Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa
File:                     323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa (raw, json)
Hash identifier:          q6ksYiUz8PAKqiVHQGInS3Q7rp4zifau9be7LLlUE/E=
Subject key identifier:   37:D1:29:BB:0E:4C:25:DD:20:F3:1C:E6:12:D4:C7:B5:8D:43:6C:D3
Certificate issuer:       /CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
Certificate serial:       1690F0965B5A1D489B832CBCA17A54DA52184FD9
Authority key identifier: 31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa
Signing time:             Wed 30 Oct 2024 10:48:54 +0000
ROA not before:           Wed 30 Oct 2024 10:43:54 +0000
ROA not after:            Wed 29 Oct 2025 10:48:54 +0000
asID:                     272518
IP address blocks:        2804:8268:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl
                          rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:90:f0:96:5b:5a:1d:48:9b:83:2c:bc:a1:7a:54:da:52:18:4f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3170E59F647D12F2C01381F789FEA19B94A7EA94
        Validity
            Not Before: Oct 30 10:43:54 2024 GMT
            Not After : Oct 29 10:48:54 2025 GMT
        Subject: CN=37D129BB0E4C25DD20F31CE612D4C7B58D436CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:47:a0:58:58:e8:b5:87:58:e8:c8:e8:92:
                    c6:bd:b8:d7:3e:c8:5a:db:7d:79:3e:70:94:c6:54:
                    65:3e:67:7f:a7:55:83:0d:94:c7:82:5a:bc:d1:4f:
                    4a:c5:14:89:ef:4f:dc:af:88:00:04:cb:2a:bc:65:
                    d7:41:a9:39:b9:06:19:89:58:77:c3:54:97:b7:5f:
                    52:95:13:5a:9a:fe:c0:16:8d:5f:e2:ba:9e:5f:9b:
                    9b:7c:ed:cc:2e:44:20:49:52:67:04:11:16:09:fc:
                    5b:3f:06:73:b8:cd:4b:9e:31:53:df:ea:59:be:c9:
                    4a:e5:c3:19:5f:1d:b6:02:1a:fe:b9:ea:36:2f:1e:
                    ff:a3:b1:15:6e:30:d6:82:a9:22:00:13:44:fd:9f:
                    d3:30:7d:c4:30:81:d9:c5:50:c7:e4:f0:d6:bb:79:
                    18:54:dd:4e:1f:f2:03:92:f6:a5:c9:20:0c:b3:11:
                    23:4a:4a:8e:47:29:c3:b9:54:1b:be:78:1f:04:d8:
                    06:76:d8:57:68:80:cf:3f:77:84:c2:68:0e:54:47:
                    42:20:74:d2:30:10:a2:03:a5:be:ae:1f:ff:6e:cd:
                    2b:a9:a8:25:20:54:ca:de:24:b3:b7:c7:db:9e:28:
                    d8:6b:f8:51:98:fd:e7:49:a5:fb:c4:7f:6e:ef:2d:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:29:BB:0E:4C:25:DD:20:F3:1C:E6:12:D4:C7:B5:8D:43:6C:D3
            X509v3 Authority Key Identifier:
                keyid:31:70:E5:9F:64:7D:12:F2:C0:13:81:F7:89:FE:A1:9B:94:A7:EA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/3170E59F647D12F2C01381F789FEA19B94A7EA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3170E59F647D12F2C01381F789FEA19B94A7EA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9B2GTi7pYjEfGWxYDa6FjaLtJeshQFXJsU9SsZgVF6xt/0/323830343a383236383a633030303a3a2f33342d3334203d3e20323732353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8268:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:f8:ad:c0:40:97:d7:ce:35:30:47:9c:cb:5b:22:3d:cd:
         0d:27:5c:dd:e8:b6:2a:76:12:17:2f:a8:7f:13:a4:e5:04:bf:
         8c:b6:17:81:77:af:8b:d0:7d:f4:0e:60:8d:c5:9c:a8:52:5c:
         d2:ae:34:5e:b4:ea:84:01:0c:08:77:f2:f5:e2:a4:ca:2d:ea:
         b8:5c:46:5f:65:99:9b:06:f4:8d:79:9a:1e:fe:f0:11:2e:41:
         48:63:b7:d5:93:18:e2:a9:d6:7e:3c:89:91:80:c5:2f:f7:87:
         75:57:f2:52:88:2a:f3:47:a0:49:fc:cd:f8:d0:b5:68:8a:34:
         2c:f8:9a:b7:b6:ee:8f:0d:59:46:12:cb:f3:88:3c:91:d0:e7:
         2d:22:72:6d:e4:7b:00:e1:7a:5a:ec:ee:79:17:8f:b4:85:01:
         f5:6a:bd:7a:59:d1:63:77:fd:40:77:f4:2c:30:08:5d:30:19:
         c5:78:df:a2:86:0d:63:22:1c:1f:7a:a7:fe:63:b0:3e:75:e1:
         b7:bf:10:35:9b:ea:fd:39:c0:8d:fa:02:a5:62:55:cb:b3:e2:
         a5:c9:a2:09:45:19:db:32:36:93:6d:c1:1c:60:e7:47:3b:38:
         5d:8b:c8:87:78:63:d6:dd:ea:c7:b0:83:55:2c:23:87:9d:1c:
         a4:e1:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:06 2024 by rpki-client on console-fra.rpki-client.org