Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa
File:                     323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (raw, json)
Hash identifier:          Da0hhnz6xpScdLjOt2B65JaMSAkqrhMZDQ4dAHKffdI=
Subject key identifier:   85:1A:97:72:73:18:48:62:07:D7:3C:1F:C2:9F:E1:01:15:24:9A:E6
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       2A3084403566A1065F9685E841FEF5C180D38493
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa
Signing time:             Thu 04 Apr 2024 08:17:32 +0000
ROA not before:           Thu 04 Apr 2024 08:12:32 +0000
ROA not after:            Thu 03 Apr 2025 08:17:32 +0000
asID:                     269647
IP address blocks:        2804:67bc:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:30:84:40:35:66:a1:06:5f:96:85:e8:41:fe:f5:c1:80:d3:84:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Apr  4 08:12:32 2024 GMT
            Not After : Apr  3 08:17:32 2025 GMT
        Subject: CN=851A97727318486207D73C1FC29FE10115249AE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:10:8b:e2:1e:7f:ff:8c:55:38:3f:af:84:
                    89:e9:bb:ba:37:7d:cf:ba:98:e6:24:e2:48:48:a6:
                    9b:8d:e0:4e:3a:b8:e7:f5:26:3a:02:30:c3:79:7f:
                    ab:b7:87:35:b5:33:46:d9:ae:f2:1d:1b:b0:36:56:
                    87:2a:6a:68:e3:07:2a:70:f2:96:a1:fb:98:fb:25:
                    9f:51:3a:90:91:bd:e2:b1:ed:3c:5a:f0:1d:92:74:
                    90:5a:74:0a:09:4e:a0:9c:c6:3a:c7:14:18:49:01:
                    31:78:5e:26:e4:d7:b2:6f:b3:ca:de:bd:7d:bd:14:
                    b7:25:25:51:b3:22:23:83:48:de:01:51:fc:be:35:
                    cc:46:77:5c:89:15:6d:71:12:38:a6:9a:1e:b9:89:
                    7c:27:c4:b4:aa:49:82:be:f3:8b:69:b7:83:f2:8f:
                    7f:62:91:22:73:a9:24:77:c9:8f:32:16:f3:b5:5b:
                    ef:30:10:b9:6f:c9:45:21:7d:ec:d1:e5:ed:e6:81:
                    60:3e:ea:9c:2f:a6:5d:4d:2e:06:93:b3:d6:b2:5b:
                    c0:60:0f:83:3e:d3:60:f9:2f:16:96:2a:5e:cc:b1:
                    1f:3f:c6:ab:35:4e:d3:55:9c:bb:3e:84:03:50:6a:
                    87:6c:14:ff:fb:fd:60:dc:f9:9e:34:38:82:f9:be:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1A:97:72:73:18:48:62:07:D7:3C:1F:C2:9F:E1:01:15:24:9A:E6
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:86:3a:cb:22:0f:90:d7:86:ef:16:71:e2:d2:52:f7:a5:ed:
         8e:c9:b7:e5:a1:04:2d:9f:d3:74:56:8e:59:8d:33:25:3f:fb:
         3d:4d:22:0c:79:0e:ef:bd:64:3f:3f:41:90:b6:2d:e2:5a:86:
         40:cb:46:40:ee:43:48:06:00:4c:fa:59:e9:89:a9:da:63:a3:
         0c:b3:92:80:e7:a4:b4:37:b0:98:14:3b:4c:68:aa:4b:b6:25:
         9c:3d:50:01:c0:4b:55:11:1c:21:17:2b:6d:da:eb:17:72:4b:
         12:8d:be:51:a2:69:81:a0:52:63:e5:7b:bd:58:c1:55:90:bf:
         79:f4:e5:01:57:68:b7:cb:02:81:69:bb:ba:be:73:99:af:1f:
         f0:c5:4f:e8:af:b9:d7:e8:31:be:46:e3:db:17:9c:30:6a:0b:
         6c:d3:de:22:6b:06:85:0a:37:45:7c:16:d9:3f:fe:e9:fb:9c:
         22:cd:76:bf:45:d1:96:f3:6d:d2:79:4c:06:5e:52:69:c9:58:
         f9:99:13:93:37:d8:a3:32:36:ef:e6:11:94:14:d3:4f:8c:be:
         74:89:d7:e8:cb:bf:2e:27:c0:8c:08:8a:91:b2:57:5b:ff:d8:
         97:3b:dd:a5:5f:be:e2:d7:a3:08:3c:68:55:43:64:fa:42:59:
         d6:1b:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org