Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33342d3334203d3e20323637313335.roa
File:                     323830343a343861343a3a2f33342d3334203d3e20323637313335.roa (raw, json)
Hash identifier:          nVLH/Pq+3WJl9MNZGzVkpnbjIKh8B0QUc9qLRA+Whds=
Subject key identifier:   ED:E9:E6:41:39:0C:2D:0E:E3:51:47:00:22:E2:68:32:80:47:4D:CB
Certificate issuer:       /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial:       75C5E94818FC19E42DE2C8C8EB2DE6B424707EFD
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33342d3334203d3e20323637313335.roa
Signing time:             Tue 26 Nov 2024 17:22:57 +0000
ROA not before:           Tue 26 Nov 2024 17:17:57 +0000
ROA not after:            Tue 25 Nov 2025 17:22:57 +0000
asID:                     267135
IP address blocks:        2804:48a4::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
                          rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 19:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:e9:48:18:fc:19:e4:2d:e2:c8:c8:eb:2d:e6:b4:24:70:7e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
        Validity
            Not Before: Nov 26 17:17:57 2024 GMT
            Not After : Nov 25 17:22:57 2025 GMT
        Subject: CN=EDE9E641390C2D0EE351470022E2683280474DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:9c:59:5a:d8:e8:28:ad:21:40:16:b7:4c:
                    6a:4f:3f:8c:12:c1:2a:66:f7:cd:15:88:e4:ff:21:
                    f7:91:3e:3f:40:79:b6:50:65:ed:bc:fd:36:25:c2:
                    ca:19:cd:0a:f4:bd:80:e2:22:c0:87:78:34:2c:ce:
                    e1:6b:d6:e7:a8:2e:19:79:6c:30:9a:1a:1c:e9:16:
                    cb:89:44:1a:28:29:cd:f8:f8:5c:5c:e6:4c:40:95:
                    13:e3:6d:bf:fd:bf:65:ef:37:5e:fe:ff:b8:69:6c:
                    db:ab:0c:1d:2c:08:7a:76:f1:4f:51:f6:04:ec:2c:
                    7c:b4:b8:9c:3c:02:03:96:70:57:b3:72:67:c4:31:
                    f2:69:39:7e:31:e5:33:67:50:5a:a3:f1:e7:d7:e3:
                    f3:17:d5:b7:9c:ea:cf:d8:fb:7d:89:24:a5:d6:9d:
                    f8:ea:e1:f5:97:50:21:3e:8d:c4:30:40:a5:8c:87:
                    52:d3:f6:1a:47:f0:c8:80:34:2a:f2:11:b4:d6:22:
                    e5:80:ac:e8:ac:d0:fe:b9:31:38:6e:26:4b:9a:16:
                    84:9a:6e:99:95:f5:f0:dd:bc:d6:60:8a:76:d7:19:
                    32:e9:26:08:0f:ce:fe:e3:04:0d:86:cc:08:23:cb:
                    6b:b1:66:8f:47:fb:da:fc:24:08:1d:f5:45:0a:9b:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E9:E6:41:39:0C:2D:0E:E3:51:47:00:22:E2:68:32:80:47:4D:CB
            X509v3 Authority Key Identifier:
                keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/323830343a343861343a3a2f33342d3334203d3e20323637313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48a4::/34

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:2e:7d:64:c2:b1:12:54:27:b2:ad:de:3a:6f:6e:47:2e:
         21:6b:f6:da:68:71:b5:60:f8:0b:3a:5e:7d:51:18:b3:ae:56:
         ff:ae:03:b3:b1:a4:49:7f:d5:db:17:5e:c2:d0:68:7f:86:dd:
         86:a1:c5:a1:1e:b9:c7:6a:2b:61:9d:13:05:fb:4c:cc:ae:f4:
         b8:5d:d6:1b:1c:ef:85:df:9e:23:3c:7c:7d:81:9a:d1:e4:59:
         3a:68:7a:96:2e:4d:a1:ef:53:9c:84:a9:00:d1:70:af:3e:29:
         c7:a1:73:c2:63:9e:21:1f:df:42:9f:5a:45:a0:cf:b9:f1:b0:
         6d:f4:6b:3c:db:c6:a1:7e:7f:4c:dd:e4:ab:d9:3d:22:dc:44:
         e6:d6:0e:b0:e3:51:2d:d4:80:9e:19:ae:09:4f:6a:f4:ae:ba:
         70:13:ef:e2:33:56:d7:f3:2e:16:79:49:24:4d:3b:37:22:b4:
         79:5b:f6:64:d7:a1:bd:9c:d8:0b:ec:3f:1d:73:f1:63:97:80:
         e5:6c:b2:5e:29:14:c7:40:10:f6:5c:10:6a:53:e7:78:14:d1:
         d1:59:2f:24:77:0e:df:df:be:89:0f:5b:16:90:61:79:03:e1:
         7d:ed:15:00:10:36:cc:c4:f3:17:8d:e2:74:49:62:6b:aa:36:
         d6:64:b9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 19:05:49 2024 by rpki-client on console-fra.rpki-client.org