Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          p8mxdsJqd7Z6f1JB1QLr6T+6+Rpg0LQLBtyRI4domro=
Subject key identifier:   F6:96:A2:0B:15:50:F5:1C:1B:1B:CC:8C:38:E7:AB:77:BF:EF:9B:AE
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       6561A4762BD4B4081CFF1775D6186C51E284CB1A
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Wed 30 Oct 2024 01:58:49 +0000
ROA not before:           Wed 30 Oct 2024 01:53:49 +0000
ROA not after:            Wed 29 Oct 2025 01:58:49 +0000
asID:                     272518
IP address blocks:        2804:8268:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:61:a4:76:2b:d4:b4:08:1c:ff:17:75:d6:18:6c:51:e2:84:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 30 01:53:49 2024 GMT
            Not After : Oct 29 01:58:49 2025 GMT
        Subject: CN=F696A20B1550F51C1B1BCC8C38E7AB77BFEF9BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:d6:5a:75:08:17:28:a3:51:9a:bd:e2:db:
                    17:1b:2a:cc:f2:ac:ec:35:b7:ef:fe:ec:12:76:ef:
                    97:d4:e5:f4:b8:1b:02:65:74:d6:fb:40:8e:89:53:
                    8c:2b:00:af:b8:d1:ee:a9:fc:89:c1:86:6d:2d:cf:
                    c5:c6:54:51:e5:a9:a6:ec:50:05:d8:fb:c4:1a:b4:
                    4d:48:71:10:d1:80:aa:6b:9e:c9:64:eb:0e:48:0e:
                    bd:57:90:73:dd:68:4d:23:3b:f4:92:5f:fd:2f:6f:
                    d6:dd:3d:2b:42:48:c4:ea:67:06:77:d7:70:25:9a:
                    40:33:51:ae:0d:12:d9:27:7f:2b:14:8a:db:d4:1f:
                    b9:f5:db:aa:34:b2:93:b0:04:5e:4f:0d:a7:62:19:
                    5e:46:97:ee:49:ba:9f:e5:2f:8c:ad:e9:07:bc:57:
                    05:8a:8d:19:06:22:fa:da:70:be:4e:55:a2:98:ed:
                    65:69:83:49:2d:4f:a8:1f:fa:f7:cc:ab:de:5a:5d:
                    d8:5f:22:70:f3:9f:36:53:a0:05:98:5a:7c:f5:ea:
                    fa:a9:62:1c:60:50:77:fd:cb:73:e8:3b:6d:3c:44:
                    eb:18:24:4f:4b:f7:8a:63:bd:0e:1c:1a:6f:37:5c:
                    72:a6:31:53:73:fa:93:90:ba:67:ba:8e:8b:4f:58:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:96:A2:0B:15:50:F5:1C:1B:1B:CC:8C:38:E7:AB:77:BF:EF:9B:AE
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a343030303a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:72:d9:ce:a4:55:96:16:74:3f:0d:ba:88:42:5e:a8:cc:b5:
         d3:93:b1:82:5e:57:2c:5e:29:d7:4a:0a:11:ee:46:5f:45:54:
         31:3f:a4:a3:27:ec:1e:a2:a7:0e:30:f1:0f:9b:ef:57:2f:9c:
         34:a4:73:66:8d:7e:12:43:19:8f:8f:1b:c1:ee:2b:92:35:18:
         b5:28:ca:23:d2:63:d1:54:c1:a4:9b:5e:28:f7:14:9f:3e:48:
         47:ac:b1:60:65:65:45:b3:29:f2:65:8a:73:ea:e8:85:42:86:
         1f:15:12:eb:ce:bd:ad:20:9e:ed:a1:1f:ab:83:a3:23:d5:b0:
         f9:f8:54:e5:36:1a:e8:10:14:69:53:ee:22:b9:59:58:59:88:
         85:25:69:c0:5f:f3:5e:ad:3a:41:12:c8:cb:6b:e5:10:60:d5:
         90:d3:d7:a3:a5:a6:93:76:cf:ba:13:33:fd:ca:e9:b8:a0:16:
         01:9c:14:df:52:29:ad:37:0c:72:32:91:c7:c7:de:0b:ce:e4:
         38:35:64:a5:36:f0:a2:1b:be:6b:63:e3:32:06:70:5f:e1:03:
         89:6d:28:d2:cd:5a:80:0a:5a:b2:c4:ce:ff:76:36:86:63:3e:
         9c:60:83:a5:f8:11:6a:de:c1:46:a7:4c:09:e7:a7:b8:7e:af:
         36:7f:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:37 2024 by rpki-client on console-ams.rpki-client.org