Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          XejAMsa+nT7Lc9iBkq5hSaNpgpMwOIpH3ELnPM+ghko=
Subject key identifier:   4F:77:61:7A:96:83:18:25:95:26:57:AC:8A:58:E5:87:8D:E3:84:70
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       4536F3D92038BB9340F0792BAA1BF041904FC908
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:09 +0000
ROA not before:           Mon 12 Aug 2024 17:05:09 +0000
ROA not after:            Mon 11 Aug 2025 17:10:09 +0000
asID:                     267121
IP address blocks:        2804:4870:1b2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:36:f3:d9:20:38:bb:93:40:f0:79:2b:aa:1b:f0:41:90:4f:c9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:09 2024 GMT
            Not After : Aug 11 17:10:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b8:89:a4:87:28:cd:06:19:e8:e7:d2:03:ea:
                    aa:ff:1e:55:1a:c8:1f:fb:46:d3:1f:eb:91:91:84:
                    1a:90:1a:db:c3:d5:de:b4:43:ce:a9:57:8f:23:be:
                    42:3d:7d:53:2c:8a:61:c5:cf:78:71:52:91:2c:2e:
                    2b:c0:76:2b:52:25:38:7b:77:3c:a9:8a:73:49:52:
                    e1:67:e0:62:8e:6b:84:8e:72:53:77:8d:8e:6e:77:
                    b5:5d:2c:a4:67:e5:f9:7c:83:a5:f9:7b:de:bf:e0:
                    87:05:83:5e:cf:da:db:6f:cd:56:6c:47:ec:65:10:
                    70:30:62:f3:47:cf:45:fd:aa:f1:57:fe:b7:85:bb:
                    d9:75:d3:70:be:d5:d4:0e:b1:d7:49:7a:ee:eb:90:
                    4f:dd:54:ed:4e:55:55:c7:68:1b:1e:e8:25:1a:a0:
                    eb:8b:09:e3:82:a5:1e:be:29:31:20:6f:3b:72:85:
                    da:08:d8:c2:56:fe:2a:34:fe:a2:62:c2:a1:91:b9:
                    d2:2d:60:b6:c5:2b:0d:83:ed:33:93:d2:b4:c0:63:
                    ae:0b:d1:e5:f0:66:e9:7c:d3:c8:ee:82:7b:f3:41:
                    8c:ed:b8:db:19:bc:42:07:73:ab:4a:10:93:4c:c4:
                    9b:1c:98:fa:5a:4b:27:86:a2:ad:2f:b5:6e:61:8c:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:61:7A:96:83:18:25:95:26:57:AC:8A:58:E5:87:8D:E3:84:70
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3162323a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:db:8b:eb:c5:42:88:a0:7b:ef:2e:99:78:03:d1:90:7f:
         66:8b:0f:a3:e0:69:91:cf:97:64:b0:2b:e9:02:d4:db:69:dd:
         6f:4e:38:9b:ec:1c:25:c5:91:0f:c7:48:82:b1:18:d2:c2:e5:
         9b:5d:3c:aa:58:3f:bc:37:8b:02:a7:2c:87:b7:3c:21:b7:55:
         a3:e1:cd:3d:cf:2b:7e:62:c3:56:74:42:be:16:a7:cb:7a:d5:
         6d:49:af:24:84:06:a9:cd:eb:55:03:a2:d0:46:3f:42:9c:38:
         48:60:ec:8b:44:1b:f5:9a:52:4d:df:be:cd:eb:09:e7:19:35:
         91:18:2d:b8:42:44:c7:99:28:10:56:38:ac:cf:18:cd:52:8e:
         87:f4:05:54:d1:ad:23:a6:51:6d:57:fc:59:06:bc:81:d7:e0:
         96:19:23:d1:7c:a8:95:70:8c:a2:38:ce:37:bd:0e:6c:80:3b:
         fc:62:c8:ad:45:55:d2:33:c6:7d:6a:38:e2:d0:8d:ab:10:5a:
         dc:3c:7c:41:1c:30:01:b3:b1:d9:74:f5:82:4d:32:f7:99:f5:
         f7:a9:6a:bf:91:3b:be:ec:8b:80:a4:79:0d:6a:66:4a:fa:59:
         84:45:8c:dc:08:b8:74:40:3c:79:67:37:96:fe:4b:c5:c8:86:
         25:b5:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org