Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          xqP1mUojHnJ8rF8X3vru5piq+0MT1uC2L9e6Ca/7eZE=
Subject key identifier:   F6:80:D1:56:9E:08:7B:04:9F:CC:EE:97:56:0A:02:A3:04:D9:35:8E
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       590CA4D8184D1110F5F1AAE900F57475568627FF
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:02 +0000
ROA not before:           Fri 08 Nov 2024 14:19:02 +0000
ROA not after:            Fri 07 Nov 2025 14:24:02 +0000
asID:                     267027
IP address blocks:        2804:4708:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0c:a4:d8:18:4d:11:10:f5:f1:aa:e9:00:f5:74:75:56:86:27:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:02 2024 GMT
            Not After : Nov  7 14:24:02 2025 GMT
        Subject: CN=F680D1569E087B049FCCEE97560A02A304D9358E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:95:21:73:d9:4f:b9:be:29:d8:c3:39:24:
                    f8:a9:57:08:b1:b9:61:b3:39:b6:1c:84:0b:9b:5f:
                    48:02:9d:a9:7b:f2:84:00:17:e0:14:55:4a:3f:df:
                    2f:74:e6:90:22:e5:5a:0c:5d:e8:76:c0:ac:d6:f5:
                    41:2d:86:80:e1:8d:18:6a:a6:d1:7e:49:9d:b1:9a:
                    79:6b:18:96:10:b7:09:0f:46:07:5e:34:69:3d:48:
                    30:17:de:5a:05:1b:a5:33:b2:d7:14:c5:0d:ba:af:
                    d9:d7:0b:c1:33:9b:b7:c7:79:84:4c:55:dd:ea:71:
                    d7:7d:d6:2e:3f:94:af:36:1a:b9:29:d8:b1:41:f2:
                    25:33:e7:50:88:82:8d:63:7b:1c:bb:20:1f:17:22:
                    5d:09:b3:71:2a:e6:f9:b1:41:03:10:3c:81:d1:f2:
                    ba:05:3d:9f:67:69:18:2d:9b:f4:c0:b1:82:40:1c:
                    73:be:78:bd:e0:e9:0c:d0:ee:74:3b:4b:c8:c0:9b:
                    33:67:32:4e:dc:16:e2:c5:7a:5c:4c:0d:3a:0b:ce:
                    5a:fb:86:8d:ac:cb:59:60:d8:02:7a:ca:74:70:0e:
                    ba:cc:8e:24:47:8b:17:5b:3e:00:37:de:2b:da:5e:
                    86:f6:6a:bc:c1:2d:65:6e:ec:15:6b:a0:03:c9:38:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:D1:56:9E:08:7B:04:9F:CC:EE:97:56:0A:02:A3:04:D9:35:8E
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a343030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         75:79:df:fb:1b:61:d5:a6:3f:fb:67:55:52:64:67:1b:cc:ff:
         e3:6c:4e:68:e5:b1:b4:46:12:ce:bd:68:ad:86:4d:12:2f:a8:
         4e:5f:17:f5:54:ca:4a:61:c7:bb:27:3e:73:5d:a3:8d:f2:f2:
         a3:ce:ea:2b:5d:83:c9:ef:a0:41:44:7e:77:40:2b:3e:6a:c4:
         2b:83:fd:ef:f8:37:b0:df:f5:5c:4e:1c:0f:e4:37:91:3c:c7:
         25:27:72:a1:51:22:74:0b:47:45:e5:17:f8:a7:1d:e1:ad:95:
         af:f5:a5:06:7d:a5:c6:ad:c0:b1:27:e0:06:5c:61:dc:2b:4f:
         e6:3e:c2:d5:26:cb:80:b4:b0:4b:b4:10:f7:d7:e3:dd:02:51:
         15:02:aa:7c:70:d3:70:2d:8e:36:f2:dc:54:82:4e:b6:fd:eb:
         c8:0d:05:e0:6a:fb:3e:14:ec:f9:b4:94:3c:27:fe:76:a7:2a:
         3c:85:e5:d0:46:86:a5:c8:98:46:40:81:0b:8a:ab:61:58:81:
         77:13:4a:53:08:2c:14:22:32:ce:cd:f2:e4:88:5b:d8:08:34:
         9e:74:e9:68:8c:a1:1f:00:ae:04:21:55:23:63:d7:a4:a4:ec:
         ae:01:17:31:b4:c1:0e:59:74:46:d0:73:ac:97:f4:96:5f:e8:
         52:75:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org