Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa
File:                     323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa (raw, json)
Hash identifier:          +p11T1w1ZTqcXl8lcZRWptYkDbaLdKtMijNbnoE+vpw=
Subject key identifier:   34:FE:3F:86:5A:0A:E2:7E:54:F0:BD:48:38:67:6C:6E:BD:FD:E9:DD
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       124433BB2BF05CB80F3C76B0093AB33926BD21C2
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870:1c2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:44:33:bb:2b:f0:5c:b8:0f:3c:76:b0:09:3a:b3:39:26:bd:21:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:86:2c:b3:f0:dc:ae:d9:cd:b0:d3:43:38:c5:
                    8a:7f:d4:b1:13:8f:bc:39:2a:b9:c5:de:8f:c8:ef:
                    66:fb:bc:d9:7b:5b:a9:7e:ba:cd:73:b4:97:45:d7:
                    89:df:a7:37:32:96:1a:ae:63:f4:c9:91:84:01:5a:
                    11:a5:19:ea:80:23:ed:36:68:27:ca:de:05:ec:4a:
                    40:74:01:d8:1e:9e:e5:e6:d0:f0:9b:0a:45:e3:74:
                    3f:72:20:94:07:b9:27:1d:f4:2d:29:6a:0e:ec:af:
                    b0:a7:87:dd:33:93:8c:90:d3:21:63:e8:b5:18:c1:
                    d2:9a:96:bb:7d:da:e6:8d:2a:5a:a4:85:84:c5:6e:
                    be:29:25:ae:54:b5:83:f7:4d:7e:7b:8c:aa:fa:92:
                    a7:5a:98:8c:56:99:5d:0b:cb:cb:82:97:36:d1:c3:
                    cc:d1:e5:3f:f3:72:84:40:36:fa:43:66:22:dc:6b:
                    dd:a7:95:83:8d:60:ae:d1:db:22:8c:8b:a5:9f:b1:
                    45:8b:b9:ab:8a:08:83:17:90:e4:b6:cc:20:66:08:
                    1b:99:65:76:b2:e0:97:97:b9:06:ef:dd:73:e6:79:
                    e4:28:3d:fa:b6:e8:79:90:cb:af:60:10:56:4c:54:
                    3f:6a:eb:65:14:5a:88:f0:b1:ce:54:bc:82:92:a7:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:3F:86:5A:0A:E2:7E:54:F0:BD:48:38:67:6C:6E:BD:FD:E9:DD
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3163323a3a2f34382d3438203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:1c2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:3d:e6:76:5b:f4:f4:76:81:a0:33:9a:fc:4e:6e:71:fd:
         7f:5d:78:37:c2:93:18:86:14:88:f6:d7:59:99:fa:e9:0b:9a:
         7f:14:79:74:f0:ba:d1:ad:f6:6b:52:ee:48:80:1d:fb:9d:ed:
         15:1b:ec:34:5a:08:b4:e2:e5:41:af:1a:f6:a8:b0:5e:6b:c5:
         d1:ba:57:e4:ce:7a:71:cb:42:ac:e1:ad:98:5c:2b:42:0e:53:
         5d:9a:cb:55:2b:3c:fa:cc:e2:8e:e0:59:fe:42:60:0a:a3:cb:
         b9:96:e1:7a:13:75:38:78:78:13:48:af:fe:ac:31:7e:c0:53:
         71:d6:14:37:96:41:a0:27:1c:0c:ca:c2:1c:f2:b4:e4:93:1a:
         80:8c:b3:8e:9c:fc:bb:1e:c1:28:a1:51:29:b8:c2:ee:a3:94:
         dd:21:28:d5:26:58:8d:6d:fb:1a:68:c2:5b:7b:32:14:e5:c8:
         69:ac:a8:20:a6:28:e5:35:ae:3f:49:fb:ad:93:79:5e:8c:c9:
         4e:62:5b:10:d5:a8:a0:3a:5b:65:2f:c1:dd:b5:6f:f3:da:32:
         5c:0b:ff:40:4a:a4:68:f8:53:cc:fc:cd:00:c1:de:44:f5:3b:
         dc:8f:74:6a:dd:b1:50:2d:8d:44:2d:32:c7:60:ba:75:08:d7:
         2b:5e:92:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:01:43 2024 by rpki-client on console-ams.rpki-client.org