Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
File:                     323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (raw, json)
Hash identifier:          GlJgw5/aVzF/T9mxu4Eg7NTTwZxElnBkML2WyVugMGg=
Subject key identifier:   9C:89:9A:E2:68:27:51:6C:6B:B7:B9:B4:D6:F7:20:5C:ED:9D:BE:CC
Certificate issuer:       /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Certificate serial:       7DDF8DEC97160DF7D7BFF172C5FCB6E4D40C12DB
Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
Signing time:             Mon 19 Aug 2024 20:22:47 +0000
ROA not before:           Mon 19 Aug 2024 20:17:47 +0000
ROA not after:            Mon 18 Aug 2025 20:22:47 +0000
asID:                     270316
IP address blocks:        2804:6a28::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl
                          rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:df:8d:ec:97:16:0d:f7:d7:bf:f1:72:c5:fc:b6:e4:d4:0c:12:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
        Validity
            Not Before: Aug 19 20:17:47 2024 GMT
            Not After : Aug 18 20:22:47 2025 GMT
        Subject: CN=9C899AE26827516C6BB7B9B4D6F7205CED9DBECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:cf:ec:ec:34:0b:9c:fa:74:72:27:92:de:
                    3f:89:ba:56:18:c9:40:98:8d:82:e6:44:01:ff:97:
                    23:f4:ee:ea:f5:d6:c7:02:6c:22:98:f4:a2:a7:50:
                    c2:b4:1c:d6:97:6e:64:7a:9f:d5:a5:14:77:88:2a:
                    08:0d:68:60:d0:ad:1a:d0:f1:fa:e4:59:22:23:12:
                    0f:d2:a2:fa:6a:aa:4c:bf:52:9e:3a:70:48:99:f2:
                    33:bf:a7:ce:88:91:a8:6a:f0:83:e3:7e:bb:42:fb:
                    bb:ab:81:c2:bf:e2:4f:10:76:0a:56:80:a0:df:6f:
                    ee:ff:e7:e1:b7:39:a9:31:ae:4d:04:bd:a4:f1:b0:
                    3d:fe:0d:41:02:a8:55:e2:4a:90:c8:4c:12:2b:c9:
                    c3:c0:87:c5:3e:51:a2:67:95:04:87:23:31:1e:7d:
                    7a:90:b6:a2:a3:9f:43:c6:b4:3b:a0:ab:7e:9f:92:
                    c4:cb:7b:26:ea:11:34:c3:a7:dd:bd:58:7e:c6:7a:
                    1c:0b:d3:b1:ee:8b:b6:67:39:ed:b5:32:a8:ec:09:
                    77:dd:0a:d9:31:46:55:1c:71:51:73:e8:8a:82:ac:
                    e4:22:bf:dd:41:4c:ff:a7:67:de:94:59:7a:83:9b:
                    82:91:c5:90:b6:60:48:01:9e:c2:17:76:df:2f:7b:
                    f4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:9A:E2:68:27:51:6C:6B:B7:B9:B4:D6:F7:20:5C:ED:9D:BE:CC
            X509v3 Authority Key Identifier:
                keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:95:67:14:9f:c2:f3:ea:e9:a6:d4:2a:ad:1d:9b:52:8a:4d:
         aa:9d:d6:5e:2b:d1:9e:c7:72:2b:9c:79:6a:66:e5:55:26:fc:
         b8:02:d2:5e:f6:b3:84:c0:62:b5:38:88:9c:a0:ca:0b:1d:07:
         88:12:78:36:d5:d8:68:2e:48:9e:32:af:b0:cf:05:8c:8e:6f:
         0d:54:b9:cd:37:29:ef:dc:c0:62:3d:be:ce:21:01:25:45:d2:
         24:01:95:92:3d:f3:4c:bd:0d:59:fe:30:06:cb:21:0a:45:09:
         32:a0:34:44:83:b1:73:0e:1a:2d:b7:6b:16:40:61:f2:08:98:
         74:ac:47:68:0d:2e:cd:2a:23:0d:43:1e:e0:df:33:d5:e0:7f:
         41:4e:cc:a7:43:17:39:9b:15:3b:8a:08:cf:d6:c8:55:29:61:
         8a:8c:4b:81:35:26:20:a4:c2:81:ff:8a:4d:e9:f4:45:ca:ea:
         c6:84:06:9a:b5:1e:7c:1b:80:c7:c0:e8:85:fe:89:81:37:cb:
         79:96:1c:2e:c8:49:44:65:c0:47:bf:19:cf:0b:3e:6d:45:9a:
         ab:0a:23:c3:8b:e5:c4:7f:50:fd:0e:63:c9:2f:68:1d:2f:5f:
         3a:61:20:49:b5:f7:4b:0d:5d:cf:36:53:ae:bd:06:f2:76:ce:
         ec:54:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:38 2024 by rpki-client on console-ams.rpki-client.org