Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa
File:                     323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa (raw, json)
Hash identifier:          duIZGbxld2DmsEoTjbcF1K31NxmYA0ghMQ60ccWc8qU=
Subject key identifier:   8B:1D:56:13:4A:FD:20:B2:F2:0A:35:8A:AE:63:F5:98:E3:95:93:0B
Certificate issuer:       /CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
Certificate serial:       343A274DCADE1D6F4C6F79777C55E42C1547B1DC
Authority key identifier: 8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa
Signing time:             Tue 30 Apr 2024 13:12:38 +0000
ROA not before:           Tue 30 Apr 2024 13:07:38 +0000
ROA not after:            Tue 29 Apr 2025 13:12:38 +0000
asID:                     265106
IP address blocks:        2804:32f0:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl
                          rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 06:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:27:4d:ca:de:1d:6f:4c:6f:79:77:7c:55:e4:2c:15:47:b1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C7C3CED5BDDCC80C0FCDD46A8287514BB682859
        Validity
            Not Before: Apr 30 13:07:38 2024 GMT
            Not After : Apr 29 13:12:38 2025 GMT
        Subject: CN=8B1D56134AFD20B2F20A358AAE63F598E395930B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:be:c9:97:37:01:bf:22:e5:93:8d:12:d0:
                    84:c3:93:e3:9f:1a:80:11:e8:03:35:fb:c4:ae:e8:
                    61:89:07:c5:0a:d4:26:b9:da:34:6b:69:eb:24:ef:
                    3c:9e:df:61:f4:20:c9:2c:6f:06:2e:2d:ab:dd:1c:
                    72:91:18:ae:29:2f:00:77:48:73:96:92:57:9f:85:
                    92:0b:d7:32:50:5e:b8:af:18:aa:c7:da:b6:cb:ac:
                    fa:08:5d:14:29:0c:51:09:8e:7f:a7:eb:d6:25:ca:
                    7f:d3:2a:be:31:5c:75:b7:51:6d:7c:a6:f4:e2:a8:
                    c6:e7:46:c8:b8:13:c0:d8:ac:14:00:12:f8:2b:83:
                    02:85:95:b4:36:c6:9b:75:e8:dc:60:e8:e8:67:82:
                    37:b2:48:5f:12:8b:13:19:14:5f:43:b8:f6:c3:a5:
                    b1:0d:15:86:90:b5:3b:99:a3:0e:83:b1:8a:b2:8e:
                    f7:7d:53:9e:d8:3b:ae:37:3d:b3:5d:b7:0b:20:95:
                    19:16:54:a3:32:32:22:17:fd:2e:f4:6f:bb:19:81:
                    31:22:aa:b2:36:b9:be:c6:f3:c6:74:05:db:8f:ef:
                    02:0a:88:ef:3a:bc:c4:bd:85:d5:6f:25:2b:07:09:
                    1d:d8:75:3d:fa:f9:ef:a1:13:44:d4:4a:20:94:36:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:56:13:4A:FD:20:B2:F2:0A:35:8A:AE:63:F5:98:E3:95:93:0B
            X509v3 Authority Key Identifier:
                keyid:8C:7C:3C:ED:5B:DD:CC:80:C0:FC:DD:46:A8:28:75:14:BB:68:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C7C3CED5BDDCC80C0FCDD46A8287514BB682859.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73G9tTfFvoxH9TgBH99kDti77jaLq9vZTCxkhgxaarWV/0/323830343a333266303a323030303a3a2f34382d3438203d3e20323635313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32f0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:3d:99:04:86:6d:8a:05:dd:af:93:b0:ed:3d:32:2b:bc:
         eb:46:cc:8e:8e:62:eb:4f:f3:2d:78:d5:fc:67:08:05:e3:e3:
         6e:a4:fb:56:b5:b5:e8:c2:9a:82:9d:07:a3:b7:09:45:14:b9:
         a0:57:f4:20:2b:e3:7a:21:a9:01:79:55:1f:0c:64:3c:f3:ad:
         d9:20:3c:d7:88:76:d2:74:02:a3:dc:12:17:b7:27:fe:8f:76:
         7d:04:ac:cb:65:6e:97:48:a3:19:61:79:ca:f3:15:ae:da:82:
         26:ff:8f:e8:de:57:b3:72:06:57:6b:f5:19:e1:fc:09:20:38:
         40:f4:8a:23:b0:d7:52:36:81:ab:4a:4a:36:6b:b7:05:46:16:
         94:57:77:f5:d2:5e:48:07:c8:94:75:ac:ee:24:82:a0:bc:fc:
         84:d8:56:11:f5:5b:a5:33:a1:10:6d:4f:bd:03:c8:9c:e8:e3:
         8d:60:4e:98:46:37:b5:42:0d:31:31:15:5c:47:b8:7f:e8:d7:
         02:49:c8:a2:b9:0e:ff:c8:67:43:f0:63:1f:0f:fa:32:60:04:
         0f:f6:e4:83:54:7a:71:ea:97:57:b8:5e:be:7e:ed:d3:c8:d1:
         e3:26:fd:87:a3:87:16:2f:b9:28:31:a0:9c:10:2d:a5:bd:9b:
         5b:36:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:31 2024 by rpki-client on console-ams.rpki-client.org