Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          C+z68b8oAqPuWYoLPSLoq8pG7+x7VW5/yn2G+BQHcao=
Subject key identifier:   C3:AF:DD:C5:23:1E:53:3D:B9:F0:8C:58:EA:61:A4:7E:9D:DC:92:79
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       34B548A84B856F1BCFBC507B3296EAED1D6ADEB8
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:33 +0000
ROA not before:           Thu 04 Apr 2024 08:12:33 +0000
ROA not after:            Thu 03 Apr 2025 08:17:33 +0000
asID:                     269647
IP address blocks:        2804:67bc::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b5:48:a8:4b:85:6f:1b:cf:bc:50:7b:32:96:ea:ed:1d:6a:de:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:33 2024 GMT
            Not After : Apr  3 08:17:33 2025 GMT
        Subject: CN=C3AFDDC5231E533DB9F08C58EA61A47E9DDC9279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:3c:65:43:41:3e:91:19:22:06:bf:8e:b9:
                    4f:24:04:93:5c:b2:eb:cc:fd:bc:f1:d4:3c:05:d2:
                    38:83:63:9a:3d:7a:43:7e:c3:9f:98:8d:d7:0f:50:
                    f5:81:a5:e7:96:1a:f0:b8:f6:f2:fe:cb:98:e3:73:
                    5c:57:9a:ca:3f:8d:48:0b:f8:e6:59:d0:21:de:59:
                    ec:68:78:8a:88:cd:c6:e3:7b:3d:4a:bb:e5:ff:f6:
                    84:3c:66:1b:ca:f4:64:b6:9a:cb:de:52:d1:30:f1:
                    5a:1c:81:f8:e3:95:e4:e5:f6:31:f1:dc:2f:35:be:
                    a1:bd:6d:02:27:ea:ae:87:03:cc:45:e7:d0:cb:e9:
                    b6:7d:0e:f5:0e:5a:26:7e:0f:b2:f9:b2:ef:ba:70:
                    f0:f2:8a:bc:91:59:f0:49:55:b1:9a:c5:22:ce:73:
                    62:d9:f4:35:24:93:d2:f2:37:b8:01:70:61:4d:ea:
                    d4:d2:8c:6b:29:33:f8:da:57:61:ef:83:ee:47:15:
                    aa:47:14:33:66:f7:79:b2:63:76:da:a7:3f:87:04:
                    df:16:ff:98:34:96:23:1f:cc:ac:8b:ba:34:93:53:
                    76:4f:c0:f9:31:a0:aa:a7:75:c5:bb:ab:3a:de:81:
                    1f:66:33:c5:f8:fa:1c:70:fc:19:4c:45:f0:04:d5:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AF:DD:C5:23:1E:53:3D:B9:F0:8C:58:EA:61:A4:7E:9D:DC:92:79
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:41:11:22:d4:8d:c3:d8:62:e1:1e:de:5e:85:21:31:21:
         b8:de:1a:b7:54:8a:f8:52:2c:d7:da:f3:7a:8c:f3:64:4c:41:
         19:1f:e8:a6:fe:ca:0d:41:44:c8:89:77:d9:a7:11:30:c1:67:
         08:5d:67:1a:8f:23:b4:24:86:ff:2d:be:f9:c7:ff:a8:b5:e1:
         d2:01:b1:0c:d9:32:0a:c1:73:cc:56:1a:e3:42:50:71:88:3a:
         ba:9b:bc:de:63:a8:1c:b3:08:ee:d3:9d:ce:7f:b1:5c:b5:f1:
         c1:f5:eb:23:f8:8c:e2:09:2d:21:4e:eb:36:5e:30:f1:23:3e:
         56:89:63:55:46:98:96:d0:b8:da:93:0b:f1:24:41:c4:d2:dd:
         ab:7c:8e:61:ba:b2:e6:1e:29:1b:22:5d:ed:f3:82:f7:f0:e2:
         ff:e8:57:1c:1f:c8:18:e4:36:ae:60:81:5e:82:87:7f:64:cb:
         80:7e:09:1a:e8:0e:54:5d:b1:c5:6d:15:5d:75:bc:f6:a6:37:
         02:f2:67:f7:97:d6:0b:f2:29:02:73:56:9d:3d:9e:0e:82:8f:
         7e:50:2c:49:54:6a:8d:e9:63:73:da:d5:52:30:6c:28:39:90:
         b9:ff:0d:6b:a8:06:54:0a:26:7b:c2:b2:7a:88:ef:43:5b:1c:
         14:1a:e0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org