Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a343030303a3a2f33342d3334203d3e20323731333833.roa
File:                     323830343a376161343a343030303a3a2f33342d3334203d3e20323731333833.roa (raw, json)
Hash identifier:          kznSlh6ShAB54kqKjIWpAI/kHGQLOLzTxDiVXQNa37g=
Subject key identifier:   15:25:3A:8F:DF:79:10:A9:9D:2B:E6:BA:3F:4D:47:B8:67:15:FD:D2
Certificate issuer:       /CN=23235F2B7FAE22B78438698FD00F49F07D286674
Certificate serial:       27AFA2D8606631DCB3994D8FE061329985B081D8
Authority key identifier: 23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a343030303a3a2f33342d3334203d3e20323731333833.roa
Signing time:             Fri 22 Nov 2024 14:28:34 +0000
ROA not before:           Fri 22 Nov 2024 14:23:34 +0000
ROA not after:            Fri 21 Nov 2025 14:28:34 +0000
asID:                     271383
IP address blocks:        2804:7aa4:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:a2:d8:60:66:31:dc:b3:99:4d:8f:e0:61:32:99:85:b0:81:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23235F2B7FAE22B78438698FD00F49F07D286674
        Validity
            Not Before: Nov 22 14:23:34 2024 GMT
            Not After : Nov 21 14:28:34 2025 GMT
        Subject: CN=15253A8FDF7910A99D2BE6BA3F4D47B86715FDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:14:02:fc:61:52:2a:9c:58:5a:0c:dd:7e:
                    3f:75:66:43:4a:75:df:4c:a4:5c:62:34:d5:b7:d7:
                    ec:80:51:f6:33:e6:0c:9a:28:15:51:8c:1d:9f:1c:
                    a0:0a:0c:6e:a1:bc:78:c8:0f:af:7a:32:59:d4:87:
                    86:73:3f:4a:d3:4a:e7:1f:c9:37:e3:eb:3d:dd:62:
                    bf:dc:06:d4:32:19:a4:6a:3b:79:5a:4f:09:b9:09:
                    79:18:05:59:4c:5b:cb:4b:38:f2:89:74:08:b6:59:
                    ca:d6:2e:b3:86:9d:48:66:27:5c:b6:7e:1e:0b:9a:
                    74:29:e7:2f:12:b5:d1:a2:41:23:6e:a2:18:61:3e:
                    be:f3:b8:cc:9f:61:ed:5a:b7:45:c2:7a:2c:82:21:
                    2d:16:af:92:f1:5e:d5:3a:e8:aa:95:95:08:d7:aa:
                    b7:4f:e1:bf:0c:3a:a8:6f:42:6b:60:74:61:d3:42:
                    4b:53:4c:c5:8a:79:a2:5f:d2:f9:1a:06:fc:91:24:
                    a5:89:af:18:ce:51:1b:71:5d:9f:87:91:d3:ef:fa:
                    e3:35:e5:9c:0c:5e:17:1a:f6:ea:7d:99:8b:0c:48:
                    d5:ff:b5:72:c0:d6:b7:9a:a4:c9:72:ea:56:29:69:
                    e3:e2:48:a7:13:cc:5f:96:cf:3a:da:49:75:bb:fc:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:25:3A:8F:DF:79:10:A9:9D:2B:E6:BA:3F:4D:47:B8:67:15:FD:D2
            X509v3 Authority Key Identifier:
                keyid:23:23:5F:2B:7F:AE:22:B7:84:38:69:8F:D0:0F:49:F0:7D:28:66:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/23235F2B7FAE22B78438698FD00F49F07D286674.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23235F2B7FAE22B78438698FD00F49F07D286674.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a343030303a3a2f33342d3334203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:36:b4:a4:e6:93:bb:79:5f:b3:12:d5:02:5d:d1:96:76:
         64:4d:39:2a:d8:68:51:91:db:b0:5c:3a:36:8f:5b:22:13:6f:
         e7:45:c3:1a:5e:cd:1a:6c:76:4c:76:b3:db:f0:e3:36:0e:a1:
         de:16:22:bd:f8:06:bc:9c:1d:f1:b3:f5:af:59:99:de:2e:2b:
         cb:6e:f3:a5:94:eb:d6:09:aa:bb:5b:9e:e2:d9:d4:d8:48:bf:
         ac:ed:e7:d8:a9:bf:30:c8:40:98:d6:b2:11:f2:6d:12:41:36:
         16:e9:87:2e:1e:3a:2c:f2:73:ef:84:a2:9a:28:eb:88:cd:22:
         b1:ca:cf:93:86:86:36:3c:67:84:4a:72:ab:95:48:be:19:f9:
         da:96:1e:21:11:07:04:30:20:21:d8:df:d2:d1:a5:cf:99:fe:
         83:2f:78:cb:8e:a3:3f:9c:fa:5d:28:37:2e:eb:f7:aa:21:5f:
         59:76:10:b1:86:b1:5c:dd:6c:e9:ee:5b:5f:9a:40:3a:be:5f:
         ab:a3:84:63:a8:7b:90:2d:59:7c:43:3b:45:c9:0a:e1:e2:9b:
         45:d2:4c:3e:c1:6d:43:61:12:36:88:36:33:6c:b6:e6:34:55:
         32:57:d9:72:23:56:c1:23:3a:f5:0c:bb:64:5e:82:d5:12:fe:
         51:d6:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:30 2024 by rpki-client on console-ams.rpki-client.org