Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          GccLeaRXgRsFi6FlET8RzqepHcxarJ2X7MlbDVp08HY=
Subject key identifier:   53:D0:C4:A5:BE:CE:92:24:AD:A9:48:D2:7A:70:91:42:D2:C2:E4:66
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       6CA48B8C6064B1E51366F34E878737EB75C84C75
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Wed 30 Oct 2024 10:48:31 +0000
ROA not before:           Wed 30 Oct 2024 10:43:31 +0000
ROA not after:            Wed 29 Oct 2025 10:48:31 +0000
asID:                     272518
IP address blocks:        2804:8268:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a4:8b:8c:60:64:b1:e5:13:66:f3:4e:87:87:37:eb:75:c8:4c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 30 10:43:31 2024 GMT
            Not After : Oct 29 10:48:31 2025 GMT
        Subject: CN=53D0C4A5BECE9224ADA948D27A709142D2C2E466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c2:16:c0:6d:db:d4:81:13:86:c9:6a:65:4e:
                    dc:b6:22:a4:e0:f0:b5:be:93:6c:6a:3a:e5:31:c8:
                    b1:fa:6a:a7:10:76:88:55:23:1f:71:1f:7c:a6:0e:
                    e5:93:34:9f:95:3b:92:64:be:ed:07:ec:e4:9c:e1:
                    5a:73:3f:9c:11:78:0f:b5:72:d4:87:10:22:32:0e:
                    4a:4f:0b:1f:42:74:4c:f8:eb:c5:5b:f8:51:2b:ba:
                    f4:90:a6:50:58:5d:02:c1:46:c9:21:9e:95:d9:5c:
                    2e:a3:c2:a6:07:ec:af:03:7e:58:05:5b:5f:6f:33:
                    33:87:2b:64:f2:50:2d:67:e2:81:8e:86:52:f2:aa:
                    5d:26:2b:84:14:27:c7:9a:f0:2b:b5:17:f1:83:b0:
                    d1:0b:99:af:91:2f:d4:28:d8:82:6a:7d:7d:af:a1:
                    57:a8:18:e1:65:ce:72:45:ff:c3:d1:7d:c7:96:52:
                    39:03:41:0d:b3:6a:f1:de:28:5e:23:ed:6b:37:a1:
                    49:6a:c8:0b:33:c2:5f:32:8c:6a:9e:95:5b:16:bd:
                    71:9e:69:3a:06:94:0d:0e:2f:5d:71:3b:e8:a3:e5:
                    1c:b3:62:af:63:df:90:12:37:c1:8e:21:a5:15:39:
                    c3:35:99:8c:d3:ce:e2:77:35:bc:c7:8e:6e:64:77:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:C4:A5:BE:CE:92:24:AD:A9:48:D2:7A:70:91:42:D2:C2:E4:66
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a383030303a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b9:40:34:1e:52:2c:8e:eb:b2:dc:fa:7e:5e:c0:5c:9c:ee:16:
         10:1e:c0:44:17:90:d5:0d:bc:11:5f:f8:30:be:65:69:68:dc:
         32:0f:cf:ee:24:69:c3:ef:c4:0e:51:7f:8c:24:22:a5:45:50:
         56:5b:75:26:9d:3c:77:a3:72:a0:d5:58:43:a9:c6:96:30:e9:
         07:72:65:06:d7:42:b1:96:7a:d7:6d:57:bd:e8:a6:82:04:8c:
         b7:d0:04:fe:45:4f:89:3f:62:1c:2c:b8:3a:3e:ea:cb:0b:e6:
         3c:10:aa:3e:ab:b1:12:94:1c:05:e6:41:48:01:2d:71:cf:45:
         02:62:5a:9c:d0:74:71:c3:2a:d7:5b:16:8e:5d:be:1f:5c:bd:
         f8:41:be:08:f5:8d:2c:f6:56:f4:cf:3c:16:c2:3b:1c:46:d7:
         df:dc:5b:7d:2f:29:fd:63:53:e3:a7:db:e8:8a:fb:a1:16:e4:
         a9:94:20:73:0e:15:0f:f2:8c:b4:00:35:d5:ea:89:73:b7:9f:
         43:21:e2:66:d4:cd:ea:81:28:f0:55:9c:8d:22:e9:bb:16:31:
         cb:0f:be:77:79:0d:56:e2:23:15:ab:fe:e8:77:07:b8:18:3b:
         42:12:11:a5:f1:e9:e8:24:fe:fa:16:ed:6f:27:43:63:91:9b:
         8e:6d:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org