Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          H1zO7rm6U/D17J/5DyB/LfpRhilhALG9LI7Y9Wq6WGw=
Subject key identifier:   72:17:D4:E4:50:0D:1D:7B:28:09:6B:80:B6:F5:B9:76:87:DE:A9:C3
Certificate issuer:       /CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
Certificate serial:       08B8766F0AC3A3607A3D951FB9B7FC5DF1A130A4
Authority key identifier: 94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Sun 22 Dec 2024 12:38:04 +0000
ROA not before:           Sun 22 Dec 2024 12:33:04 +0000
ROA not after:            Sun 21 Dec 2025 12:38:04 +0000
asID:                     273556
IP address blocks:        2804:9080::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b8:76:6f:0a:c3:a3:60:7a:3d:95:1f:b9:b7:fc:5d:f1:a1:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949059A6CFC6D8D4784BD4699906DA66C2271CD9
        Validity
            Not Before: Dec 22 12:33:04 2024 GMT
            Not After : Dec 21 12:38:04 2025 GMT
        Subject: CN=7217D4E4500D1D7B28096B80B6F5B97687DEA9C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b0:bf:e4:4c:7c:55:48:de:88:da:0a:15:c7:
                    8b:a6:a1:59:f4:86:af:06:12:2b:56:b4:64:5f:c6:
                    85:75:e7:bd:05:d4:22:fd:d8:5f:88:dd:8d:8c:13:
                    45:74:3b:3c:91:6b:93:f8:33:03:c4:e2:c2:e8:f0:
                    0e:99:33:6d:56:91:70:e0:01:4a:64:12:fe:15:af:
                    9b:98:a5:ad:df:d0:d0:be:4e:bf:ca:d2:07:c3:84:
                    86:a6:e5:95:b8:13:f6:3a:34:30:46:67:d4:3f:00:
                    5a:d0:75:2d:13:4a:cf:88:3e:f4:6d:c0:d9:5c:5b:
                    83:f3:55:be:9a:e3:56:da:bf:39:89:38:9f:45:1d:
                    2b:ee:35:df:0a:24:4c:7b:d0:49:e5:f5:0f:71:45:
                    99:86:56:b1:54:76:41:89:68:db:a0:b6:59:7e:78:
                    41:5d:e4:ee:6c:4e:b3:27:87:32:51:85:72:89:6b:
                    f9:32:d0:ef:ba:97:07:ac:c3:99:d0:d0:e1:d9:c5:
                    3d:c3:55:c8:67:53:79:e0:86:db:76:a6:26:7f:8e:
                    ce:fe:01:a7:2c:dc:b6:e1:47:cb:9e:e8:65:89:7d:
                    cb:ff:e7:34:67:23:f1:b7:60:8b:d6:84:8c:00:34:
                    71:77:93:24:12:07:bc:b4:46:99:fa:37:6e:08:6b:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:17:D4:E4:50:0D:1D:7B:28:09:6B:80:B6:F5:B9:76:87:DE:A9:C3
            X509v3 Authority Key Identifier:
                keyid:94:90:59:A6:CF:C6:D8:D4:78:4B:D4:69:99:06:DA:66:C2:27:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/949059A6CFC6D8D4784BD4699906DA66C2271CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/949059A6CFC6D8D4784BD4699906DA66C2271CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:88:9c:71:ea:ae:28:eb:fa:e4:08:82:7a:3d:d6:a6:58:
         9b:93:74:87:ce:4b:9d:2b:c2:59:cc:a8:dd:ae:bb:c3:7e:25:
         95:9d:2f:1a:a4:69:7d:2e:ff:78:ee:19:de:8a:48:37:bc:5f:
         39:fe:12:91:2f:db:68:65:2a:70:a3:77:a4:ed:e6:92:5f:43:
         90:1c:9a:18:e6:60:57:87:fa:3a:b1:68:3e:80:5a:92:69:11:
         4e:4e:fc:10:e0:6c:60:33:65:0e:b5:9d:51:32:98:95:a4:9b:
         39:6f:50:64:a5:93:12:9e:2a:0a:46:34:82:36:8a:9e:df:db:
         45:00:95:92:ae:16:b7:88:64:1c:2e:ec:68:87:42:25:16:89:
         54:76:ec:54:4b:4a:f1:e0:2b:61:ee:70:58:8c:fc:16:1c:82:
         a7:6b:83:2b:8c:21:61:a4:79:e0:92:63:d4:40:1a:4a:64:48:
         e6:2a:97:d7:2d:ad:7e:26:c8:1b:44:8c:c3:f8:4f:aa:e9:7f:
         1f:27:04:24:a1:1e:17:3e:79:8d:fd:64:23:84:de:98:a4:8a:
         57:0a:14:18:8a:16:98:43:4c:9d:13:2a:65:62:59:27:46:53:
         98:e7:ca:81:66:0c:9e:dc:8c:52:98:21:9d:2f:82:c2:7e:1d:
         7a:20:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:32:21 2025 by rpki-client