Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          7XDU4d5fB042lTecdMhV4TRNSgQR/5XsBNWZO9phz+U=
Subject key identifier:   ED:8F:B8:CD:B0:FC:1D:48:D5:77:1C:56:07:6D:BA:46:32:FE:74:9B
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       519285071DDD444245DC6900838AAA14B3295B5A
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:92:85:07:1d:dd:44:42:45:dc:69:00:83:8a:aa:14:b3:29:5b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:1f:14:45:15:db:0d:35:bb:03:76:57:2d:
                    21:a7:e6:4e:32:3f:b9:7b:23:d5:2a:14:0e:da:11:
                    d6:42:9b:05:0d:0b:ee:16:95:a4:bd:80:2c:d0:42:
                    35:39:cc:14:78:59:84:b5:b7:cb:ff:e1:cd:ad:c0:
                    2c:60:2a:18:72:c5:40:73:a2:70:34:4c:36:d4:a7:
                    1d:e6:88:61:54:08:dd:8f:52:e0:81:27:02:db:46:
                    8c:99:ad:91:ad:f9:5f:68:d2:90:75:17:fd:a2:8e:
                    67:ac:0d:64:5d:8c:b4:3e:6f:e6:fe:e3:b0:b8:ef:
                    38:dc:78:e7:a7:a3:9f:29:62:59:55:12:2a:e3:2d:
                    51:f1:96:8a:af:53:fb:f4:8b:1f:31:fe:03:e0:15:
                    97:ee:f3:86:21:15:a9:f9:29:d0:a6:b3:9c:c9:09:
                    22:d3:62:60:63:2f:36:ef:33:e2:b4:03:39:b7:e6:
                    9a:77:62:68:9b:4a:ad:9b:01:6f:db:d1:a7:97:c1:
                    ad:6d:6c:ac:3a:ee:5a:dc:f9:cb:ae:ee:03:c9:ee:
                    61:28:16:06:bd:59:1b:7f:32:8a:58:cb:68:79:f3:
                    8c:07:73:2d:32:b4:17:79:cd:73:42:aa:a3:34:e2:
                    c6:7d:38:b6:1f:68:64:97:b1:1f:1c:bd:b3:90:d8:
                    80:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:B8:CD:B0:FC:1D:48:D5:77:1C:56:07:6D:BA:46:32:FE:74:9B
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a323030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:ed:6b:01:23:83:71:49:d1:01:ef:9e:25:dd:61:e8:d1:
         33:4b:19:59:5b:33:1c:4e:fb:3f:4c:a2:be:b2:ae:2e:97:2d:
         0f:91:27:cf:75:a2:7a:06:21:c5:94:ee:51:14:ce:a7:86:0a:
         a2:a4:7c:7a:d8:14:5f:a3:f3:00:82:0f:4f:26:28:2a:31:0a:
         4d:79:44:5c:b4:96:a3:e6:dc:c0:29:7c:22:d4:d6:d4:f3:01:
         f8:2e:02:fe:4b:3b:b4:9c:81:9b:4c:26:94:45:47:07:7a:5c:
         2a:e9:62:d8:2f:8c:8c:bd:b6:d3:07:ed:b2:75:04:89:d8:89:
         99:c5:f8:a9:ea:d9:9f:12:7d:97:2e:af:ce:f4:cc:30:5c:52:
         11:db:9a:43:aa:3d:b3:89:fb:50:51:75:95:b7:16:c2:27:37:
         e2:11:9d:d7:fc:e4:bd:5c:7e:00:74:d8:cb:91:fc:06:11:13:
         f8:e0:c2:ac:e8:03:d0:cf:36:ac:21:c4:c3:42:d3:7d:89:3e:
         8a:42:b3:c6:c6:95:3d:2a:17:62:77:36:54:ef:01:d5:17:bd:
         99:80:c5:1a:65:71:5f:59:d6:e3:5f:a7:3d:96:22:c0:33:a9:
         98:e1:ca:d4:f7:c2:2f:3b:4e:d6:bd:86:b5:3e:90:2a:0b:cf:
         7e:ed:d8:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org