Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33322d3332203d3e20323733373430.roa
File:                     323830343a386238633a3a2f33322d3332203d3e20323733373430.roa (raw, json)
Hash identifier:          YpW69J5uRYFdd9ZVd8CFTmSca7pakhs4RrJeb5sgPQw=
Subject key identifier:   C2:8C:A0:DB:E5:8D:FC:F8:AC:73:FE:7A:AE:0B:97:EA:30:7D:E7:96
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       0B4377F3B72AB2A0AE93C0DE4CAE4AED39C3C9AE
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33322d3332203d3e20323733373430.roa
Signing time:             Mon 21 Oct 2024 22:39:00 +0000
ROA not before:           Mon 21 Oct 2024 22:34:00 +0000
ROA not after:            Mon 20 Oct 2025 22:39:00 +0000
asID:                     273740
IP address blocks:        2804:8b8c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:43:77:f3:b7:2a:b2:a0:ae:93:c0:de:4c:ae:4a:ed:39:c3:c9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Oct 21 22:34:00 2024 GMT
            Not After : Oct 20 22:39:00 2025 GMT
        Subject: CN=C28CA0DBE58DFCF8AC73FE7AAE0B97EA307DE796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:87:26:f4:4e:21:29:48:34:1d:d5:9d:c1:
                    5d:9f:d8:0a:70:6a:9a:d3:3c:a0:4d:a7:82:40:f6:
                    f5:34:41:67:cb:f3:9b:f0:87:9b:7f:a2:65:ce:f8:
                    d3:8f:38:38:0f:c4:73:c2:c7:e8:1e:0d:f9:87:15:
                    b2:01:a0:b1:fc:11:ec:54:71:8f:8c:aa:97:81:ee:
                    8c:6d:e2:54:d2:fc:49:ac:eb:83:44:da:d9:6f:d2:
                    04:8f:19:5c:bf:18:7e:0c:dc:12:ec:ef:20:e6:59:
                    1a:97:2a:41:df:fe:52:c9:45:66:c0:60:1f:b9:61:
                    e7:9b:fa:61:36:3f:5a:65:5d:72:65:14:d7:d2:ab:
                    9a:2b:b6:6b:7c:3c:fb:d8:46:0a:3b:26:bb:37:7c:
                    08:d4:18:45:e4:09:0e:cf:9b:3e:fc:e5:9b:65:73:
                    ce:33:f0:23:15:b7:7b:13:ad:65:a6:12:c5:61:27:
                    f7:ba:ce:ae:94:a6:1b:b8:fd:2d:51:39:00:23:32:
                    2d:76:d8:c3:dd:ef:5e:2a:e5:a5:81:c8:aa:bd:59:
                    0b:6a:6f:d1:9d:ea:0d:ec:6f:b5:d0:e7:1b:40:f3:
                    fd:a7:94:1f:1f:81:1e:ff:f0:15:f3:12:2c:6c:59:
                    f5:4b:7a:73:57:f2:30:2e:2b:4c:b1:be:c7:56:1f:
                    05:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8C:A0:DB:E5:8D:FC:F8:AC:73:FE:7A:AE:0B:97:EA:30:7D:E7:96
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a3a2f33322d3332203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:b6:ff:af:35:40:80:82:05:57:b9:a9:4c:03:a1:8d:1e:
         49:7a:68:2e:7a:cb:8b:fc:5e:f0:df:2f:0d:65:0f:60:5e:fd:
         d9:89:49:52:aa:8d:7b:dc:35:88:8c:01:b5:c6:5c:70:6b:ae:
         03:37:8c:71:75:55:ef:59:3f:64:0d:60:bf:58:b6:ac:af:1a:
         1c:b2:12:4e:81:82:18:75:47:5b:c2:88:a3:31:32:b6:31:f7:
         f8:46:29:d5:bd:67:0b:61:67:20:a7:cf:24:28:78:b7:59:57:
         7e:6d:69:ec:0d:10:1e:0c:f3:14:bd:d3:fe:bb:83:79:9e:a1:
         11:65:7d:22:05:e8:03:4f:d9:80:90:94:7f:75:cf:53:3c:7f:
         a6:45:d5:4d:b7:42:86:f2:55:81:fb:13:b7:46:9b:8b:50:36:
         06:78:19:7b:be:91:bc:73:7b:f3:47:bd:1d:fc:37:6d:87:4e:
         d6:a4:fd:72:c5:00:c8:88:b3:92:95:6c:1d:e4:50:35:67:b2:
         69:1a:58:d0:24:ba:fa:75:2c:84:26:f3:f6:78:c6:bd:5f:7c:
         18:0b:ea:01:0c:e5:b6:33:5f:a6:b9:59:53:fa:73:10:f6:f6:
         e6:d8:59:51:0b:a1:5b:a2:a2:f1:6e:28:96:49:e3:a8:b6:3c:
         c4:35:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:32 2024 by rpki-client on console-ams.rpki-client.org