Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa
File:                     323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier:          lHHZoCLeWGFBFTbMl7/pwdQa/v8sN/HdVn4hJ/JtQSc=
Subject key identifier:   D2:4D:2B:8E:F8:DF:2F:E3:ED:94:5E:C3:31:F6:2F:96:5B:58:B6:A2
Certificate issuer:       /CN=0604081C221F419D648EF7DEEAA71B4C0CB67AE5
Certificate serial:       6D693D10D7ECB973A0B8EFDB71D2B4ED3A9E31D8
Authority key identifier: 06:04:08:1C:22:1F:41:9D:64:8E:F7:DE:EA:A7:1B:4C:0C:B6:7A:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa
Signing time:             Thu 15 Aug 2024 21:12:21 +0000
ROA not before:           Thu 15 Aug 2024 21:07:21 +0000
ROA not after:            Thu 14 Aug 2025 21:12:21 +0000
asID:                     272195
IP address blocks:        2804:8364:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:69:3d:10:d7:ec:b9:73:a0:b8:ef:db:71:d2:b4:ed:3a:9e:31:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0604081C221F419D648EF7DEEAA71B4C0CB67AE5
        Validity
            Not Before: Aug 15 21:07:21 2024 GMT
            Not After : Aug 14 21:12:21 2025 GMT
        Subject: CN=D24D2B8EF8DF2FE3ED945EC331F62F965B58B6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c8:e2:fb:a1:da:b1:45:69:ae:f4:97:bd:08:
                    69:02:60:9a:b8:19:66:b6:8b:a3:81:22:cc:a0:21:
                    a0:62:0c:22:96:76:fc:c8:47:12:9f:af:f5:62:21:
                    bb:7b:37:e5:ab:89:88:ef:96:04:31:c5:d7:5e:43:
                    6d:91:57:3d:a6:b4:04:08:9d:d3:51:b1:d3:fe:ea:
                    38:62:01:8e:ca:18:7f:0a:b4:23:43:d0:85:18:8b:
                    f9:67:6f:ac:b4:ea:6e:5a:02:d2:9f:b7:23:b8:c7:
                    32:4b:b9:25:87:89:5f:c8:09:67:e5:43:e2:21:a5:
                    eb:b5:c1:88:01:6b:16:af:10:f7:37:6e:eb:da:9b:
                    bb:c3:28:53:e8:ab:c8:37:e4:3e:cd:8c:16:92:96:
                    dd:00:86:02:71:86:80:e2:8a:a6:29:61:da:b4:18:
                    32:05:2c:56:7a:d0:3d:86:27:07:ff:af:68:a4:cb:
                    6c:04:25:69:5d:aa:f6:ba:a9:4b:44:ec:a3:89:67:
                    06:b1:e4:3b:32:be:a8:89:f9:65:84:76:f2:07:9e:
                    b9:11:66:65:39:b0:31:e6:ae:e9:51:ea:e3:f1:4b:
                    ff:de:16:f8:fe:3c:41:9e:e0:04:56:92:6d:18:88:
                    7d:54:1a:42:0c:41:02:78:53:25:86:f0:28:63:21:
                    64:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:2B:8E:F8:DF:2F:E3:ED:94:5E:C3:31:F6:2F:96:5B:58:B6:A2
            X509v3 Authority Key Identifier:
                keyid:06:04:08:1C:22:1F:41:9D:64:8E:F7:DE:EA:A7:1B:4C:0C:B6:7A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a383030303a3a2f33342d3334203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         dc:53:57:71:d5:b5:d5:25:92:7a:d6:04:4d:72:a0:bd:a0:47:
         3e:88:dd:46:e6:40:6c:df:e9:dd:55:09:1b:ad:1f:6a:c7:27:
         38:46:b7:33:bf:46:b8:68:f1:53:0c:bb:c1:a9:44:e5:70:83:
         ee:7a:2d:4f:37:91:d5:01:dc:9e:fa:9d:f0:20:22:fe:2b:3b:
         40:b2:76:f1:9e:c3:91:33:83:80:10:58:c2:46:0c:68:4a:60:
         7c:42:ff:54:30:fa:b7:cc:50:41:86:0f:c3:d3:5d:3e:b6:d7:
         a0:be:5d:6a:6b:b4:31:95:1e:a0:c6:8c:55:5e:18:c7:32:81:
         62:1d:ab:ce:08:b0:c0:56:34:4f:50:d1:4b:f8:16:86:07:bd:
         54:5a:ba:4c:d8:2c:4a:3a:4b:04:60:b3:a5:65:76:dd:35:a4:
         de:e3:0b:d6:22:bd:61:46:29:83:17:62:d4:6f:39:c2:9f:e8:
         5f:72:75:08:d5:f2:a5:a9:ed:0e:e5:c9:47:49:c9:e6:74:f0:
         09:e8:66:7f:1c:84:7c:a4:1a:61:ca:0d:f3:01:52:e3:19:58:
         dd:94:bb:13:f7:f0:6c:50:2a:81:be:9f:9e:6a:04:d2:5d:19:
         4a:73:c9:38:5b:ba:0f:50:99:f8:61:e7:14:7b:7c:a3:a4:0c:
         5c:57:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:18 2024 by rpki-client on console-fra.rpki-client.org