Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          n32ne4MZwLZebbC5a5u2UEC0dXoN7vveRrmHoayKoLE=
Subject key identifier:   82:8A:0A:87:1B:95:B8:A3:FE:DE:64:EA:53:20:A5:5A:DE:9F:9A:1A
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       4557B1A064E4B4879D4D52128E00E9B7A7846D6B
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Mon 30 Sep 2024 11:22:29 +0000
ROA not before:           Mon 30 Sep 2024 11:17:29 +0000
ROA not after:            Mon 29 Sep 2025 11:22:29 +0000
asID:                     273556
IP address blocks:        2804:9080:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:57:b1:a0:64:e4:b4:87:9d:4d:52:12:8e:00:e9:b7:a7:84:6d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Sep 30 11:17:29 2024 GMT
            Not After : Sep 29 11:22:29 2025 GMT
        Subject: CN=828A0A871B95B8A3FEDE64EA5320A55ADE9F9A1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:43:4b:9e:63:5e:73:64:f9:11:85:06:bc:
                    98:c5:75:df:4d:d2:7d:a4:02:20:51:2f:b7:48:2b:
                    f1:f1:6f:c9:be:fc:28:3a:16:84:06:72:c0:41:b2:
                    66:a4:2b:98:70:a3:8f:b6:51:15:e9:f9:80:9c:13:
                    15:e2:3e:d4:9a:71:78:34:30:60:32:fc:c8:e2:39:
                    a6:71:01:e8:d7:e4:47:7e:d5:28:46:cf:cf:86:9d:
                    a0:ea:96:9b:64:35:16:55:9b:7f:dc:ca:38:03:14:
                    36:5b:d9:25:8f:c9:f7:62:67:0e:48:96:7e:33:56:
                    35:32:c0:a2:bf:68:35:96:fd:9b:e7:e2:5b:53:24:
                    0f:1d:91:bc:8b:70:d6:96:8b:13:5c:28:23:19:fa:
                    65:6f:a9:60:66:e8:72:3a:0b:0d:d5:92:9a:d2:e3:
                    da:eb:ea:bf:c6:c0:8e:68:82:be:78:d1:49:10:4a:
                    e0:3e:33:ae:3e:82:9c:12:85:53:13:26:72:93:25:
                    39:07:88:d5:af:1a:71:e1:7c:5e:0a:ef:4a:41:cd:
                    a1:33:86:1d:8b:a7:1e:21:55:65:f1:cf:57:fd:bd:
                    96:2c:0b:49:16:9b:d2:6f:09:79:ee:44:b3:e5:69:
                    25:c1:f2:93:89:e3:54:71:2c:ba:93:86:35:a0:1a:
                    95:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8A:0A:87:1B:95:B8:A3:FE:DE:64:EA:53:20:A5:5A:DE:9F:9A:1A
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a383030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0d:d2:31:dc:67:e9:27:39:84:dd:37:fb:49:79:ee:1d:b5:44:
         5d:f8:e5:00:e8:a9:f3:dc:3b:36:ce:e5:37:5f:ce:30:bd:fa:
         a2:d2:46:7a:3e:81:87:ba:12:ac:dc:cb:6b:e3:ea:65:64:c8:
         71:6f:a1:b4:47:67:4b:48:0d:78:73:a0:54:c3:ce:8f:d6:b5:
         82:9f:22:7e:c7:8a:25:f1:7f:e1:51:00:fd:1f:86:5e:83:52:
         21:ec:90:97:4b:5b:72:54:dc:6e:06:b8:ff:69:ca:b3:e7:5b:
         5a:11:5f:fc:ce:6f:43:b6:39:90:0c:11:94:4f:1d:5b:8f:ba:
         31:1c:fb:20:57:a4:e4:99:5f:4b:d5:38:ea:0a:5e:d3:0d:57:
         b1:94:d6:23:f9:fe:96:96:30:8e:fa:d0:f9:7c:a9:46:9b:c8:
         35:8f:64:dc:e2:13:04:f4:8e:60:20:44:2b:48:e8:6a:60:f4:
         51:b5:03:01:67:4d:61:4d:88:4a:0a:6c:da:0c:8d:d1:c4:7c:
         14:37:c1:c7:4f:a5:1b:3b:33:02:ee:55:f4:c1:ea:39:ba:66:
         2b:8b:dd:63:36:0e:d8:ad:2f:92:f5:e8:cc:03:86:ad:17:18:
         c2:4f:ce:9b:1a:f5:28:a8:2b:e1:a6:d0:ac:b9:49:8c:7c:5d:
         39:74:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:05 2024 by rpki-client on console-fra.rpki-client.org