Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a343030303a3a2f33342d3334203d3e20323733363937.roa
File:                     323830343a386164633a343030303a3a2f33342d3334203d3e20323733363937.roa (raw, json)
Hash identifier:          VRkA82PnTW9x5rGQ63b0fZdrG7X/zfeogzUgW9Pfbk8=
Subject key identifier:   AE:1C:09:28:EF:F2:96:1F:10:B9:0D:3A:3E:C4:86:C7:83:8C:6F:24
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       4C0BE1841B626C5B22844651A1F8016A81164C75
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a343030303a3a2f33342d3334203d3e20323733363937.roa
Signing time:             Tue 10 Sep 2024 15:15:18 +0000
ROA not before:           Tue 10 Sep 2024 15:10:18 +0000
ROA not after:            Tue 09 Sep 2025 15:15:18 +0000
asID:                     273697
IP address blocks:        2804:8adc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0b:e1:84:1b:62:6c:5b:22:84:46:51:a1:f8:01:6a:81:16:4c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Sep 10 15:10:18 2024 GMT
            Not After : Sep  9 15:15:18 2025 GMT
        Subject: CN=AE1C0928EFF2961F10B90D3A3EC486C7838C6F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:2e:ae:dc:bd:35:db:ed:88:7b:f5:55:d6:
                    5a:71:d6:32:92:68:73:02:95:35:db:7f:6e:54:ba:
                    40:a1:08:66:f0:e1:44:e4:cd:43:db:6a:77:b8:df:
                    b0:9c:41:1e:c9:9c:dc:92:59:32:07:2c:fb:ac:ae:
                    6f:f0:6c:c3:96:2a:39:5b:46:18:8a:03:50:46:10:
                    31:41:ba:9c:bc:13:e6:6f:af:3d:f0:b9:d4:93:d0:
                    8b:dd:0a:b8:98:ec:f1:9d:d1:a1:73:3c:fe:0b:d5:
                    60:50:8b:b0:e0:5b:a0:3a:51:0e:b8:7f:18:c9:53:
                    ac:39:ca:78:e6:6e:6d:6b:be:0d:ac:92:02:0e:58:
                    82:24:dd:62:d8:3b:a3:9d:42:da:bd:09:85:7f:87:
                    4a:89:89:41:1b:74:41:90:f0:fc:3b:1c:fa:1b:43:
                    78:37:f8:81:e5:cf:4b:6a:c6:a0:fd:f2:23:19:4e:
                    2c:94:ed:85:4f:05:7d:48:11:a8:d5:c5:7b:5f:a8:
                    5c:1d:9f:35:52:be:4f:a8:15:ac:a8:8f:6b:99:12:
                    56:e4:4d:55:f1:e6:d4:4e:d2:89:95:1c:9b:b9:0c:
                    08:21:1f:12:05:27:81:81:ed:93:a2:d0:f7:b6:6e:
                    2f:b1:12:01:9a:68:cc:4a:c8:db:8c:a3:e8:73:52:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1C:09:28:EF:F2:96:1F:10:B9:0D:3A:3E:C4:86:C7:83:8C:6F:24
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a343030303a3a2f33342d3334203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8adc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:be:bb:6d:24:b4:4a:e4:04:1a:96:0a:9b:ef:15:93:be:23:
         ad:43:2f:56:01:e6:ac:d5:b7:8a:22:1b:f1:97:76:11:28:aa:
         97:8b:2c:b0:06:76:03:3b:b5:24:91:7c:b3:25:a1:62:20:bd:
         14:4d:6c:75:83:69:8b:ff:c5:17:f0:dc:cc:59:db:28:e8:8a:
         9e:3d:62:f4:f4:ba:e2:42:87:f0:c5:15:f4:d6:38:31:d4:bf:
         4e:85:25:5c:20:fe:56:e7:bf:28:83:97:64:27:04:70:9d:e9:
         8b:7c:60:88:39:23:29:9e:66:13:82:36:dd:1f:72:05:20:ee:
         07:44:a6:16:fa:5d:f9:45:4c:89:8d:15:57:3e:43:18:e5:09:
         12:49:6f:a1:ec:b6:19:8d:83:d8:4d:23:59:7b:38:f2:6d:15:
         4d:a4:42:0d:32:ab:af:b0:97:5e:20:0a:e6:75:2c:4b:35:40:
         68:dd:88:89:ee:f6:5c:a3:3e:08:4a:6c:55:68:fe:12:b4:c4:
         5c:c2:77:79:c5:2f:8b:c9:6a:7f:5a:c7:31:fd:be:46:7f:a9:
         dd:73:76:53:67:ce:94:54:0e:46:f8:b1:b5:15:a9:a8:9c:5e:
         50:6f:92:21:2d:26:2f:78:c4:b6:7a:27:67:f9:1c:32:6b:43:
         45:ea:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org