Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a343030303a3a2f33342d3334203d3e20323733373430.roa
File:                     323830343a386238633a343030303a3a2f33342d3334203d3e20323733373430.roa (raw, json)
Hash identifier:          bR8b+HnjFUk2PBcZuWie/3Xqfxoju+/AwcB69u2rjOs=
Subject key identifier:   4A:8E:80:73:7C:42:29:62:4E:DC:AA:71:03:1A:F1:60:89:6B:90:9B
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       555B1306658994E96F5DBE0FFD1841FCB796B672
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a343030303a3a2f33342d3334203d3e20323733373430.roa
Signing time:             Mon 21 Oct 2024 22:39:02 +0000
ROA not before:           Mon 21 Oct 2024 22:34:02 +0000
ROA not after:            Mon 20 Oct 2025 22:39:02 +0000
asID:                     273740
IP address blocks:        2804:8b8c:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:13:06:65:89:94:e9:6f:5d:be:0f:fd:18:41:fc:b7:96:b6:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Oct 21 22:34:02 2024 GMT
            Not After : Oct 20 22:39:02 2025 GMT
        Subject: CN=4A8E80737C4229624EDCAA71031AF160896B909B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:00:fb:49:ce:2e:3b:3a:c4:96:b0:95:4f:
                    7a:03:4c:74:06:c4:7c:a3:4e:a4:a0:c4:a8:06:1b:
                    b7:ad:29:6d:14:d0:54:26:ff:f2:d1:cd:04:1e:24:
                    23:dc:f2:e2:b2:8c:e8:a1:08:18:5e:ff:2d:73:1e:
                    df:71:0a:dc:fb:fb:f4:33:68:ef:20:8c:c3:ea:a7:
                    1d:62:4b:1a:7a:6e:dc:b4:f6:21:d9:c9:7f:86:55:
                    aa:99:ab:16:72:1e:9a:b0:33:7d:96:76:b2:9a:84:
                    5f:e9:6b:f3:6f:c8:75:f1:d2:26:d4:b4:b0:8e:f6:
                    e4:6d:7c:0c:91:be:54:97:bc:0c:b4:60:bb:0b:d0:
                    be:90:40:aa:a3:b7:cc:90:04:42:06:af:54:56:93:
                    cc:63:28:70:9a:9c:61:a5:21:67:d1:76:7b:c5:dd:
                    c8:c4:a4:88:dc:b0:11:65:f2:87:b6:24:0b:02:4a:
                    62:fa:91:5b:62:ef:ad:27:7a:51:5e:59:3e:32:40:
                    4a:5e:a5:ce:f9:52:1f:f7:06:ea:c9:8f:64:fa:21:
                    e7:a8:fd:10:61:54:29:bc:25:f0:89:7d:37:d8:55:
                    c0:e1:2c:dd:5e:71:75:d1:1a:d9:c0:e5:fb:3a:35:
                    3d:ba:b2:79:77:e7:d7:0e:13:c2:25:43:01:2d:77:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:80:73:7C:42:29:62:4E:DC:AA:71:03:1A:F1:60:89:6B:90:9B
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a343030303a3a2f33342d3334203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:c5:23:67:30:dd:14:78:04:22:ec:42:68:52:b3:1b:03:
         58:3e:16:da:ff:19:8d:46:12:d3:99:ba:bd:6a:08:96:dc:76:
         38:70:bb:8e:4d:24:57:98:ac:8f:94:28:5b:3c:64:9f:45:51:
         57:f8:ba:cc:97:61:a9:9d:40:22:e6:a9:21:21:cf:9b:50:f8:
         72:0b:0e:77:b7:ea:f0:4a:e4:58:21:5c:47:39:8e:7a:fe:eb:
         79:3f:a1:ba:c6:ba:70:4e:5a:f4:a5:ce:b5:a1:78:40:1d:0b:
         6d:13:b5:08:b5:17:e2:4e:31:16:ee:26:79:e5:43:ab:f4:60:
         78:07:3d:35:72:38:bb:0a:19:3d:ca:fc:9b:e1:c4:cd:29:b6:
         ed:5b:ca:57:6f:34:10:73:4f:2c:25:7d:49:f1:65:ea:88:bd:
         28:86:83:4d:69:01:22:76:55:f2:85:33:c6:87:f9:7a:57:1b:
         f4:1b:5e:87:d3:8e:36:34:fe:ba:2f:96:a8:35:be:1a:76:b9:
         c1:ce:1f:82:01:2b:52:1c:3f:5a:78:ca:84:48:df:00:e9:55:
         0f:89:33:f5:c9:50:89:97:75:3b:ed:0c:f3:3a:75:9e:7f:16:
         85:e6:3a:2b:31:da:69:3f:f2:7a:0c:03:ec:4c:7a:00:49:fd:
         ae:96:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:52:03 2024 by rpki-client on console-fra.rpki-client.org