Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa
File:                     323830343a386562383a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier:          eA0Ac/o8vbnlURh9Oxe6RmCv7K69+JV8FROoyyThe2w=
Subject key identifier:   8E:19:9C:8E:79:D0:A0:47:70:EA:2F:BA:64:28:FB:52:16:C7:CF:A8
Certificate issuer:       /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial:       5C74EC7EEB8D7DDACB0C0D056FAF0684F58687EA
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa
Signing time:             Mon 28 Oct 2024 12:46:14 +0000
ROA not before:           Mon 28 Oct 2024 12:41:14 +0000
ROA not after:            Mon 27 Oct 2025 12:46:14 +0000
asID:                     273444
IP address blocks:        2804:8eb8::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
                          rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 19:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:74:ec:7e:eb:8d:7d:da:cb:0c:0d:05:6f:af:06:84:f5:86:87:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
        Validity
            Not Before: Oct 28 12:41:14 2024 GMT
            Not After : Oct 27 12:46:14 2025 GMT
        Subject: CN=8E199C8E79D0A04770EA2FBA6428FB5216C7CFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:b2:d5:c0:2f:9f:0a:c6:d1:50:89:35:41:
                    b3:6e:22:79:51:5e:05:4b:45:65:77:d0:b8:21:9d:
                    a5:b7:4c:f7:72:e1:ee:55:31:eb:ac:42:86:63:40:
                    44:8b:17:90:c3:5a:53:bf:be:06:8c:bd:df:c2:19:
                    0c:66:59:b6:c2:17:8f:4e:15:93:37:33:6e:f7:a5:
                    57:6c:c1:3e:ee:f7:63:9f:7d:1a:87:d6:8a:47:d6:
                    aa:4c:0b:25:73:8e:34:e9:a3:26:0f:75:4a:b8:bd:
                    87:43:a4:64:4b:48:b1:1a:e7:bb:64:35:67:50:81:
                    4f:d2:4a:34:20:1c:57:86:f9:0d:37:75:10:13:f4:
                    ba:c6:e1:5a:fc:2d:d9:ee:3b:9e:ef:5e:85:6f:43:
                    0f:af:de:13:7d:32:c4:34:bd:e0:49:a7:5c:0e:93:
                    e7:88:fd:35:92:33:34:48:c6:72:34:2b:27:b2:12:
                    00:8b:eb:7b:ad:81:0b:52:89:72:6d:c9:0d:38:be:
                    38:8b:37:c1:a3:51:63:3a:22:8e:4c:d9:0a:c7:02:
                    ce:a3:6b:3d:9d:fe:5d:00:84:db:bf:ef:af:6d:ee:
                    ec:0e:92:2a:57:72:e4:df:56:68:c8:17:ff:7f:a2:
                    60:c4:ba:61:33:30:83:be:cb:a0:4b:86:8e:67:cc:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:19:9C:8E:79:D0:A0:47:70:EA:2F:BA:64:28:FB:52:16:C7:CF:A8
            X509v3 Authority Key Identifier:
                keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a3a2f33342d3334203d3e20323733343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8eb8::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:94:76:3a:1f:77:dc:4f:14:c0:08:e5:e1:9d:19:61:2e:ad:
         64:c0:ac:3e:f3:d8:e0:64:1b:74:3b:d5:a0:e1:63:58:6d:5d:
         3e:76:d4:f1:17:09:ef:c2:62:cb:e0:3c:c5:d7:e3:00:bf:fe:
         40:f6:14:80:62:2d:8a:af:d4:df:0f:cd:6e:da:57:73:65:5d:
         32:f2:0a:c3:68:37:c7:1c:c7:3b:cd:fc:2e:87:1f:c0:33:b5:
         4b:c4:4b:7a:56:88:9f:9a:6b:30:e5:27:d0:2b:39:92:bc:0b:
         2a:ff:55:a7:50:0d:3b:70:9f:53:4a:03:74:2b:5e:0e:f3:b0:
         41:e9:76:6c:7c:e1:bf:82:b0:c5:2e:32:07:d9:b8:8a:82:6a:
         f7:3d:40:4a:78:cc:74:b8:cb:b9:bd:b6:9b:a6:16:88:06:4e:
         f1:59:4e:89:78:5f:0c:c8:56:92:13:58:34:6e:4d:ef:40:ce:
         c1:b6:e2:f8:38:bf:6a:77:b5:37:fd:19:e0:77:35:62:00:98:
         c3:57:ec:b8:3a:54:ac:28:c8:43:d0:a8:67:7d:12:d6:39:e5:
         9e:89:18:ce:22:6d:19:c2:1c:ca:7e:94:b5:80:5e:0b:b6:19:
         a9:d8:71:53:3f:79:1b:d0:68:63:f4:4c:7b:5c:28:56:ac:69:
         bf:62:f6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 18:58:11 2024 by rpki-client on console-fra.rpki-client.org