Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33322d3332203d3e20323733353536.roa
File:                     323830343a393038303a3a2f33322d3332203d3e20323733353536.roa (raw, json)
Hash identifier:          sInudCwnZ60yHByZlRPUJcQg6SaHwvHMaxcmX3ZCIzA=
Subject key identifier:   12:46:77:D8:67:71:23:F7:3F:62:80:80:C7:EE:23:49:79:BB:40:5E
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       0C33683300C3C4D02160D241304718057816F7AF
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33322d3332203d3e20323733353536.roa
Signing time:             Mon 30 Sep 2024 11:19:14 +0000
ROA not before:           Mon 30 Sep 2024 11:14:14 +0000
ROA not after:            Mon 29 Sep 2025 11:19:14 +0000
asID:                     273556
IP address blocks:        2804:9080::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:33:68:33:00:c3:c4:d0:21:60:d2:41:30:47:18:05:78:16:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Sep 30 11:14:14 2024 GMT
            Not After : Sep 29 11:19:14 2025 GMT
        Subject: CN=124677D8677123F73F628080C7EE234979BB405E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:b1:8d:2b:2c:c9:36:84:21:91:0c:de:3e:
                    9d:7e:62:d9:c1:9e:87:f3:53:0f:6a:78:93:35:6c:
                    82:74:33:5f:8d:ed:4c:34:79:de:05:83:09:42:19:
                    c3:5a:73:28:03:d0:46:c9:ba:4f:69:aa:5d:16:e8:
                    e2:3a:6f:48:6d:42:d8:aa:f4:00:5c:f3:40:8c:7a:
                    4c:08:98:0e:59:3e:00:97:2e:60:96:e0:00:cd:48:
                    e0:24:bb:e7:e7:28:eb:f6:d0:c0:13:fc:1e:0f:07:
                    38:a5:75:76:c5:54:3a:1e:53:5b:0b:b5:8f:8d:14:
                    0f:0c:64:8f:2a:df:c5:48:f6:d6:7b:8b:a3:a1:0e:
                    2a:56:4e:15:06:b8:42:58:d0:bf:68:05:ac:c1:95:
                    e8:f7:84:8e:a7:3a:7d:cd:88:d8:99:d3:f6:ab:6d:
                    bb:a4:44:1d:d2:a3:da:d6:6c:2e:2e:d6:1d:db:a8:
                    23:53:cb:79:8d:e3:e4:84:c7:b5:22:00:2b:6e:eb:
                    ba:4b:13:5f:a1:4e:e5:7a:36:c4:a9:e6:a5:86:7b:
                    5e:76:87:30:db:66:82:fb:e1:ed:06:bd:04:c5:49:
                    7b:74:97:d6:ce:7c:8e:7a:e7:cb:c4:0f:78:d7:55:
                    12:2e:b7:fd:6b:ad:3f:89:24:90:43:b2:91:cd:43:
                    e5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:77:D8:67:71:23:F7:3F:62:80:80:C7:EE:23:49:79:BB:40:5E
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33322d3332203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:73:0a:99:c6:c7:50:a2:52:b7:d7:6e:0a:4f:e0:f4:6b:a5:
         db:b6:c5:fe:7d:a9:4a:1d:0a:af:7d:62:7f:bb:d4:4f:1f:a4:
         0f:5b:77:cd:7d:eb:37:7e:9f:db:85:31:d0:95:a5:88:ea:27:
         11:88:1e:8f:85:aa:23:74:29:9b:f3:51:fd:c2:13:80:8e:d2:
         26:ba:a8:f2:15:db:f6:b1:ac:23:c2:3f:e8:5d:11:bb:d3:81:
         b0:82:32:01:fd:cb:1b:cb:0c:82:b3:0d:b5:bf:14:3c:38:39:
         37:a6:d0:0c:10:8e:4d:a2:04:44:b0:b8:d1:ac:45:8e:7f:c2:
         48:2e:c6:7d:a4:51:61:d0:ee:65:f8:e9:e4:a6:bb:ef:99:a2:
         7c:f7:07:78:53:4c:f7:df:48:1d:9d:ec:5f:01:cb:58:2d:d9:
         3f:bb:d1:7b:87:6e:67:08:da:cb:86:96:d5:ae:05:52:eb:5f:
         51:48:54:5e:25:b9:e7:ad:0f:9e:f8:48:3a:a0:90:bb:05:6d:
         0c:1a:39:34:80:b2:b4:68:ae:9c:10:c0:0e:9e:38:ba:d7:57:
         14:51:82:ff:43:7b:cf:63:39:bc:08:e5:83:86:96:1a:b4:c7:
         e5:ea:26:e8:a1:57:af:fa:07:9b:7f:73:32:be:32:d6:d4:bc:
         66:62:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org