Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a633030303a3a2f33342d3334203d3e20323637323134.roa
File:                     323830343a346130383a633030303a3a2f33342d3334203d3e20323637323134.roa (raw, json)
Hash identifier:          S0IJYHzRyDpyDn8Edm1c567rD0FyVKMh3UCbhELlDRM=
Subject key identifier:   7C:0D:35:DA:78:FC:75:D9:B5:32:CF:00:B6:E0:B1:C7:38:C6:A4:E3
Certificate issuer:       /CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
Certificate serial:       53BD81868791F7D70A55B148388F72D345A24638
Authority key identifier: B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a633030303a3a2f33342d3334203d3e20323637323134.roa
Signing time:             Wed 30 Oct 2024 14:55:16 +0000
ROA not before:           Wed 30 Oct 2024 14:50:16 +0000
ROA not after:            Wed 29 Oct 2025 14:55:16 +0000
asID:                     267214
IP address blocks:        2804:4a08:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl
                          rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bd:81:86:87:91:f7:d7:0a:55:b1:48:38:8f:72:d3:45:a2:46:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B80A28EDDD66AE3F07174B404FF6865AAB90A7DB
        Validity
            Not Before: Oct 30 14:50:16 2024 GMT
            Not After : Oct 29 14:55:16 2025 GMT
        Subject: CN=7C0D35DA78FC75D9B532CF00B6E0B1C738C6A4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4d:c4:d0:d1:d1:20:38:5b:ad:c3:e6:3d:5a:
                    d3:03:f2:b9:07:8a:8a:6d:9f:5a:68:da:a2:0d:0a:
                    20:c6:fc:f7:88:57:93:44:da:05:6c:a7:d0:4d:5c:
                    7b:a8:22:54:87:65:c2:ea:74:00:45:00:9f:3e:63:
                    73:b8:9e:de:fa:ee:b9:10:41:67:8c:87:e8:e4:b7:
                    d7:13:4e:b8:6d:61:fd:a9:81:1d:4c:72:fb:43:0c:
                    72:e0:da:61:bd:6c:d1:29:41:f3:f6:06:a9:38:12:
                    32:1e:dc:ae:63:c2:e5:ef:2b:b0:35:2d:1c:25:a4:
                    33:55:c5:97:0a:86:b7:44:f2:bf:71:0c:69:ef:d6:
                    a5:8a:75:bd:fb:39:ce:7b:9c:e4:f7:b5:3c:e0:2e:
                    9d:2b:17:32:61:86:f2:96:1c:00:d9:2c:9e:dc:f1:
                    9e:14:56:17:0b:38:2f:10:3a:db:db:0c:43:da:d7:
                    24:bf:af:93:ce:c2:e6:88:62:02:f0:92:67:53:17:
                    53:7c:2e:fd:90:a4:76:67:1c:96:05:a5:bd:ca:5f:
                    da:90:5d:55:79:c2:91:3b:cb:c1:ed:0b:71:fc:6f:
                    72:dd:51:1f:56:bf:07:27:56:83:22:e4:f1:74:71:
                    79:10:6c:24:d5:92:d5:43:eb:63:70:d0:d2:f8:77:
                    3b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:0D:35:DA:78:FC:75:D9:B5:32:CF:00:B6:E0:B1:C7:38:C6:A4:E3
            X509v3 Authority Key Identifier:
                keyid:B8:0A:28:ED:DD:66:AE:3F:07:17:4B:40:4F:F6:86:5A:AB:90:A7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B80A28EDDD66AE3F07174B404FF6865AAB90A7DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U9dEiMFz6HY9LkaVt4T6F1g9JBK2HHvNmJ6ZP8wte15/0/323830343a346130383a633030303a3a2f33342d3334203d3e20323637323134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a08:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         81:98:6f:08:5a:63:7b:df:d1:8d:0f:83:bc:b3:10:1b:8b:57:
         d4:d4:9d:25:c2:6a:75:76:93:30:2b:90:43:fa:bf:de:0f:a6:
         c7:92:fc:db:78:b6:e1:2f:e4:2d:33:e1:8f:89:18:97:cc:d0:
         5b:54:37:3f:f6:59:a9:c7:9d:45:31:f4:29:60:68:05:9a:dc:
         f7:67:a8:82:43:36:03:da:ff:73:78:58:f5:a5:cb:3e:26:6a:
         4c:4d:34:21:e2:b2:0d:e8:4b:ff:b2:14:9e:1c:61:4d:8b:88:
         1e:b9:16:77:d8:16:3b:fa:8b:c5:bd:aa:b4:75:be:a1:50:88:
         ec:7d:b1:1d:8e:0c:5a:56:4e:f6:d3:f7:45:0b:95:c5:5d:ab:
         c1:8b:3f:6e:5a:49:6f:6f:80:68:60:89:99:32:d2:73:d1:7e:
         22:a9:75:cf:cb:c3:69:15:39:53:26:8a:83:b8:38:59:82:6f:
         59:e6:05:60:e3:ae:ec:39:a6:ad:db:28:d6:8e:b0:c0:44:4c:
         8c:38:50:b5:a3:f7:5c:5a:fe:09:dd:4a:6b:1e:ca:b4:d8:08:
         51:87:e1:3d:8d:dc:08:eb:4d:74:47:89:72:79:a0:8d:fc:b8:
         75:4c:2c:94:8d:cb:cb:5a:00:c1:e3:5e:73:d7:66:9c:3a:b0:
         75:5d:84:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:51 2024 by rpki-client on console-fra.rpki-client.org