Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
File:                     323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa (raw, json)
Hash identifier:          8le1JRkAJqTfk1xZ9IZHePGtDkl9cf3yxhJWEkVE/rU=
Subject key identifier:   AD:B3:12:A3:3A:0E:C6:6C:89:BD:FB:5B:DD:9B:5A:E7:4D:A8:A6:70
Certificate issuer:       /CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
Certificate serial:       10AC0F24D6D529BF5B6AC4EED969B1169F9B05D1
Authority key identifier: 2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     270770
IP address blocks:        2801:80:3980::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl
                          rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ac:0f:24:d6:d5:29:bf:5b:6a:c4:ee:d9:69:b1:16:9f:9b:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:0a:e4:6e:84:b3:9c:81:07:84:8b:ba:dc:
                    bc:a1:30:55:0e:b4:b7:87:5e:07:a5:04:41:a1:71:
                    31:a4:7c:56:5e:6d:2a:bb:86:f6:89:c7:9f:67:f6:
                    9c:d4:71:44:77:9b:c8:8e:86:00:b9:ed:62:d7:39:
                    10:02:88:0c:49:e6:c9:d4:1d:b3:3a:a9:06:49:db:
                    45:b9:59:60:39:e9:f2:45:44:62:1a:92:30:f2:a6:
                    96:99:15:20:1d:f6:fe:f2:39:4d:9a:fa:54:11:25:
                    bd:fb:9c:ee:38:83:63:d7:6c:19:8e:9e:ea:c9:3e:
                    62:8b:ff:46:25:2f:a5:1e:15:7b:72:08:ea:ce:e0:
                    d9:2e:ad:2d:eb:27:c9:34:3c:a6:ce:07:04:4e:ff:
                    43:e5:50:cd:0a:40:d4:9e:7a:d6:63:2d:9e:7b:2c:
                    4f:02:77:8b:d1:f3:3d:ad:28:67:8d:1a:25:68:ce:
                    3e:89:31:fd:fa:76:c0:e7:59:38:50:1b:e2:f5:b8:
                    81:3f:18:d8:cc:23:d1:60:11:1c:aa:2e:ce:00:58:
                    b0:db:d3:5f:33:33:b0:1e:34:3c:9e:5c:2d:c5:52:
                    05:50:2d:84:65:ab:07:d9:2d:1a:56:9f:57:81:1f:
                    c1:04:c8:41:73:3c:7d:f2:46:c0:32:6e:37:90:f9:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:12:A3:3A:0E:C6:6C:89:BD:FB:5B:DD:9B:5A:E7:4D:A8:A6:70
            X509v3 Authority Key Identifier:
                keyid:2F:E8:A6:59:DB:4B:ED:A1:E0:B9:CF:63:1C:D2:BA:80:2A:77:C6:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FE8A659DB4BEDA1E0B9CF631CD2BA802A77C654.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/1/323830313a38303a333938303a3a2f34382d3438203d3e20323730373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:3980::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:17:2c:22:b4:7a:b4:16:31:0f:b9:d2:b1:bd:e7:fa:fc:39:
         a8:9d:9f:2d:a7:07:23:1a:5e:f1:2a:1c:5b:d6:fd:79:4d:a9:
         4b:78:d4:fc:b7:7c:4f:72:05:19:cb:fc:14:2d:f0:51:ea:6c:
         3b:06:26:e3:6e:9e:c9:de:13:a8:fa:e4:a8:61:80:cc:14:dd:
         e1:63:40:82:6a:a6:69:b8:f9:ed:37:90:9d:36:41:13:dd:8d:
         22:1c:0e:f9:67:64:b8:11:70:93:4c:dc:e3:b5:dd:e8:0d:1b:
         90:5c:fa:92:71:07:ab:06:07:da:19:5e:bd:1e:5a:d4:66:39:
         20:17:71:18:cc:3e:ce:fd:00:f7:f4:9a:bd:6b:56:06:f6:95:
         02:64:43:23:2a:57:ed:b7:01:e4:e9:79:96:f5:27:73:d2:44:
         cc:ad:30:37:b3:21:99:1b:43:6d:ed:dd:3f:f8:6b:97:b3:d4:
         b8:75:cd:2d:6d:7b:0f:f0:82:0e:c6:dd:9c:18:35:15:b7:fb:
         7e:6a:0e:52:b0:6a:1c:d0:8d:cf:71:76:8b:6c:3f:25:f6:f0:
         63:66:9b:04:84:95:4d:d5:5e:c8:46:f5:d3:02:43:3f:88:d3:
         87:e1:8e:eb:ee:60:4d:53:18:b2:8f:50:d6:1d:35:f2:bd:79:
         2a:14:52:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org