Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          yzkgD2HbkOeS731A8ZsgS65mmCo5d1scpi/s48QeCAE=
Subject key identifier:   A4:5A:D7:19:20:43:BC:C3:F1:7E:41:99:56:59:1D:70:C5:70:B6:79
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       2FDBAAF8D64532132D63F04E9881A24DA46CD92F
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Tue 10 Sep 2024 19:50:05 +0000
ROA not before:           Tue 10 Sep 2024 19:45:05 +0000
ROA not after:            Tue 09 Sep 2025 19:50:05 +0000
asID:                     269175
IP address blocks:        2804:1f4c:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:db:aa:f8:d6:45:32:13:2d:63:f0:4e:98:81:a2:4d:a4:6c:d9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Sep 10 19:45:05 2024 GMT
            Not After : Sep  9 19:50:05 2025 GMT
        Subject: CN=A45AD7192043BCC3F17E419956591D70C570B679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:91:0a:93:b5:22:8c:cf:50:fa:19:64:4d:
                    7e:04:ae:d8:b3:0e:ea:16:e2:75:20:bd:bd:c5:73:
                    1d:2c:c4:7b:1c:ff:65:43:1e:55:15:34:b4:be:16:
                    b7:5d:ae:7f:f6:3c:0f:18:63:95:fb:e2:8e:99:55:
                    7f:f4:9e:6e:86:e9:90:9e:2a:03:25:9b:00:a2:26:
                    87:2b:56:c6:4c:fd:c5:37:b2:db:65:ed:ea:62:58:
                    e7:24:45:99:d1:43:4f:a3:55:99:64:9b:1f:14:4d:
                    b9:ba:f1:80:22:bc:36:4b:da:84:56:75:e1:d6:b6:
                    50:f0:c4:16:34:61:24:9d:08:94:60:bc:06:5a:51:
                    75:25:3c:21:4c:f6:09:ec:a9:6d:78:50:a8:8d:ac:
                    83:f8:86:d9:35:94:37:db:0c:d9:59:06:e2:8e:36:
                    b3:87:9f:8e:24:1a:1a:cb:39:9f:47:7a:42:92:fb:
                    9e:50:c9:ef:d2:77:7c:8d:64:7c:ce:f7:0e:c9:61:
                    ad:a7:94:33:00:0b:ea:fc:12:81:5f:6d:c9:cd:c1:
                    5e:5d:b3:a0:0b:50:c6:7c:14:a0:53:68:de:f6:1e:
                    7a:23:17:e5:e0:90:0c:b7:49:e6:e8:69:cc:11:74:
                    aa:19:b5:f1:2b:59:2f:0c:a4:b3:53:9b:84:a1:7a:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:D7:19:20:43:BC:C3:F1:7E:41:99:56:59:1D:70:C5:70:B6:79
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a383030303a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:6b:ec:2d:1d:38:f4:07:83:35:c3:67:9a:90:1c:e2:20:
         5b:26:e4:ec:01:89:63:b7:6b:69:45:5d:c5:48:ae:b0:11:59:
         08:65:72:6a:c6:d8:35:fe:f4:d6:0b:09:9a:c7:ed:a6:f2:65:
         2c:02:7c:6e:85:b3:89:30:ac:9d:6d:36:4a:86:de:4e:41:0f:
         65:04:2c:fb:48:6e:42:c9:8c:a5:a6:bd:92:4f:ee:bc:f9:79:
         0c:33:cd:af:a9:5e:8f:8b:84:bf:e2:dd:89:4b:b2:33:ac:4e:
         ad:f6:e4:be:04:48:8e:cb:a4:4f:6d:b2:11:a8:74:45:13:03:
         1e:52:14:af:b7:6a:5e:ce:49:25:50:9f:ad:98:b6:f7:61:8f:
         d2:b4:35:c4:70:b6:9d:71:76:bc:0b:a7:7e:9f:f8:27:19:29:
         32:3b:13:bf:07:ac:cb:a5:55:c7:bc:97:fe:83:c9:4c:fa:82:
         77:c9:73:4e:ce:dd:0f:b6:10:d1:5d:ad:9d:f1:23:44:ee:17:
         95:c8:c8:dc:fd:c8:c3:0d:2b:89:9a:e0:cb:68:73:71:65:d3:
         7f:51:5b:97:02:c2:7c:85:5c:e9:da:33:5d:59:e1:79:99:a8:
         27:c9:00:1f:b2:f8:4b:d2:ee:46:24:e6:61:46:8a:a0:08:5f:
         05:d7:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:41 2024 by rpki-client on console-ams.rpki-client.org