Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/323830343a363362303a3a2f33322d313238203d3e20323639333737.roa
File:                     323830343a363362303a3a2f33322d313238203d3e20323639333737.roa (raw, json)
Hash identifier:          QtUhQ02HfV73c1qnVpUdmPCpUCjDfweBR9tAnxB/AgI=
Subject key identifier:   21:ED:F2:04:55:CE:2B:4A:AB:11:FB:79:3B:A8:0A:76:92:3C:88:D1
Certificate issuer:       /CN=8A13F2C48B757DD40E0F43387960210FD56D3819
Certificate serial:       16B7B84EEC3F8D3902A50BFC7C9D30BD8DB67E05
Authority key identifier: 8A:13:F2:C4:8B:75:7D:D4:0E:0F:43:38:79:60:21:0F:D5:6D:38:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/323830343a363362303a3a2f33322d313238203d3e20323639333737.roa
Signing time:             Thu 15 Aug 2024 16:01:19 +0000
ROA not before:           Thu 15 Aug 2024 15:56:19 +0000
ROA not after:            Thu 14 Aug 2025 16:01:19 +0000
asID:                     269377
IP address blocks:        2804:63b0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.crl
                          rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:b8:4e:ec:3f:8d:39:02:a5:0b:fc:7c:9d:30:bd:8d:b6:7e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A13F2C48B757DD40E0F43387960210FD56D3819
        Validity
            Not Before: Aug 15 15:56:19 2024 GMT
            Not After : Aug 14 16:01:19 2025 GMT
        Subject: CN=21EDF20455CE2B4AAB11FB793BA80A76923C88D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:0e:6e:f7:97:cb:bf:c4:61:6e:1f:90:07:
                    40:f2:23:18:4c:e2:f7:ac:75:c4:e7:b3:93:f4:ca:
                    43:f0:0a:76:e4:13:6d:f9:b1:7f:a5:24:94:72:66:
                    65:14:51:57:1b:1e:7f:a8:11:0c:95:41:46:5e:ad:
                    9e:a0:46:4a:ba:f9:8d:41:5b:f6:26:35:c2:f0:eb:
                    1c:42:85:9b:97:2e:aa:13:42:56:e2:d3:c4:2b:4f:
                    27:4b:53:06:de:e5:2f:3a:59:6c:b6:6c:89:36:c1:
                    06:d0:67:0b:85:d8:9c:3b:c9:b4:f3:a4:7e:5f:53:
                    4c:51:97:6e:fe:6c:94:b0:f0:e4:97:2c:33:fd:40:
                    d6:b8:0e:b6:60:49:70:9c:4e:ce:42:98:de:e9:f1:
                    35:3f:c6:80:a8:69:34:5b:31:f5:f9:38:3d:f3:0f:
                    0f:b0:8b:a4:e5:e1:16:8e:c1:53:14:6f:bb:64:00:
                    0f:b3:46:1c:a9:c3:53:d2:15:61:00:5d:9a:57:41:
                    88:74:7b:22:e2:16:1a:02:54:03:14:07:12:7d:8f:
                    58:3b:e5:1d:03:ef:6f:4d:32:2b:61:64:d4:b9:c7:
                    88:fe:ef:56:8d:fc:21:11:40:aa:7a:18:82:df:b1:
                    94:5d:0f:5e:2a:30:df:47:55:4c:67:a1:00:2b:38:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:ED:F2:04:55:CE:2B:4A:AB:11:FB:79:3B:A8:0A:76:92:3C:88:D1
            X509v3 Authority Key Identifier:
                keyid:8A:13:F2:C4:8B:75:7D:D4:0E:0F:43:38:79:60:21:0F:D5:6D:38:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/8A13F2C48B757DD40E0F43387960210FD56D3819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A13F2C48B757DD40E0F43387960210FD56D3819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/323830343a363362303a3a2f33322d313238203d3e20323639333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:60:36:71:f3:91:8f:5f:a7:c2:aa:0c:5c:a1:81:7c:d7:
         94:76:82:53:64:18:5b:2a:ee:4e:3b:a1:9f:b6:29:3f:8c:4c:
         ea:0e:93:39:a3:fd:b6:7e:5e:82:8c:54:8c:2a:3c:a2:47:48:
         34:59:48:79:f0:c8:a9:c2:22:aa:3b:96:06:da:93:16:34:60:
         a6:01:b5:3f:e9:c5:ac:5f:db:21:23:6a:1c:8f:38:c7:73:ba:
         33:23:9c:52:90:c3:34:2f:fe:28:91:e1:3f:60:82:c9:6f:bc:
         bd:2e:84:a4:c1:b2:88:81:a7:0e:ec:23:49:0e:3e:95:b2:24:
         16:36:d5:88:fd:32:35:7c:77:99:77:89:a0:6b:9e:84:79:4f:
         32:0a:c1:06:a0:d7:40:96:82:b5:b3:f2:91:1e:cd:25:c9:ab:
         23:5e:77:00:55:54:d2:1f:9f:9e:1b:f0:03:ff:ca:f0:b9:a8:
         bc:d8:41:1e:44:d1:5a:8d:d9:e4:5b:d0:fe:32:f4:30:06:26:
         6b:08:40:6b:bd:69:b1:16:55:38:de:ee:88:f7:47:ae:65:48:
         2a:c4:b5:e5:60:97:68:5a:74:a3:49:a3:a4:c8:7c:bf:29:3e:
         04:0e:42:e8:14:af:7a:66:b9:47:27:a8:37:35:df:00:12:7e:
         d0:fe:b1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:50 2024 by rpki-client on console-fra.rpki-client.org