Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33322d313238203d3e20323731313838.roa
File:                     323830343a373739383a3a2f33322d313238203d3e20323731313838.roa (raw, json)
Hash identifier:          KvltDHF9AkJ/6ejejjlbXbciRJna/WAhM/t6Aa8/oQ4=
Subject key identifier:   0D:74:4E:44:69:2A:28:07:48:1D:48:EA:78:64:45:50:2C:00:01:B9
Certificate issuer:       /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial:       0DDF889BC9BB2A4D9BAD3D28CB5EE220045D9D0F
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33322d313238203d3e20323731313838.roa
Signing time:             Tue 16 Jul 2024 15:55:18 +0000
ROA not before:           Tue 16 Jul 2024 15:50:18 +0000
ROA not after:            Tue 15 Jul 2025 15:55:18 +0000
asID:                     271188
IP address blocks:        2804:7798::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
                          rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:df:88:9b:c9:bb:2a:4d:9b:ad:3d:28:cb:5e:e2:20:04:5d:9d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
        Validity
            Not Before: Jul 16 15:50:18 2024 GMT
            Not After : Jul 15 15:55:18 2025 GMT
        Subject: CN=0D744E44692A2807481D48EA786445502C0001B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:02:a4:61:4e:e1:b4:6a:37:de:5e:39:87:7b:
                    2d:24:31:de:b1:6e:fb:8e:e1:24:d7:ad:8b:29:0b:
                    aa:df:3c:d2:10:0e:20:95:7b:8c:96:b5:3c:5c:97:
                    60:93:3d:a9:73:4d:6b:c6:56:35:66:cc:fa:48:75:
                    c1:36:ce:3a:bc:3c:6a:d8:03:e8:92:3e:33:fe:19:
                    03:6e:4f:35:28:d7:bc:46:77:c4:7b:34:83:da:0e:
                    16:0c:4e:c2:cb:84:5e:2a:6d:0a:de:35:c3:66:3f:
                    1f:cb:fb:a1:44:83:1f:7d:29:08:9a:d7:4e:7b:a0:
                    f6:cb:51:30:85:64:2c:2e:1e:aa:5b:6c:a0:da:0c:
                    92:ae:94:be:f5:8f:d8:f3:05:5d:5a:bb:c9:b4:b4:
                    b2:c4:15:8a:20:aa:43:fb:9c:f5:39:45:cb:f6:21:
                    83:93:30:6d:b2:9e:a6:d2:cf:f1:14:d3:62:6d:ee:
                    4b:f8:5c:ce:5a:da:14:6e:3e:0a:73:d0:f3:19:53:
                    9f:3a:a0:b5:e4:9c:38:a4:05:9a:25:29:25:2d:a0:
                    0e:6e:c2:c3:8b:91:01:b4:e8:f7:50:78:ed:e5:24:
                    fe:f0:c6:7d:e7:f8:88:d3:4a:28:4d:a1:47:31:71:
                    03:bf:a4:98:b0:28:66:f2:12:4f:26:22:15:eb:a7:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:74:4E:44:69:2A:28:07:48:1D:48:EA:78:64:45:50:2C:00:01:B9
            X509v3 Authority Key Identifier:
                keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/323830343a373739383a3a2f33322d313238203d3e20323731313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7798::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:c5:88:db:e6:f3:de:8e:31:0a:ec:0a:cd:5b:6c:a9:53:56:
         ce:17:3f:59:d3:a5:47:1b:00:c5:01:12:98:87:78:a8:ae:78:
         08:91:28:23:71:1c:f9:68:a2:5f:de:60:b7:1a:01:5f:eb:1c:
         34:22:40:a2:d4:90:66:f9:68:a9:bb:d9:a0:26:7d:50:a2:14:
         99:21:7c:aa:e5:bf:0f:c3:9b:0b:7e:66:1b:36:8b:e8:35:af:
         dd:1c:68:9b:c3:3f:ce:1d:e7:28:96:cc:dd:02:e1:a8:4b:f4:
         af:1e:ad:a4:b6:00:d2:ac:85:77:e0:e3:cb:f7:eb:d4:55:85:
         13:0c:9c:ba:36:da:24:7c:a0:99:95:1b:03:b4:fa:ab:1d:aa:
         e3:55:9b:2f:a1:14:ec:8b:5b:fb:22:99:df:c8:3f:86:dd:64:
         e6:fc:b8:3a:d5:3d:90:8f:e7:e9:c5:47:be:04:15:46:69:a3:
         6d:41:e8:64:15:a7:14:bd:86:06:0e:7c:ce:68:45:c2:39:01:
         9e:3b:b3:d8:84:d9:bb:e6:10:1d:96:5d:c8:9f:83:7a:f2:fb:
         5b:cc:58:17:16:bc:a4:ce:25:33:84:90:cb:fc:b6:8e:b4:96:
         01:1f:5a:7f:27:bf:6c:1c:c8:29:55:5f:03:58:92:bc:86:ee:
         a8:05:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:53 2024 by rpki-client on console-fra.rpki-client.org