Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          glnr6FIyBGC6ziE36OlekUYHdj2v5dJGngrA4lX4UhI=
Subject key identifier:   D8:B9:68:D7:B0:42:40:8C:97:AC:4E:3E:17:74:AF:39:CF:D8:1D:68
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       45A238BE1E4670CE93A3943CEE87678A04031E2A
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870:1c1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a2:38:be:1e:46:70:ce:93:a3:94:3c:ee:87:67:8a:04:03:1e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:67:c1:67:50:de:dc:5b:b9:6d:29:e8:43:
                    06:32:8d:88:42:a0:ad:c6:ab:d5:ff:03:74:da:0a:
                    b9:4c:3a:4b:44:e9:c5:55:dc:09:13:b5:c4:8a:0d:
                    f2:53:63:71:82:e6:74:f8:3e:31:91:43:35:37:eb:
                    0d:49:6e:9e:f1:84:98:2a:c0:43:0b:37:ea:07:df:
                    a3:bd:ff:95:42:70:df:e9:c3:14:5c:e2:4d:44:11:
                    ac:32:27:26:f8:fc:91:97:22:f2:8d:d0:fd:ac:85:
                    84:e4:af:f6:b7:38:75:33:43:f5:b5:6e:93:ab:8a:
                    30:a3:25:97:ed:e5:18:01:9e:bc:19:07:a5:66:1f:
                    61:ab:d7:e7:7a:6d:01:62:fe:65:3f:ff:ad:c6:5f:
                    6f:4e:bd:50:74:98:bf:6d:27:ac:b9:c6:b4:5e:9a:
                    84:bd:2d:4c:de:e9:aa:06:9b:cc:c9:64:e9:36:03:
                    db:a5:4d:bd:94:28:df:9f:ac:c2:a3:7a:37:a4:1c:
                    0d:6c:43:41:69:cb:0b:f5:b1:8a:ee:91:6c:68:c1:
                    00:51:91:8f:8c:65:16:d6:db:94:c5:fc:20:21:2c:
                    90:5c:1c:a8:60:30:86:bc:91:f9:b2:c3:d4:5a:f8:
                    c9:aa:d3:2f:21:d1:ca:19:11:a9:90:24:91:56:99:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B9:68:D7:B0:42:40:8C:97:AC:4E:3E:17:74:AF:39:CF:D8:1D:68
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163313a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:6f:ca:4a:92:15:55:2c:5e:10:6a:24:a0:d0:10:96:9f:
         81:6f:aa:55:e9:d8:23:cc:7c:20:aa:34:4a:5a:3f:0f:94:6c:
         6c:aa:95:87:bb:53:24:6a:e5:1a:c8:5e:ae:08:e6:61:be:6a:
         d7:4e:39:45:4c:f0:d4:26:8c:26:64:84:bd:f1:6b:a6:d7:cc:
         71:5a:77:eb:d4:09:fb:ac:b2:da:08:b2:69:0d:e2:02:02:c9:
         df:0e:d2:0e:ab:8b:b2:26:ce:d9:ea:69:f3:a1:59:46:d9:50:
         f8:e0:f3:f1:e2:45:84:5d:51:0a:15:ee:88:a1:86:f8:61:42:
         47:2c:6f:d0:ef:4c:83:49:03:95:e0:b0:eb:00:d6:65:f4:ee:
         11:56:96:28:fe:55:82:19:f9:c1:a9:7e:fc:94:96:aa:9c:96:
         e4:f8:2f:15:79:b9:4e:e8:cb:ee:b2:0f:90:cd:3e:0c:6f:bd:
         82:c6:f6:95:48:40:f2:01:44:c8:b7:e3:98:09:c6:e4:69:e9:
         b2:8d:64:38:f8:5f:ab:2f:2c:39:77:74:66:2b:dc:37:8c:16:
         b2:82:53:88:28:33:2d:63:27:89:88:84:91:bb:ee:06:e0:dc:
         cd:29:a9:24:47:d0:b7:6b:ee:da:d8:c9:f8:b8:3e:20:e0:f3:
         46:85:92:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:01:43 2024 by rpki-client on console-ams.rpki-client.org