Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa
File:                     323830343a376535303a3a2f33322d313238203d3e20323731363136.roa (raw, json)
Hash identifier:          cn9OTpxi4u8hzpaHdkjWlLQQ3O8rbReuSJ0yJsxw5wo=
Subject key identifier:   75:D0:0F:C6:F8:6A:89:0D:17:4A:0D:FB:DB:19:BE:52:7B:4D:AE:59
Certificate issuer:       /CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
Certificate serial:       0C9A2582B374D2449820E0CBAA0AD16F7BAAF08B
Authority key identifier: 8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa
Signing time:             Wed 10 Jul 2024 21:16:45 +0000
ROA not before:           Wed 10 Jul 2024 21:11:45 +0000
ROA not after:            Wed 09 Jul 2025 21:16:45 +0000
asID:                     271616
IP address blocks:        2804:7e50::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl
                          rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:25:82:b3:74:d2:44:98:20:e0:cb:aa:0a:d1:6f:7b:aa:f0:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
        Validity
            Not Before: Jul 10 21:11:45 2024 GMT
            Not After : Jul  9 21:16:45 2025 GMT
        Subject: CN=75D00FC6F86A890D174A0DFBDB19BE527B4DAE59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:50:fa:63:d1:4d:30:04:14:62:78:fb:3b:
                    d0:e0:0f:a0:2a:d0:70:ab:19:c1:4c:65:46:69:c1:
                    b3:52:11:09:a3:6e:ee:f4:e5:47:ad:ff:32:6b:61:
                    f2:67:ab:91:91:70:f9:bb:c3:8c:3b:be:49:cb:d8:
                    2e:23:4e:3c:11:94:0c:dd:21:01:b5:d7:31:a5:88:
                    27:74:55:59:85:d3:17:d7:f4:f0:a8:94:f5:b1:b6:
                    5d:11:ab:3a:42:2e:9d:8d:e4:90:ec:83:d9:80:07:
                    23:f1:10:d4:15:74:b3:5f:ad:4c:bb:89:65:f5:30:
                    2f:fa:ab:58:7e:96:d9:89:c0:70:92:e7:6a:66:32:
                    0f:24:68:4c:16:b4:7e:2e:e9:ab:eb:5e:97:3b:50:
                    9f:63:fb:13:14:73:dc:61:99:16:63:15:30:8c:19:
                    76:0d:1a:42:54:77:a0:d6:49:8c:0e:14:b8:85:19:
                    0b:12:86:1e:28:e0:64:80:86:cb:b7:9f:24:8c:d1:
                    3e:ed:03:69:93:ff:6d:fa:6b:b4:06:7e:09:ed:a3:
                    d6:a2:fe:a5:bc:b2:a6:ad:41:9f:e1:7a:67:28:ce:
                    93:59:d8:69:4d:64:a2:8c:65:de:4c:4a:71:43:40:
                    bc:23:6b:af:d1:ac:9c:3d:2d:4a:7d:0f:a3:6b:c9:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D0:0F:C6:F8:6A:89:0D:17:4A:0D:FB:DB:19:BE:52:7B:4D:AE:59
            X509v3 Authority Key Identifier:
                keyid:8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:61:5e:22:3e:e6:77:30:6a:28:e3:a7:c4:42:02:0d:f7:
         32:85:f8:1a:20:cd:15:8c:69:68:c3:67:66:db:8a:b4:f9:0c:
         69:83:83:6f:fa:68:b7:ee:50:99:8e:b7:a7:80:17:08:c6:c3:
         8f:09:93:1c:82:39:a4:04:3a:52:60:60:fb:88:d3:61:2a:8b:
         16:4d:03:9a:8f:f7:e4:86:0b:39:30:ad:b1:9a:b6:48:61:da:
         49:74:b9:55:af:5d:da:63:bc:6c:7c:a1:f9:0a:4d:c2:e2:b0:
         28:3e:4d:d2:85:06:63:a6:4a:37:ea:13:59:2b:68:dd:ac:fb:
         64:40:96:bc:88:a4:e8:66:15:0d:d4:cd:0a:14:77:37:cd:e4:
         7e:eb:97:b4:6e:b8:65:08:a8:b0:1e:ed:8c:a7:f8:b2:21:a3:
         f9:06:c3:ec:d0:4d:1f:57:9e:70:c7:23:7a:69:9e:ae:f8:80:
         f7:d1:7f:0c:ef:3b:d4:44:2b:2c:30:24:2a:8f:cd:a5:3a:0b:
         d3:e2:99:10:71:4f:3d:28:a3:7e:ea:16:69:5f:d1:b1:ca:31:
         95:b3:90:d5:ff:6e:8b:e5:6d:ff:1a:44:6f:c6:8c:c5:ee:19:
         ea:d2:e7:e6:11:56:1b:1a:d5:6b:59:18:4c:e1:0b:b4:fa:be:
         82:5e:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:11 2024 by rpki-client on console-ams.rpki-client.org