Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa
File:                     323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa (raw, json)
Hash identifier:          PRH0N+qfp0ej9q2oUQexMyFUbxZYP8cMglZBVUjylhM=
Subject key identifier:   09:5C:F2:A1:A6:8B:04:0C:1B:16:87:FA:0E:94:42:26:AB:22:18:A7
Certificate issuer:       /CN=2060EDA3B3A799358824BDE72CD21670F9F23032
Certificate serial:       0CDD2C13459544B3B6BD0E40ED4FEEBD269D6BF7
Authority key identifier: 20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa
Signing time:             Tue 26 Nov 2024 23:47:10 +0000
ROA not before:           Tue 26 Nov 2024 23:42:10 +0000
ROA not after:            Tue 25 Nov 2025 23:47:10 +0000
asID:                     266339
IP address blocks:        2804:3648:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl
                          rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:dd:2c:13:45:95:44:b3:b6:bd:0e:40:ed:4f:ee:bd:26:9d:6b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2060EDA3B3A799358824BDE72CD21670F9F23032
        Validity
            Not Before: Nov 26 23:42:10 2024 GMT
            Not After : Nov 25 23:47:10 2025 GMT
        Subject: CN=095CF2A1A68B040C1B1687FA0E944226AB2218A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:60:aa:4e:77:1d:09:c9:ec:85:a6:5f:de:
                    8f:fc:be:1e:cc:41:03:f0:a9:87:53:47:8c:3e:c6:
                    21:86:ee:37:b1:dc:ba:ab:96:ec:8e:f8:87:9b:d4:
                    cf:fe:df:1d:70:18:d7:4f:55:b5:89:39:c9:6b:0b:
                    26:ed:96:27:8b:c1:ae:32:b2:d2:7e:a3:82:da:b7:
                    50:8b:76:eb:76:ae:29:41:3e:59:33:ff:3a:13:d9:
                    03:23:b3:a2:4f:d6:31:a6:94:ae:09:7f:2a:96:f5:
                    a8:36:9e:93:0b:4a:46:7e:b1:b8:b5:16:4d:c6:c6:
                    eb:9a:97:15:14:12:75:f6:77:86:65:f8:15:0d:59:
                    46:a4:c1:71:2c:c4:20:a7:4b:79:e4:2a:30:e1:be:
                    30:95:d9:b7:b9:11:05:10:5f:ff:e2:e3:cd:bc:d0:
                    87:9d:72:24:1a:a8:90:f0:ca:64:3a:35:c3:e2:19:
                    9e:f4:8a:19:0a:8c:e2:28:0b:52:84:a9:a5:05:17:
                    00:0e:b2:2c:9c:02:4b:3a:c9:04:6c:e7:1d:ff:9c:
                    2b:1b:b4:a5:61:91:bd:64:b9:b4:d4:9b:f6:f5:99:
                    0a:fe:06:56:e1:13:ab:f3:46:1a:91:8f:d9:cd:d8:
                    de:86:eb:64:ab:c1:b0:ec:ba:d2:ea:cd:eb:57:40:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:F2:A1:A6:8B:04:0C:1B:16:87:FA:0E:94:42:26:AB:22:18:A7
            X509v3 Authority Key Identifier:
                keyid:20:60:ED:A3:B3:A7:99:35:88:24:BD:E7:2C:D2:16:70:F9:F2:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/2060EDA3B3A799358824BDE72CD21670F9F23032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2060EDA3B3A799358824BDE72CD21670F9F23032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5seJupBmt7DNaqkjFuoxGw4yKiZTyiZaETXsuDZrskHn/0/323830343a333634383a343030303a3a2f33342d3334203d3e20323636333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3648:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:f5:92:be:14:05:5b:aa:d9:51:a2:df:e5:c3:30:fa:50:
         98:ef:97:e2:56:6d:45:87:c1:82:5c:00:17:4b:9f:5f:f9:c7:
         c2:4c:88:52:b6:a5:93:ef:5b:d6:ff:9f:0c:16:ed:f5:20:87:
         2a:15:27:4f:e1:23:d2:a7:6b:cf:82:fb:70:4e:8b:26:d4:fa:
         a4:ce:f5:cc:8e:52:32:f4:4c:d5:0e:28:45:3f:a3:a1:fe:d7:
         05:b2:50:65:f8:8f:de:9c:b9:2d:a5:3b:1a:70:f8:c8:96:d1:
         15:06:ba:85:45:c1:10:df:42:6a:68:86:0f:77:14:12:86:6e:
         9b:e2:b9:fe:10:97:36:9e:5c:2e:82:d6:66:ec:70:ff:8c:d5:
         18:86:ac:ad:d5:55:48:94:e1:fe:2c:84:bf:19:2d:9e:e6:eb:
         7f:fb:1d:12:5b:52:f9:cc:73:69:ff:7b:21:c5:13:16:80:cc:
         79:a1:d8:cf:c7:53:a1:c9:12:a5:62:cf:4b:12:96:a1:a8:49:
         f8:9e:82:1e:07:4f:d0:06:af:18:5d:e9:e5:2f:c8:49:10:9d:
         4c:2f:eb:dc:d9:bc:1a:08:31:9d:f6:bc:1b:8e:2c:d5:e4:0b:
         2d:0f:83:16:39:c1:be:a9:bb:a8:69:74:6c:a4:3a:e2:f0:66:
         84:ed:30:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:29:42 2024 by rpki-client on console-fra.rpki-client.org