Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa
File:                     323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier:          zb01PximZbqppB9aptLokB6AdSg/KEp4ZER79DbQchA=
Subject key identifier:   41:F6:C2:08:C4:A0:34:AC:33:41:E3:C7:25:5D:9F:80:EF:D3:F5:AC
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       69B23A5CE308745931255A055F3709E4D1F069A1
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa
Signing time:             Mon 28 Oct 2024 12:46:15 +0000
ROA not before:           Mon 28 Oct 2024 12:41:15 +0000
ROA not after:            Mon 27 Oct 2025 12:46:15 +0000
asID:                     273444
IP address blocks:        2804:8eb8:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b2:3a:5c:e3:08:74:59:31:25:5a:05:5f:37:09:e4:d1:f0:69:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Oct 28 12:41:15 2024 GMT
            Not After : Oct 27 12:46:15 2025 GMT
        Subject: CN=41F6C208C4A034AC3341E3C7255D9F80EFD3F5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:d8:38:2f:78:f9:7d:ab:92:ac:4f:30:76:
                    2f:b1:5f:8a:29:5f:59:72:69:54:31:44:ca:b5:4d:
                    14:fa:49:6d:b7:4b:4d:2b:12:1e:d9:91:a9:5b:66:
                    09:1f:ce:d4:63:60:fd:b0:9d:0e:1a:3a:af:1c:a5:
                    92:ec:89:69:cd:ca:50:8e:42:4c:b2:e7:b8:20:df:
                    c6:b4:1a:74:41:21:78:64:c6:66:9f:d3:62:01:52:
                    a7:b6:21:4d:29:0e:0d:0b:bb:2f:b5:58:0e:81:14:
                    13:60:5b:77:86:72:b8:f6:12:11:00:7f:67:29:16:
                    f2:f4:4e:2d:05:1e:83:c8:db:32:48:29:3d:4c:5f:
                    10:20:d1:28:22:ad:9e:c7:d5:68:e9:f3:34:4b:92:
                    3d:a1:ac:36:86:1f:18:a6:bb:a7:ce:67:56:64:a5:
                    20:2e:f6:ff:86:73:9d:ca:bc:27:cc:ca:92:8d:87:
                    23:49:87:7b:56:ba:20:24:ec:0b:70:f5:e4:f5:2f:
                    e0:73:c5:32:bf:a1:db:f8:2e:06:6d:9f:43:49:e2:
                    25:ab:c8:29:3a:23:7a:19:de:b6:db:69:0d:5d:f1:
                    1d:f4:6f:9d:fe:52:f2:8f:e9:8f:c3:03:1c:fc:2d:
                    ca:4a:bc:6d:0e:d7:02:d5:06:37:2e:d4:19:c2:6f:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F6:C2:08:C4:A0:34:AC:33:41:E3:C7:25:5D:9F:80:EF:D3:F5:AC
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a343030303a3a2f33342d3334203d3e20323733343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:d5:64:10:72:a4:15:eb:82:53:25:61:81:85:27:05:65:bf:
         8e:11:bf:b8:72:c9:b0:16:47:9e:05:02:9e:d9:63:42:83:f4:
         50:78:c4:3f:d3:7a:37:6d:4e:b9:39:e4:78:b7:35:ee:df:30:
         06:ef:d8:2d:0a:54:69:0e:ca:f5:d4:ba:c3:a6:68:96:ef:c7:
         53:f8:3a:cb:54:70:e3:50:fe:8f:da:69:6e:66:c0:76:cc:eb:
         34:ba:bc:f6:4b:48:03:25:eb:e7:70:58:8e:97:cc:9a:20:ff:
         1f:f1:78:11:3c:bf:a7:89:50:cf:9f:33:b6:04:61:fe:03:01:
         89:59:4a:6a:3a:33:cf:97:7e:3a:dd:41:6a:fe:16:62:fa:c0:
         c1:71:fa:64:db:4a:12:e4:e0:45:d0:24:71:a7:21:fc:4f:39:
         a5:c9:7f:27:51:a6:26:b9:d9:a3:13:9f:03:ce:79:3e:ff:10:
         96:bc:0e:c0:ef:e4:36:91:09:9c:8e:d6:4a:08:01:fb:48:1a:
         45:d6:67:07:c1:d3:b3:03:bf:7b:75:18:ea:c8:de:db:61:47:
         b0:02:09:aa:43:dc:ea:c1:da:2c:56:d5:0e:c8:19:45:cb:2d:
         99:39:ef:a3:25:7f:15:b0:c7:28:a2:55:6c:99:94:c8:53:b9:
         38:b8:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:27:42 2024 by rpki-client on console-ams.rpki-client.org