Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a343030303a3a2f33342d3334203d3e20323637323134.roa
File:                     323830343a346130383a343030303a3a2f33342d3334203d3e20323637323134.roa (raw, json)
Hash identifier:          Tr1+dpBt5foii8R5TNSAWd7f+PYEF44mxwMDaQ+jDVQ=
Subject key identifier:   81:A3:5A:DA:A6:29:48:EC:0E:1F:4F:5E:D2:67:99:83:C8:3A:D6:F9
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       6061F3A0676DD81DAA01F058FA2088AF33D2CE78
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a343030303a3a2f33342d3334203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:52:03 +0000
ROA not before:           Wed 30 Oct 2024 14:47:03 +0000
ROA not after:            Wed 29 Oct 2025 14:52:03 +0000
asID:                     267214
IP address blocks:        2804:4a08:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:f3:a0:67:6d:d8:1d:aa:01:f0:58:fa:20:88:af:33:d2:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:47:03 2024 GMT
            Not After : Oct 29 14:52:03 2025 GMT
        Subject: CN=81A35ADAA62948EC0E1F4F5ED2679983C83AD6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:2f:12:2b:a6:fa:d7:47:6d:6f:55:b0:c5:
                    af:64:f8:4d:c6:56:2a:4f:2f:e1:0a:f1:1a:aa:9c:
                    e8:68:46:7b:d8:3b:88:6c:5a:4d:9b:e7:fa:bc:8d:
                    be:49:37:36:c9:dd:bd:50:a7:57:03:59:db:db:f1:
                    ed:a7:36:9f:68:ef:33:63:35:d3:ed:31:9b:3d:54:
                    4a:4a:c3:73:d7:4e:03:37:64:14:93:79:12:78:25:
                    70:d5:e3:1a:0a:e4:1c:57:48:3c:d1:61:30:6a:62:
                    f3:9e:f3:36:4f:0b:ec:83:6a:82:5f:95:21:2a:eb:
                    e7:3c:bd:b9:02:cf:49:77:58:51:e3:e8:01:83:4d:
                    19:2f:90:39:8e:48:69:45:1f:92:5c:e6:59:d6:cc:
                    ea:34:fb:53:5d:a0:8f:8b:2e:99:0d:ca:aa:6b:2d:
                    e8:06:fb:fb:83:c3:96:11:2f:65:24:f4:41:11:9d:
                    3a:89:65:a1:24:5f:10:27:48:cd:b4:c1:47:20:9f:
                    67:86:e2:f1:8e:61:0c:f3:f9:e8:97:9b:e9:2e:a2:
                    1b:5b:75:f5:2c:05:15:a3:a4:ae:ec:e3:e1:99:b5:
                    b6:90:8d:e5:11:61:94:28:ce:2f:dc:a0:b3:c5:b2:
                    17:e6:fc:8c:7c:1c:74:75:0a:37:ea:6b:fb:94:bc:
                    61:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:5A:DA:A6:29:48:EC:0E:1F:4F:5E:D2:67:99:83:C8:3A:D6:F9
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a343030303a3a2f33342d3334203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:df:c0:14:66:36:85:61:93:66:70:01:0c:a1:78:63:f1:c4:
         c7:44:a3:0d:bd:cc:ad:73:83:1d:b9:71:79:12:2d:4d:ee:8c:
         ac:33:4e:ef:15:29:6a:7c:a0:09:9f:dc:72:bd:41:be:f4:ba:
         f9:79:da:3a:9e:0d:ab:70:a4:4d:f5:1c:ae:58:b8:04:d0:04:
         49:5e:06:96:da:3e:87:3d:e8:8f:dc:01:6f:bc:34:5b:40:4c:
         dd:c5:11:59:c2:33:a5:05:82:61:7f:32:a1:dc:c5:73:77:f5:
         a7:37:ac:24:5f:9d:b7:ed:05:a2:fe:50:49:6e:fe:06:c7:ad:
         42:8b:8b:de:bc:ac:b2:8c:87:20:03:41:08:4d:47:75:ce:55:
         b8:57:83:66:37:bd:e8:d2:91:15:a0:a1:bd:63:3e:d0:b7:f1:
         6c:77:57:e6:f7:20:0c:f6:f4:28:53:e5:3a:b6:e9:9a:26:2b:
         ce:4a:87:6f:bd:9c:13:5e:44:f4:33:ae:ca:0d:c7:68:85:d6:
         c0:38:dd:a8:62:84:6f:87:ca:e2:4b:23:68:b6:70:17:81:e0:
         7d:b4:82:09:38:ef:0f:14:2f:57:e2:51:20:d0:db:4c:30:5b:
         bd:32:5e:2a:d5:08:42:8f:62:53:78:ee:d9:fe:91:3b:30:a4:
         35:6c:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org