Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          fjvU+WlqjoVTDMdEx2evBf0k6y4R5Blxmbp1wwBXsLQ=
Subject key identifier:   33:29:9E:6A:67:D4:05:89:3C:4C:05:6E:FA:7B:3C:4F:27:F7:25:C5
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       34596ADCEB3C397260A9E096A38DCD3E5D8F7007
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Mon 30 Sep 2024 11:21:58 +0000
ROA not before:           Mon 30 Sep 2024 11:16:58 +0000
ROA not after:            Mon 29 Sep 2025 11:21:58 +0000
asID:                     273556
IP address blocks:        2804:9080:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:6a:dc:eb:3c:39:72:60:a9:e0:96:a3:8d:cd:3e:5d:8f:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Sep 30 11:16:58 2024 GMT
            Not After : Sep 29 11:21:58 2025 GMT
        Subject: CN=33299E6A67D405893C4C056EFA7B3C4F27F725C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:ee:69:03:e7:81:e7:7e:4b:62:c1:55:08:
                    08:27:88:aa:ab:0a:80:c5:18:c7:83:1f:63:d0:a7:
                    fd:4e:9d:1b:dd:49:81:d4:77:b7:bc:82:82:2d:18:
                    c1:26:df:5f:d5:53:9d:f6:8e:c3:7f:95:a5:43:b8:
                    e0:42:61:2d:ea:c4:3d:0e:c5:2c:bd:3b:6c:37:df:
                    d7:95:e7:34:92:b9:cf:d9:25:94:b4:f6:8f:1e:c9:
                    be:bc:c4:0b:1a:6c:32:8e:61:e9:54:91:8e:7f:4e:
                    3a:f2:b2:e2:5f:12:71:a4:83:c4:c9:79:20:2f:a0:
                    72:5b:5f:ad:7d:52:c7:9a:8b:80:64:af:0e:31:0a:
                    68:6c:a9:78:a6:29:7d:93:c6:7b:e5:df:4e:d3:61:
                    bf:85:c2:a2:29:d0:ca:eb:68:85:e0:25:6a:bd:94:
                    03:79:44:ac:b8:3c:8c:91:6a:4e:48:16:ef:1c:10:
                    df:3a:2a:ee:55:ae:4b:e9:02:62:81:0b:38:9f:71:
                    9e:e3:43:09:6e:b3:d5:8a:f6:41:cb:bc:23:3d:55:
                    7e:75:a0:04:74:d9:0e:36:c0:29:37:16:8e:5e:d8:
                    57:14:fc:7b:1c:1d:af:f2:8e:53:e9:2d:b3:a2:27:
                    2c:eb:7c:d1:a2:99:9d:c7:51:4a:6e:df:a1:1e:83:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:9E:6A:67:D4:05:89:3C:4C:05:6E:FA:7B:3C:4F:27:F7:25:C5
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a343030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:f7:57:c3:13:fa:1f:a2:9a:56:69:f9:15:97:7d:01:44:67:
         4b:47:98:88:ff:d2:fa:26:55:71:20:63:8d:e2:8d:87:9a:06:
         f5:32:e3:d1:a1:84:78:a3:3b:e6:c9:a7:a2:76:f9:b7:69:f4:
         8e:42:cc:d2:4c:5f:67:6c:85:dd:d9:00:60:8e:fd:45:a6:3f:
         52:c3:2b:94:e9:4a:9f:75:99:56:ad:cf:07:f8:2e:58:bf:5f:
         b7:79:27:1e:20:b1:68:e5:a2:2c:76:31:e9:31:4a:00:7d:66:
         df:41:6a:ba:58:07:eb:e3:de:95:64:77:be:0f:29:85:ee:d4:
         3b:62:38:3c:b9:60:21:ac:f7:38:eb:de:1b:25:af:10:90:6b:
         a0:7a:cf:ed:51:7b:71:4c:8e:23:68:40:f7:ee:33:00:01:21:
         d0:4a:65:9a:c3:2c:22:47:3f:2a:f8:9f:a8:13:7a:7c:1d:96:
         cf:b3:58:64:95:7c:f3:81:70:b1:90:28:2c:07:01:df:5a:aa:
         28:77:d8:3f:f7:a5:7c:94:96:28:c0:e7:21:22:65:f9:01:0e:
         b8:c1:9b:2f:83:47:f6:24:b9:35:e0:ac:79:8c:6a:65:ad:62:
         73:00:07:90:c4:61:f2:03:25:03:e4:51:47:d8:39:d2:c0:b9:
         28:4f:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:05 2024 by rpki-client on console-fra.rpki-client.org