f0:a3:fd:89:
                    1a:91:2b:55:47:bf:cd:ea:11:8e:c8:03:1e:41:b2:
                    43:b8:b7:11:55:dc:cb:cb:ed:fd:b6:8c:12:fe:74:
                    87:ad:45:02:84:3e:f5:01:55:e5:fa:42:93:90:d6:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:95:29:E9:F4:B1:66:49:F2:3B:CE:95:FC:0E:3E:F6:E6:1F:5B
            X509v3 Authority Key Identifier:
                keyid:81:70:C4:08:5A:20:CD:6A:A4:51:FB:CA:C2:CB:8F:2C:CD:BA:3E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8170C4085A20CD6AA451FBCAC2CB8F2CCDBA3E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/5/323830343a3832303a343030303a3a2f33342d3334203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:820:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:47:b5:8a:d1:42:6a:1e:02:74:64:c2:92:d5:7b:57:18:
         ad:46:92:ae:a1:1f:7e:9a:0e:04:a9:e5:74:5a:43:18:fb:73:
         5d:5e:9e:dd:32:ae:73:a5:7c:0c:67:16:78:47:63:ee:96:09:
         ee:c7:51:48:f8:32:62:76:1c:f0:95:95:fa:9d:f9:ed:d0:81:
         c3:37:81:a7:d0:11:20:48:da:80:54:73:6d:f8:75:5c:80:3c:
         dd:c4:42:8c:b6:af:5b:3d:7a:0c:e1:63:66:67:7d:f1:dd:cd:
         d4:d7:7d:6d:30:39:a3:7f:b9:e7:36:1a:43:ac:d8:77:f6:92:
         4c:cb:b5:87:46:a2:7a:13:0b:88:1b:87:5e:e8:1c:0a:af:c8:
         fe:66:d2:38:66:ed:96:c5:c8:6a:39:3c:77:d4:c3:c4:6b:b1:
         1e:cc:db:69:e4:89:6e:06:00:b4:c9:02:0e:58:8f:3a:2e:91:
         8f:45:92:b6:ab:44:b8:9e:7c:47:ac:c0:c7:51:8c:99:03:db:
         cb:47:cf:0a:d4:32:39:c8:ca:5c:0a:2e:a9:48:31:f8:ce:1b:
         1b:34:97:47:aa:d1:ff:13:3b:c1:eb:93:dd:98:cb:bd:91:f7:
         74:ee:17:49:30:26:df:7a:8e:47:d2:ae:26:24:e1:dd:7e:17:
         9f:3b:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:50:10 2024 by rpki-client on console-fra.rpki-client.org