Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
File:                     323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (raw, json)
Hash identifier:          IZpGq/lK9FtMstTk3L4t3iWBaBjdWYGFNfSNNIxglEw=
Subject key identifier:   CE:00:AB:D3:48:95:CB:4C:2D:FC:7F:65:1D:C4:4B:10:05:48:7E:00
Certificate issuer:       /CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Certificate serial:       406E19A006D878CA45C2039ED8286B4DF6B7BB76
Authority key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
Signing time:             Sat 31 Aug 2024 14:14:50 +0000
ROA not before:           Sat 31 Aug 2024 14:09:50 +0000
ROA not after:            Sat 30 Aug 2025 14:14:50 +0000
asID:                     268091
IP address blocks:        2804:57dc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl
                          rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6e:19:a0:06:d8:78:ca:45:c2:03:9e:d8:28:6b:4d:f6:b7:bb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
        Validity
            Not Before: Aug 31 14:09:50 2024 GMT
            Not After : Aug 30 14:14:50 2025 GMT
        Subject: CN=CE00ABD34895CB4C2DFC7F651DC44B1005487E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:8a:8b:bd:64:e1:ab:c9:8e:79:fc:d5:68:
                    4f:2d:75:99:9c:f4:24:54:b9:35:f0:6d:a8:16:ff:
                    54:76:0b:d3:90:b2:0c:87:7a:87:3d:f2:fa:34:4f:
                    40:b2:3a:81:ae:bd:d8:d8:7b:c7:17:f1:ad:ca:55:
                    62:ab:89:1a:5d:87:b8:ea:9d:e5:5d:9f:3b:24:5d:
                    c9:54:2b:44:b1:76:01:17:49:3c:65:27:c9:a4:5e:
                    59:32:0c:26:95:63:7a:37:2f:d8:d0:d2:d9:29:7e:
                    fd:80:2d:9b:c6:8e:65:2b:e6:76:0d:17:f3:e7:72:
                    e1:d6:17:52:56:f1:a0:5d:ab:59:f0:1f:78:b1:e0:
                    96:b3:c1:b2:25:48:f0:a4:7a:2b:33:ab:94:68:5f:
                    a5:46:23:d3:4c:16:27:ad:74:ba:6c:ea:4f:58:d1:
                    94:04:91:8f:cd:d8:35:42:c5:16:78:15:d3:d6:a2:
                    2d:40:a1:55:f0:f7:49:ed:39:c8:a1:fe:4e:06:9d:
                    af:23:e7:19:8a:e0:3d:fa:97:7d:9b:ed:59:ed:1e:
                    03:bf:93:36:c8:70:bd:e7:e9:e7:c7:37:1d:46:03:
                    86:d0:c2:c7:fd:07:16:87:20:87:d5:e2:ab:8b:0d:
                    98:69:6e:40:fa:f5:eb:6a:41:7c:7e:ae:70:65:53:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:AB:D3:48:95:CB:4C:2D:FC:7F:65:1D:C4:4B:10:05:48:7E:00
            X509v3 Authority Key Identifier:
                keyid:F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57dc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         38:a0:ee:bc:5e:a9:40:51:e3:09:84:26:85:bf:2e:6e:3d:76:
         f7:fd:12:4b:55:34:7c:2e:69:ac:33:bc:24:b9:1d:c4:4e:db:
         7a:47:7d:81:5d:e5:ea:02:25:82:5e:0d:d0:ec:9d:fb:12:5e:
         da:1a:c5:32:1d:18:b5:19:30:d9:27:b0:b1:56:9a:ba:44:ec:
         fe:02:ab:a9:a5:1b:8a:d0:2a:3d:b6:11:d3:e3:94:fb:20:82:
         7b:34:0e:a8:a0:02:f3:a1:57:9f:9d:a7:0c:e9:88:c0:7a:0b:
         33:c9:74:fc:8a:37:d3:ce:5a:b2:2c:8a:b3:1a:28:45:1f:f3:
         f4:38:2b:b3:85:e0:6f:e2:85:6d:66:a9:ca:c1:32:92:cb:25:
         23:9b:bb:a7:fe:fd:e7:9f:2f:9b:0f:6d:99:45:cb:d9:ed:eb:
         85:76:93:00:ec:1a:f9:80:94:94:07:4e:a3:93:19:c9:46:25:
         6b:86:51:03:1b:4f:4a:30:2d:10:c3:51:8c:ba:2f:f4:58:6f:
         3e:54:7e:16:45:aa:7f:7e:26:e6:84:4e:48:8d:24:51:85:16:
         35:0d:bf:88:4a:ae:6d:ae:cf:68:68:22:de:87:bd:72:b6:e9:
         5f:af:ee:0b:08:69:48:b9:7f:6f:da:c1:96:14:b7:d8:d3:5f:
         20:8b:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 14:49:01 2024 by rpki-client on console-fra.rpki-client.org