Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa
File:                     323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa (raw, json)
Hash identifier:          k0mwVIxiAhNrBAGvz4X+jLTqtF4Ex6+aIAENrxyv+G0=
Subject key identifier:   62:C7:69:1C:1B:D4:79:35:FD:DD:2D:38:19:40:3F:1F:AA:73:54:D9
Certificate issuer:       /CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
Certificate serial:       28355E34F791F8F802465F62F20F3230B314FC2A
Authority key identifier: D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa
Signing time:             Mon 30 Sep 2024 11:22:54 +0000
ROA not before:           Mon 30 Sep 2024 11:17:54 +0000
ROA not after:            Mon 29 Sep 2025 11:22:54 +0000
asID:                     273556
IP address blocks:        2804:9080:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl
                          rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:35:5e:34:f7:91:f8:f8:02:46:5f:62:f2:0f:32:30:b3:14:fc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D296532FA265171A7D36D3EE11F8CD3EE171103D
        Validity
            Not Before: Sep 30 11:17:54 2024 GMT
            Not After : Sep 29 11:22:54 2025 GMT
        Subject: CN=62C7691C1BD47935FDDD2D3819403F1FAA7354D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:e9:d5:1f:fe:73:4d:b7:d7:82:9d:a9:de:
                    47:c0:55:91:18:5c:65:4f:3b:5c:d0:c9:df:e8:83:
                    92:0d:c5:c7:c1:f4:6e:5d:39:0e:d3:9c:4d:b3:ca:
                    25:b9:de:6c:11:af:35:80:21:8e:66:f7:57:0e:bb:
                    c5:d2:5c:3f:fe:ab:a9:2e:05:82:0a:54:49:c2:35:
                    3a:3a:6a:88:f9:9d:1f:1a:96:51:0a:cf:75:6d:88:
                    79:d4:5c:9b:3e:2c:a2:91:91:2a:59:99:81:0f:2e:
                    21:61:82:ec:77:b3:94:b6:24:92:bd:8a:bf:2b:38:
                    c8:ce:5d:88:84:78:61:30:ac:b2:8b:2e:ff:2f:8f:
                    46:66:04:a2:0a:59:14:de:50:5a:b0:14:a9:34:33:
                    4c:0f:36:57:4b:64:05:8f:58:b0:65:23:d9:7c:30:
                    5b:b4:dc:46:a0:fc:3d:a8:e1:3b:0d:57:7e:68:18:
                    87:41:5b:b1:f2:f9:67:d4:0f:0c:7e:6a:5b:52:13:
                    3a:8b:0e:fb:ef:7d:d0:5d:f4:e7:b1:d9:bf:7a:79:
                    f5:7f:4f:53:37:69:3d:11:64:01:bb:74:1d:19:69:
                    c1:34:8c:dd:3c:49:75:cc:50:ec:2b:9e:ff:e7:ad:
                    df:0c:dd:62:00:a3:81:cf:51:5c:92:e2:01:24:9c:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C7:69:1C:1B:D4:79:35:FD:DD:2D:38:19:40:3F:1F:AA:73:54:D9
            X509v3 Authority Key Identifier:
                keyid:D2:96:53:2F:A2:65:17:1A:7D:36:D3:EE:11:F8:CD:3E:E1:71:10:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/D296532FA265171A7D36D3EE11F8CD3EE171103D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D296532FA265171A7D36D3EE11F8CD3EE171103D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pZMWXCkEZ7nLRHnJMma3kR8TwW9yKaT4cTroBhDmDg5/0/323830343a393038303a633030303a3a2f33342d3334203d3e20323733353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9080:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d1:56:ca:60:9a:0f:0e:10:32:66:17:89:fc:e4:0e:e8:e9:43:
         44:7a:8a:d9:0f:54:3a:c4:b5:f5:87:86:56:17:22:29:88:38:
         80:33:51:87:6d:1e:31:23:1d:a5:65:84:1a:92:81:15:b9:56:
         45:91:43:30:ad:2f:40:08:0e:c2:45:53:1a:38:e9:1a:d0:64:
         e5:9b:dc:2f:2d:7d:d5:2d:d9:da:6a:4a:76:e0:dd:24:7a:7c:
         c2:cc:fa:24:8f:2d:73:fe:50:8c:6b:5f:5b:61:97:c1:90:ea:
         52:80:4c:c6:a0:09:e5:87:eb:1a:7d:59:e9:aa:7e:53:f6:40:
         f5:39:cc:f4:52:53:3b:08:55:7b:a9:67:8c:ca:d6:e4:bc:12:
         a9:d2:53:ea:50:52:0f:a2:5b:d6:86:48:e3:2f:3b:46:af:77:
         ce:3d:99:41:6d:11:d5:ea:81:d0:5c:21:55:84:70:2d:e4:25:
         41:77:98:3f:26:fa:f4:bf:d3:68:31:95:84:36:5f:ad:86:41:
         36:df:68:4d:62:1e:f2:79:1b:b4:0b:84:64:21:5e:c9:26:fc:
         56:50:c7:b6:f0:89:a8:62:c7:20:cf:f2:3d:14:49:b6:28:13:
         e6:53:c2:2d:b5:7a:9c:5a:15:81:19:b3:1d:cd:31:db:f8:fd:
         89:44:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:34 2024 by rpki-client on console-ams.rpki-client.org