Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa
File:                     323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa (raw, json)
Hash identifier:          KWOSwpv7jG/uGwYFOl3eUS2fQ+A8OAIi0KsyvtJQkMQ=
Subject key identifier:   22:90:D8:C2:D3:8C:4A:E3:7F:01:80:17:A8:98:62:CE:00:65:39:5F
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       7EC3CF6E77760BEDE59A3DBD15992213DADCD0D3
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:32 +0000
ROA not before:           Mon 02 Sep 2024 12:47:32 +0000
ROA not after:            Mon 01 Sep 2025 12:52:32 +0000
asID:                     263541
IP address blocks:        2804:1398:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c3:cf:6e:77:76:0b:ed:e5:9a:3d:bd:15:99:22:13:da:dc:d0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:32 2024 GMT
            Not After : Sep  1 12:52:32 2025 GMT
        Subject: CN=2290D8C2D38C4AE37F018017A89862CE0065395F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:05:b7:c9:80:ba:b7:b9:07:3c:10:ae:8d:66:
                    e3:bf:95:58:48:5e:72:a9:66:82:8d:dd:bc:bb:54:
                    25:d1:e0:32:48:02:38:e7:f6:9e:1c:09:36:e2:25:
                    43:88:3f:72:69:c7:b6:29:a3:71:5b:0c:2f:f4:d6:
                    69:72:8d:41:76:3c:ac:e8:3b:82:c9:91:fa:31:24:
                    81:c0:ff:03:89:4f:4d:3c:de:0e:7c:44:07:15:7d:
                    7e:f1:a0:da:7d:b1:c5:2b:e7:bd:dc:58:c6:71:c8:
                    ea:80:ba:e4:12:43:df:b2:f1:62:7d:63:35:e3:a4:
                    58:15:12:1e:80:c5:dc:8b:5a:44:f6:64:90:9a:4a:
                    f9:e9:63:95:46:97:f4:d5:41:ce:17:cf:a5:ae:d5:
                    5c:3e:cf:b5:03:b8:49:26:68:f1:05:f7:ee:98:15:
                    e3:24:54:92:11:34:42:8e:6f:16:84:f2:46:1d:71:
                    d4:0a:b2:33:5a:e6:6e:dc:8e:ad:58:8b:fa:35:19:
                    8d:45:07:3a:2f:e3:26:83:f0:26:07:78:ae:ff:3a:
                    ca:46:c8:6b:57:84:b3:ac:12:7d:22:7d:49:7a:74:
                    c3:42:45:b3:3b:81:c6:06:ce:bf:8d:19:af:e1:9f:
                    db:13:e2:8c:f8:46:67:5c:1e:86:23:bd:d8:fa:95:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:D8:C2:D3:8C:4A:E3:7F:01:80:17:A8:98:62:CE:00:65:39:5F
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a383030303a3a2f33342d3334203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:ff:5b:96:3a:74:81:ef:7e:b8:b9:88:8d:da:c8:40:48:
         ed:a4:91:d2:43:38:21:79:45:d6:f0:a8:1a:68:b9:db:b3:aa:
         3e:eb:0e:b3:6f:3e:2a:e5:d0:fc:fd:ff:7a:6a:02:e9:9d:0f:
         38:24:77:0b:60:5b:9a:6b:c3:36:72:9c:1e:85:28:8d:3c:0e:
         3e:6e:e9:cb:6d:1d:ea:0d:69:04:03:ef:61:f5:7b:b1:c8:bf:
         17:77:ca:47:e0:59:a9:c6:fd:b9:99:31:14:88:73:e3:c0:d7:
         48:9d:c1:9f:f6:e4:89:43:49:b8:e8:12:77:d4:fd:b2:e9:83:
         eb:29:18:1a:72:5f:16:95:81:49:be:58:9e:fa:f4:98:b4:60:
         9a:3c:26:bb:88:91:09:16:6c:8e:47:68:59:6b:ee:4d:ec:92:
         7e:61:5e:74:34:15:5d:32:7f:1c:7e:e1:40:4d:4f:f6:ff:18:
         f6:d7:f5:4c:07:69:b3:5f:7e:c7:90:31:a4:36:cd:f1:0f:24:
         e9:ab:ea:49:59:06:e1:ec:c8:db:30:0c:1d:c3:ae:87:c1:36:
         5d:be:55:48:59:da:d2:43:a5:63:38:2e:02:6b:f6:f9:f0:9e:
         c4:1d:93:95:24:65:72:90:41:fd:5c:d9:36:76:0e:c6:b3:04:
         32:f8:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:32:11 2024 by rpki-client on console-fra.rpki-client.org