Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          VzF55dntlSWzThONvkz+BdCkNxYN8GjVdIu6qQYKfUo=
Subject key identifier:   DA:EF:3C:34:EB:4B:41:65:49:5D:8A:AB:95:75:9F:D0:7A:FA:02:04
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       2C80DE0646F7DA8A824E0D0840F168290FE7148A
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Mon 12 Aug 2024 20:09:40 +0000
ROA not before:           Mon 12 Aug 2024 20:04:40 +0000
ROA not after:            Mon 11 Aug 2025 20:09:40 +0000
asID:                     269107
IP address blocks:        2804:5f88:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:80:de:06:46:f7:da:8a:82:4e:0d:08:40:f1:68:29:0f:e7:14:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: Aug 12 20:04:40 2024 GMT
            Not After : Aug 11 20:09:40 2025 GMT
        Subject: CN=3082010A0282010100A112DA2785A512CB986E5DABE7CD81B6DBA948F1630C845919D7F9BA154F8A2DB98E43589C598C127BBA71C1E3DC57897BECD95B57FF9BC057E573594BD8135D2CAB8B6FA4FE14E65A9DA43FD0D0D8FEBEB038354B28659F5E7BED3451FEEBDF441B3DD53B2CD4858FEE3E8B1A25922D8550073CDFFD9B9F42D2B14196811E3E0BB7E5534F383DF1B976C546127FE6A6045F613F6C7C628E34618FEB2535F9279889DCA4ADF4ECD5CC3E7452EB7F61D4F98A89E76A6A8D2DA127F48129E3FD8CDE21DAB9281E5611E369CE028568623A2D016E169106A3F00E4C95C1F7DAF291C415414F6AF0172FFEAA835F7C5AE0ED18222135C6E230BF52E11DE50533EA5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:da:27:85:a5:12:cb:98:6e:5d:ab:e7:cd:
                    81:b6:db:a9:48:f1:63:0c:84:59:19:d7:f9:ba:15:
                    4f:8a:2d:b9:8e:43:58:9c:59:8c:12:7b:ba:71:c1:
                    e3:dc:57:89:7b:ec:d9:5b:57:ff:9b:c0:57:e5:73:
                    59:4b:d8:13:5d:2c:ab:8b:6f:a4:fe:14:e6:5a:9d:
                    a4:3f:d0:d0:d8:fe:be:b0:38:35:4b:28:65:9f:5e:
                    7b:ed:34:51:fe:eb:df:44:1b:3d:d5:3b:2c:d4:85:
                    8f:ee:3e:8b:1a:25:92:2d:85:50:07:3c:df:fd:9b:
                    9f:42:d2:b1:41:96:81:1e:3e:0b:b7:e5:53:4f:38:
                    3d:f1:b9:76:c5:46:12:7f:e6:a6:04:5f:61:3f:6c:
                    7c:62:8e:34:61:8f:eb:25:35:f9:27:98:89:dc:a4:
                    ad:f4:ec:d5:cc:3e:74:52:eb:7f:61:d4:f9:8a:89:
                    e7:6a:6a:8d:2d:a1:27:f4:81:29:e3:fd:8c:de:21:
                    da:b9:28:1e:56:11:e3:69:ce:02:85:68:62:3a:2d:
                    01:6e:16:91:06:a3:f0:0e:4c:95:c1:f7:da:f2:91:
                    c4:15:41:4f:6a:f0:17:2f:fe:aa:83:5f:7c:5a:e0:
                    ed:18:22:21:35:c6:e2:30:bf:52:e1:1d:e5:05:33:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:3C:34:EB:4B:41:65:49:5D:8A:AB:95:75:9F:D0:7A:FA:02:04
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a383030303a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:9c:ea:92:2d:c8:a4:b6:ce:19:82:46:dc:8d:a7:3e:23:
         49:8b:68:00:3f:4e:8e:7e:58:f5:ed:8b:df:69:74:da:71:91:
         a3:6b:80:c9:be:56:5b:5b:e0:1f:a0:ba:84:55:1c:03:3b:05:
         3b:47:ad:b4:79:c7:40:e6:f3:89:c4:10:f4:d7:a3:f2:5f:51:
         e6:33:ff:ce:2c:0c:aa:8b:43:e8:6f:a9:24:98:a8:45:cf:a6:
         04:1a:d8:04:f2:62:8f:8c:1d:8f:33:38:bf:7e:76:08:b8:89:
         78:b6:36:86:71:00:6a:b5:b6:ab:23:86:93:72:43:cf:e7:7b:
         8f:b4:8b:c7:b1:58:8d:42:05:41:f1:94:be:80:dc:93:ed:6e:
         3b:13:60:a0:93:6f:a7:18:b7:9c:04:ca:cf:51:24:b7:cd:58:
         94:4c:98:0f:c1:9f:8e:1f:61:42:29:db:b0:01:0b:24:f1:a1:
         09:23:84:09:4f:db:8d:a0:20:cc:69:87:99:be:b2:26:fc:29:
         bc:9a:1f:61:20:de:fa:de:dd:1d:ad:16:ba:ed:ae:20:5f:fd:
         41:09:d0:7b:10:54:1b:eb:0b:d7:c9:cf:aa:e6:30:4f:8d:29:
         5b:7a:6f:15:19:cd:c7:1f:b7:7f:90:15:b6:0e:0c:0e:f9:4a:
         fa:d3:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:58 2024 by rpki-client on console-ams.rpki-client.org