Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
File:                     323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa (raw, json)
Hash identifier:          +eal7l2kKSi7vm/90Xxfl9mlmuwxFc4i+e/gcUYe0Ys=
Subject key identifier:   89:71:E4:D1:BF:48:E7:55:77:C2:05:7F:26:67:0B:5D:D3:92:13:2F
Certificate issuer:       /CN=0604081C221F419D648EF7DEEAA71B4C0CB67AE5
Certificate serial:       79BE4C95ADBB49886FCF9F636D173F9886FEC7AA
Authority key identifier: 06:04:08:1C:22:1F:41:9D:64:8E:F7:DE:EA:A7:1B:4C:0C:B6:7A:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa
Signing time:             Thu 15 Aug 2024 21:12:19 +0000
ROA not before:           Thu 15 Aug 2024 21:07:19 +0000
ROA not after:            Thu 14 Aug 2025 21:12:19 +0000
asID:                     272195
IP address blocks:        2804:8364:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.crl
                          rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:be:4c:95:ad:bb:49:88:6f:cf:9f:63:6d:17:3f:98:86:fe:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0604081C221F419D648EF7DEEAA71B4C0CB67AE5
        Validity
            Not Before: Aug 15 21:07:19 2024 GMT
            Not After : Aug 14 21:12:19 2025 GMT
        Subject: CN=8971E4D1BF48E75577C2057F26670B5DD392132F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:7c:98:21:e5:21:54:67:d0:59:3b:f5:39:
                    7c:10:d1:46:21:d1:f3:5f:6e:01:85:47:d5:f2:2d:
                    8b:e1:42:f2:c2:ff:ce:eb:ad:4b:51:81:9e:bd:fc:
                    a4:aa:45:2a:05:4c:d2:5c:74:14:ce:3b:b9:e0:1f:
                    02:d0:4e:6d:a3:cf:34:c9:dc:32:89:73:c7:65:e3:
                    f3:78:8b:7f:7f:31:db:c0:db:1b:5f:9c:36:2c:5a:
                    17:b3:82:98:51:1a:09:53:7f:95:72:f1:3d:c0:38:
                    05:c1:73:40:d1:a8:e2:b3:89:44:d2:7d:75:ea:85:
                    32:03:16:70:20:bc:12:5c:33:99:e7:63:13:d3:a1:
                    8b:3f:d1:a1:2e:9c:b0:23:96:8d:d7:af:74:4e:5b:
                    46:23:94:4d:6b:03:ce:02:f9:9b:43:6e:b8:8f:56:
                    00:d6:72:9e:ab:0d:25:dc:ae:c2:b1:9e:0f:ce:72:
                    54:ce:66:e5:cc:ee:5a:f7:20:27:cd:51:a7:31:de:
                    03:4d:ee:52:c9:14:81:9a:ab:81:e0:5f:e0:5d:e2:
                    b0:1f:b8:12:e0:3c:ad:20:96:30:8c:8e:ab:4f:d9:
                    f7:20:e8:67:c5:ea:95:ba:3e:f6:d7:0e:aa:43:2b:
                    9b:3c:6a:71:98:1a:a5:ef:c5:ea:cc:d0:99:ad:aa:
                    97:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:71:E4:D1:BF:48:E7:55:77:C2:05:7F:26:67:0B:5D:D3:92:13:2F
            X509v3 Authority Key Identifier:
                keyid:06:04:08:1C:22:1F:41:9D:64:8E:F7:DE:EA:A7:1B:4C:0C:B6:7A:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0604081C221F419D648EF7DEEAA71B4C0CB67AE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/323830343a383336343a633030303a3a2f33342d3334203d3e20323732313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:89:92:c8:2e:b6:70:6c:87:6d:55:bf:26:96:8f:95:c1:2b:
         9f:68:c9:9e:fc:9e:0a:c0:63:23:43:6e:ea:56:41:f2:b4:18:
         fd:14:bb:89:b0:29:56:8e:b3:43:ca:7f:a4:86:b3:f3:fe:eb:
         37:10:88:b6:ef:34:01:ad:2f:bb:6e:c3:18:40:10:7a:67:66:
         8b:a2:b7:33:05:de:76:03:f7:8b:62:ee:95:29:5d:19:99:bf:
         ab:b5:38:67:9b:e9:bd:c8:f7:28:c7:a8:f5:2e:3b:80:c8:ca:
         2c:9c:11:4a:74:4c:de:d5:86:5b:4b:77:0b:3c:42:97:d7:a7:
         0a:53:1a:54:29:ef:b8:fc:e4:a1:47:f0:3c:4c:fc:d1:1d:0e:
         ec:8e:c4:0c:c8:29:84:9a:c7:41:5b:d6:6e:4c:0f:d0:f7:d5:
         71:17:98:ae:82:8c:27:2c:7c:ca:f9:43:b9:18:11:8d:3d:3f:
         c1:37:84:e7:f9:42:28:60:8e:15:22:0c:c8:78:ca:ff:3b:d7:
         b2:e4:bd:22:ef:0e:01:43:07:84:a5:e2:41:a9:f2:e9:f1:8b:
         0c:88:df:6e:02:4f:d6:df:84:6f:0d:32:fb:fb:c8:ab:c2:75:
         08:73:a6:a4:4b:86:af:cf:0d:3e:49:4a:a1:bb:31:b5:23:10:
         c3:59:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org