Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          Gu++MIMj8v9SENfWu0MT22cKgkC2h1znf/xf7okVt6c=
Subject key identifier:   E5:A8:A6:26:02:C8:1E:C9:E8:C1:4B:B4:01:EA:CA:76:93:43:E7:CD
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       409C075379F5C7E4B155712DA61C2A806C2D8357
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:33 +0000
ROA not before:           Thu 04 Apr 2024 08:12:33 +0000
ROA not after:            Thu 03 Apr 2025 08:17:33 +0000
asID:                     269647
IP address blocks:        2804:67bc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9c:07:53:79:f5:c7:e4:b1:55:71:2d:a6:1c:2a:80:6c:2d:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:33 2024 GMT
            Not After : Apr  3 08:17:33 2025 GMT
        Subject: CN=E5A8A62602C81EC9E8C14BB401EACA769343E7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:48:a2:27:bf:3d:d9:b2:cb:91:bd:0c:71:c3:
                    9d:9c:92:bb:c5:3d:dd:9a:fc:45:4e:fe:41:43:e3:
                    d5:83:c6:98:99:69:1f:bb:8c:f6:19:63:a8:57:b1:
                    d5:5e:bd:e8:47:c8:26:3c:ee:61:c5:ae:80:3c:38:
                    d6:4f:71:86:a1:b8:9d:66:19:27:fe:77:7d:b1:d6:
                    8d:e3:4d:ab:3b:85:f8:ab:84:83:38:9c:ff:73:1c:
                    f6:ae:ae:e3:43:9a:ab:a5:e6:ad:d1:63:e6:33:d6:
                    dd:a1:c1:14:d4:5a:e4:92:d0:67:9e:7a:92:62:8b:
                    be:9d:c0:97:a9:d5:ec:ac:50:f7:19:0b:fe:40:2d:
                    b0:04:1d:7e:6f:94:49:55:bb:cd:e1:8e:22:33:27:
                    45:26:8d:40:96:3c:f4:ba:68:2d:48:9f:aa:b5:92:
                    90:85:d4:0f:58:f9:67:08:4d:37:87:8e:5b:c4:e2:
                    81:a9:9e:13:98:3d:59:25:96:ed:6f:1b:c0:cb:e4:
                    5d:ba:56:2d:15:46:93:19:24:9c:80:95:8c:ca:a5:
                    62:66:0e:7a:b7:f1:4c:6d:a2:b7:e9:90:3a:3d:fa:
                    90:99:52:39:18:7d:27:67:4f:e8:1e:4b:05:91:09:
                    b7:ac:89:fe:96:1c:43:4b:be:8c:bb:b9:47:84:b9:
                    14:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:A6:26:02:C8:1E:C9:E8:C1:4B:B4:01:EA:CA:76:93:43:E7:CD
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bb:e3:77:14:ed:dc:66:15:97:4f:d5:73:08:da:d4:65:75:3b:
         04:8c:a4:f5:fc:b5:89:0a:18:be:97:1d:09:5e:75:6f:60:22:
         dc:91:c1:9e:05:f6:e0:aa:2b:94:b6:96:d7:2c:27:67:75:b5:
         7b:00:1e:3c:f0:89:56:bc:07:24:e4:29:b5:10:55:4e:11:53:
         7c:2b:b6:8e:ab:bd:ef:0c:47:6e:5d:1f:e5:47:1d:b5:17:7c:
         ae:bd:43:8c:df:b8:a6:6b:1f:e0:9b:74:93:4d:ca:21:72:94:
         e4:49:81:b1:75:92:ff:87:78:31:c0:34:f1:da:ab:fd:64:5c:
         5d:20:72:e5:59:2c:0b:7e:ed:62:71:4f:ea:81:dd:25:b3:68:
         d9:99:4a:74:99:a1:3c:e0:df:e6:be:7f:a6:23:23:d9:15:c7:
         18:2c:f4:c1:7e:cd:90:23:a4:8b:04:f9:83:71:ce:9d:df:50:
         2f:ea:57:58:1b:6b:fc:61:a3:c7:b1:f6:ce:0b:4e:91:6c:cb:
         c4:10:e0:03:f9:58:a2:4e:e6:cf:eb:10:f0:bf:1d:3c:cc:d4:
         2c:5b:5b:7b:b7:05:f7:12:4a:0e:70:7c:5e:cf:4a:30:99:4e:
         d5:79:ab:e2:26:dc:4b:aa:ac:bb:89:89:e4:86:aa:10:e6:a6:
         c5:53:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:48:02 2024 by rpki-client on console-ams.rpki-client.org