Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          1pvWnP2paHDAyKfHiKL9d1uveEQtBulIq0v7tfs7hCE=
Subject key identifier:   90:F9:78:DB:0A:63:4D:83:92:ED:91:21:C5:93:E7:D0:E5:25:A1:94
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       31E1107DE0892AFAD4CB3B7DB291678A1D892AF6
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870:1c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:10:7d:e0:89:2a:fa:d4:cb:3b:7d:b2:91:67:8a:1d:89:2a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:e1:11:48:25:27:eb:5b:4a:f3:e2:a2:46:
                    51:58:a3:2e:22:49:63:77:c9:66:64:19:73:27:73:
                    ac:ca:a1:b0:ff:c9:11:e4:70:94:0d:ab:a4:cf:25:
                    c0:44:68:83:8d:c7:dd:43:58:6b:3b:02:82:2f:c6:
                    29:b0:30:df:e0:a5:10:70:8c:9a:3e:78:95:da:f5:
                    33:46:53:35:ed:d6:c6:6b:f2:97:7e:27:14:93:c3:
                    5e:2d:9c:20:17:fe:da:31:8d:11:14:27:86:43:1f:
                    d1:25:03:50:fc:08:b1:d2:a9:84:31:31:a7:e7:60:
                    19:e4:07:8e:97:36:83:3b:0a:59:8f:79:4c:bc:f1:
                    db:70:f5:bb:af:38:c2:66:90:e8:86:c9:e8:18:c9:
                    5a:cf:ae:68:6c:72:ed:35:81:05:80:4a:51:49:e4:
                    e7:75:94:cb:80:4b:e0:40:47:e8:19:77:3a:82:be:
                    f5:ed:ac:f1:11:ab:cb:f3:eb:9e:e8:78:27:ce:65:
                    f6:c2:4f:88:f7:af:86:54:d3:71:4f:ca:bc:df:29:
                    a5:8d:7f:3b:31:b0:65:8d:3d:27:bc:7d:03:69:f7:
                    9a:a0:48:e5:35:f4:b4:55:1b:5f:89:57:f8:90:3d:
                    ad:e8:48:e6:ed:65:c2:4b:20:cf:0a:e2:cc:7f:93:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F9:78:DB:0A:63:4D:83:92:ED:91:21:C5:93:E7:D0:E5:25:A1:94
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163303a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:2e:3a:d0:99:7f:49:19:5c:72:ee:e7:c4:ea:69:cf:60:24:
         94:b9:45:f8:d3:7a:33:a6:47:45:9b:1b:f4:f7:c5:9f:c2:bf:
         b9:f9:99:8c:18:4f:b1:d2:0d:2a:31:4d:7a:6a:c9:58:4c:5a:
         4a:46:42:c1:83:4d:89:c7:54:58:dd:f8:e4:e8:c7:83:a8:a2:
         00:24:85:e8:84:9f:f4:3e:03:10:52:79:1e:2a:b2:68:1b:a1:
         2a:42:64:64:69:b3:fd:f2:a7:bc:6b:8e:a3:96:fc:05:fb:cc:
         6b:e5:cc:23:f6:1c:9d:07:1f:4f:9e:ed:60:70:81:aa:05:f6:
         de:37:2f:67:a9:da:3f:94:f5:6a:e5:dc:43:c0:f9:0a:24:93:
         60:03:27:be:50:55:40:8d:ee:5f:f6:cd:c0:f8:2f:3b:71:7f:
         3f:4d:ae:bc:6c:e9:96:05:57:75:c7:cb:87:22:10:57:2b:14:
         ea:5f:98:c2:ed:6d:68:ca:81:c3:68:74:06:c1:c6:df:da:6a:
         ed:53:35:eb:b2:1c:98:0c:0d:a0:25:23:92:01:5f:78:ff:2c:
         e8:0d:cc:72:9b:e1:b9:04:f4:39:f1:a4:f9:d7:1f:53:5f:e9:
         1f:58:15:3e:4e:9b:94:61:e0:3b:15:38:0c:a3:7b:c7:8a:3a:
         4e:c2:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org