Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a343030303a3a2f33342d3334203d3e20323633333437.roa
File:                     323830343a313462633a343030303a3a2f33342d3334203d3e20323633333437.roa (raw, json)
Hash identifier:          2ccLnmMQVZJFg2q11E9vUjtR7aewaBcCP2Y4Zl6V+UM=
Subject key identifier:   10:1D:EA:4F:FE:D1:24:EC:5B:DB:54:18:8F:D3:38:B9:B5:3D:EC:5E
Certificate issuer:       /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial:       62B2A22655B621BE29C60C5EB59464CC83827B58
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a343030303a3a2f33342d3334203d3e20323633333437.roa
Signing time:             Sat 09 Nov 2024 13:43:46 +0000
ROA not before:           Sat 09 Nov 2024 13:38:46 +0000
ROA not after:            Sat 08 Nov 2025 13:43:46 +0000
asID:                     263347
IP address blocks:        2804:14bc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
                          rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b2:a2:26:55:b6:21:be:29:c6:0c:5e:b5:94:64:cc:83:82:7b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
        Validity
            Not Before: Nov  9 13:38:46 2024 GMT
            Not After : Nov  8 13:43:46 2025 GMT
        Subject: CN=101DEA4FFED124EC5BDB54188FD338B9B53DEC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:8c:4a:0b:1f:d1:8f:c8:17:b9:02:dc:aa:
                    e3:58:df:d0:0c:c2:d8:38:fd:25:67:ff:3f:f2:19:
                    1f:29:c5:b1:21:a4:0b:3c:47:8f:50:9f:be:b1:21:
                    bf:6c:d5:54:57:21:8e:c7:37:ac:dc:5a:61:e7:95:
                    9c:ba:ae:bf:72:bc:9a:e8:8f:16:3b:6b:15:2d:fc:
                    f6:ec:8d:95:e8:3c:37:90:b0:eb:e3:37:1c:a8:f8:
                    6c:c5:aa:be:60:02:98:5a:bb:91:b6:a0:2b:32:fc:
                    8c:a1:39:75:ed:10:c8:09:08:fb:73:bd:c0:64:57:
                    b0:16:6c:d1:a9:6d:43:56:04:65:df:a6:5f:c9:cf:
                    ac:72:ea:fb:03:08:e8:f0:a5:c9:42:5b:9b:cd:4a:
                    ec:5e:4e:ae:cf:be:c6:37:92:28:ff:d5:7f:7f:b1:
                    9e:dd:47:42:6a:d7:23:16:1b:29:7b:7c:9a:fc:38:
                    f0:f2:d0:b0:03:f3:ec:41:40:d3:09:f0:b1:dc:ba:
                    e2:b2:aa:61:09:70:29:7e:5e:8a:86:03:c1:f1:90:
                    a8:2a:c0:4c:9e:c2:3d:17:4d:95:91:44:c4:97:39:
                    13:87:72:fa:d6:6d:6a:be:f2:ca:33:71:28:73:93:
                    41:e1:c8:64:13:37:fc:8c:61:52:fd:e6:1b:7c:6d:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1D:EA:4F:FE:D1:24:EC:5B:DB:54:18:8F:D3:38:B9:B5:3D:EC:5E
            X509v3 Authority Key Identifier:
                keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/323830343a313462633a343030303a3a2f33342d3334203d3e20323633333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:e6:3d:2c:f9:d5:af:d7:62:30:f9:78:28:99:d3:86:33:
         42:ce:a4:37:48:39:90:cd:38:81:d2:81:3a:cc:34:b5:37:bb:
         9c:eb:34:a9:13:4e:1a:8f:8e:dc:78:3c:cb:32:9f:f0:3f:65:
         c1:d6:90:b8:1e:1a:2a:51:65:96:4b:86:28:27:ad:26:7f:8a:
         e1:d5:56:16:74:49:67:f3:4f:30:90:00:35:5b:8f:cb:dd:4e:
         a7:2c:9f:04:37:fd:93:92:5f:78:70:99:db:11:80:05:99:20:
         b5:03:e1:79:84:e4:42:3d:f2:62:09:15:6d:43:0b:4b:66:52:
         a4:b7:18:ab:01:75:8d:54:0e:56:fb:e2:67:a7:75:57:ae:7f:
         85:85:bc:a6:ed:c0:dd:de:65:05:f7:aa:28:81:ae:e0:6d:5e:
         09:f1:f9:43:65:3f:df:e2:b6:2a:01:15:84:8f:14:b9:65:2c:
         b4:a6:16:3c:d2:10:5b:85:a3:cd:11:ee:48:75:6d:26:00:d3:
         7c:dd:77:d9:2b:d6:38:67:d0:e2:fb:15:44:84:27:bc:21:61:
         04:ea:b4:3d:64:7f:df:87:29:aa:d9:3e:7b:b3:cc:f7:b3:af:
         7c:70:c3:28:5a:21:4b:fd:b8:bb:7c:c1:07:ed:33:25:db:5b:
         70:40:3d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org