Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a633030303a3a2f33342d3334203d3e20323733373430.roa
File:                     323830343a386238633a633030303a3a2f33342d3334203d3e20323733373430.roa (raw, json)
Hash identifier:          L8sttHDgrky38HTOTf1Gffni1vmroy5EiVy6+3Zd43g=
Subject key identifier:   84:50:BB:F6:76:B0:69:40:8D:E0:C7:C6:97:0C:FB:43:18:49:DD:C2
Certificate issuer:       /CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
Certificate serial:       3121BF19E6A8009FFFBB78BB00033EAEDF09F167
Authority key identifier: 8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a633030303a3a2f33342d3334203d3e20323733373430.roa
Signing time:             Mon 21 Oct 2024 22:39:02 +0000
ROA not before:           Mon 21 Oct 2024 22:34:02 +0000
ROA not after:            Mon 20 Oct 2025 22:39:02 +0000
asID:                     273740
IP address blocks:        2804:8b8c:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl
                          rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 08:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:21:bf:19:e6:a8:00:9f:ff:bb:78:bb:00:03:3e:ae:df:09:f1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C2701B7080D1081AAECCD107A57E11F3AEB77BA
        Validity
            Not Before: Oct 21 22:34:02 2024 GMT
            Not After : Oct 20 22:39:02 2025 GMT
        Subject: CN=8450BBF676B069408DE0C7C6970CFB431849DDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:08:9e:c8:35:2d:5f:d6:e0:12:94:9b:4c:
                    51:12:f5:a0:8c:3d:24:76:37:70:bd:04:07:44:fe:
                    4a:e1:22:96:e4:94:cd:54:19:37:1d:64:a5:45:a4:
                    35:ba:e0:dc:66:b6:a2:8e:f6:68:79:1c:e7:c5:da:
                    da:0d:bd:de:1a:79:8f:99:51:5c:2e:3c:a6:ac:a0:
                    9f:c0:c8:82:ac:8e:67:5d:60:f0:db:fd:63:a1:5b:
                    ec:c2:e7:ec:33:4d:65:11:65:b6:35:c9:dc:80:2d:
                    cc:d5:9f:a8:0c:61:42:46:2a:36:63:21:1d:c5:d1:
                    c5:86:f8:e6:a0:8b:68:d9:a6:1b:bb:59:7c:4e:59:
                    45:02:35:0f:c6:01:77:8d:d3:23:1c:14:e6:ff:4e:
                    82:ca:5c:99:2d:1d:f3:4e:30:6e:95:d3:95:fc:ff:
                    d2:be:79:03:57:c6:6e:41:1c:52:ff:84:5d:3c:97:
                    9f:f6:fd:86:4e:9a:70:f5:f5:e5:1a:c2:d6:c8:25:
                    c9:ad:90:76:82:21:09:b3:48:c3:3d:66:63:aa:48:
                    49:f9:48:e9:a0:e1:c3:7b:d7:4c:1c:bb:90:91:55:
                    2e:28:04:ad:be:4d:4e:73:a3:a6:14:00:c4:a4:f4:
                    16:dd:3f:bc:28:f0:82:75:30:9e:6e:63:a4:f2:ba:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:50:BB:F6:76:B0:69:40:8D:E0:C7:C6:97:0C:FB:43:18:49:DD:C2
            X509v3 Authority Key Identifier:
                keyid:8C:27:01:B7:08:0D:10:81:AA:EC:CD:10:7A:57:E1:1F:3A:EB:77:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C2701B7080D1081AAECCD107A57E11F3AEB77BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8mJrZ8892itqFGXaXzccqvJ2npdXBgsqsD8i1Qb2nVsu/0/323830343a386238633a633030303a3a2f33342d3334203d3e20323733373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b8c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:c6:a1:01:80:23:17:09:17:57:d2:f1:ea:55:ab:96:88:26:
         1e:9a:0e:81:86:c2:01:8a:1e:87:b8:e9:e7:fe:63:27:39:9c:
         e9:f9:2b:30:ce:40:06:7d:2d:20:a7:02:b3:7b:b7:af:f4:44:
         44:ae:f3:99:be:35:54:58:39:eb:dd:5d:4c:5b:ee:60:f8:20:
         9b:a8:d4:c9:51:12:98:69:6f:35:5c:23:91:9f:11:d0:49:43:
         a3:69:ac:17:e5:53:a0:11:d4:ac:1b:6d:7b:4f:cb:1f:0f:d2:
         4a:48:8b:ef:9d:c5:7f:2a:c5:72:78:e5:de:b7:b0:55:2f:2b:
         51:21:0b:b0:86:94:f2:da:09:34:bd:80:3a:77:c1:40:ea:ce:
         a7:5d:11:f2:37:48:72:37:5c:ed:b6:ba:36:58:11:36:42:8b:
         c8:f4:a5:40:c2:ff:63:e9:37:15:e1:57:9e:ef:d0:e9:90:45:
         fa:04:92:90:22:a4:45:a6:8f:92:37:15:7f:5a:a5:43:a9:69:
         ff:29:16:48:a2:b6:fc:0e:ec:d0:70:16:8d:32:ef:84:fe:fe:
         db:9f:c6:f0:b0:50:56:da:a1:d3:d1:10:dd:56:c3:4d:73:8d:
         60:67:b5:ca:5d:67:9d:e9:43:97:6d:0e:1f:8d:1e:9a:fb:8e:
         70:9e:c2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 08:55:32 2024 by rpki-client on console-ams.rpki-client.org