Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          pjlTiFoYcdqfcR19f1V+tKUD+oq+ROXsbXwhPurBTbU=
Subject key identifier:   A8:FB:27:21:E7:A2:AE:34:A7:CD:7A:47:A4:DD:C8:38:3E:F0:2F:49
Certificate issuer:       /CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
Certificate serial:       071F16986CE788F332C5648958F3A53D8F4DF6F3
Authority key identifier: CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Fri 08 Nov 2024 14:24:00 +0000
ROA not before:           Fri 08 Nov 2024 14:19:00 +0000
ROA not after:            Fri 07 Nov 2025 14:24:00 +0000
asID:                     267027
IP address blocks:        2804:4708::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1f:16:98:6c:e7:88:f3:32:c5:64:89:58:f3:a5:3d:8f:4d:f6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC81BC052F2451BAC16FA42254D1686E0F97BE7B
        Validity
            Not Before: Nov  8 14:19:00 2024 GMT
            Not After : Nov  7 14:24:00 2025 GMT
        Subject: CN=A8FB2721E7A2AE34A7CD7A47A4DDC8383EF02F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:4c:c3:14:45:64:b0:72:cf:94:dc:c7:34:
                    0d:32:57:7d:22:3d:4b:03:40:9c:1a:c6:f7:01:7a:
                    ec:cc:5b:b4:ea:1b:65:8a:0c:94:22:cb:a5:f7:56:
                    fd:ec:92:54:c8:ec:5c:99:5c:c8:df:99:20:17:66:
                    17:dc:e4:e7:43:53:11:fe:77:28:d8:b5:c7:53:cb:
                    15:c3:8d:ba:18:e1:e9:bc:73:6e:ca:8f:0e:3e:be:
                    63:8d:e0:50:f2:16:3f:e4:38:ef:cd:07:a0:df:d5:
                    b5:b7:88:70:46:b0:b8:d3:35:74:18:c8:3b:92:3a:
                    d3:4a:42:dd:27:42:f1:2d:e4:f4:c9:a2:ce:f6:62:
                    25:e0:cb:3d:52:18:14:bf:2b:b4:52:ca:30:c2:bc:
                    0f:e4:4f:a0:b6:04:ab:f4:6e:40:a8:5a:72:ea:69:
                    da:93:4f:10:e7:1c:7b:e7:ab:60:7e:d0:0e:96:31:
                    3f:de:4d:2b:65:13:65:69:fe:7a:03:6a:53:0c:51:
                    ad:e3:e2:50:3b:89:3f:0e:5e:81:f5:f4:2c:f3:5c:
                    d6:ca:10:5e:10:21:5d:4c:f2:f5:a7:2b:74:92:ec:
                    8b:2c:c7:8f:37:59:ff:b2:2d:45:41:d5:0b:7f:69:
                    c7:07:f2:5b:b7:85:7d:90:8c:e2:32:a6:68:f9:d3:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:27:21:E7:A2:AE:34:A7:CD:7A:47:A4:DD:C8:38:3E:F0:2F:49
            X509v3 Authority Key Identifier:
                keyid:CC:81:BC:05:2F:24:51:BA:C1:6F:A4:22:54:D1:68:6E:0F:97:BE:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC81BC052F2451BAC16FA42254D1686E0F97BE7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:39:8e:d6:14:76:a3:8d:83:c3:49:29:4c:bb:c9:8b:b0:
         6c:b9:86:39:c2:0b:08:54:d4:9d:68:2d:d9:75:a0:10:c0:77:
         37:09:c0:1a:f0:fa:09:1c:02:b3:18:68:c6:a0:d4:63:5e:dd:
         46:cc:4c:11:01:df:13:bc:d5:a8:b9:70:06:9e:d6:71:7d:d1:
         40:2c:7d:74:d8:1f:4e:db:81:74:ee:7f:f7:ff:21:6e:0d:e0:
         a0:7a:5c:bc:f9:31:04:a3:e0:e3:c9:89:dd:8f:9a:83:3c:08:
         ee:f6:34:8c:0b:64:b4:39:61:cb:2c:4c:08:2c:0a:b8:18:2d:
         36:6b:3f:16:77:f0:cb:82:37:5a:02:3a:28:0d:d4:03:36:17:
         b4:57:f0:4d:bc:e3:61:96:7a:70:bf:a4:1c:08:59:c8:07:9b:
         13:d6:cf:54:78:65:ac:aa:b2:2a:d3:a7:41:0c:f5:dc:f6:f2:
         67:80:08:91:32:36:72:25:63:85:f0:e6:65:47:50:3e:5c:1d:
         51:32:e5:c1:b1:24:35:67:fc:62:b4:91:7c:d2:e0:14:28:2c:
         2b:5b:2a:1c:7c:0a:3d:03:6d:c3:5c:d1:86:c9:b7:0e:b3:45:
         85:1a:1b:53:6d:e1:a3:1e:76:f2:a7:33:8b:c1:40:f9:9f:71:
         12:30:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:43 2024 by rpki-client on console-fra.rpki-client.org