Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
File:                     323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa (raw, json)
Hash identifier:          kdpl89h/TABYCnhNOWbMWfCziyzd7IfJTHB/9SjMZS8=
Subject key identifier:   68:AE:0B:5C:F5:C3:8C:92:D5:B3:8E:48:62:08:54:13:95:F9:ED:69
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       20C7FC12E63270EF3C688D20177B8355453C90EB
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:07 +0000
ROA not before:           Mon 12 Aug 2024 17:05:07 +0000
ROA not after:            Mon 11 Aug 2025 17:10:07 +0000
asID:                     267121
IP address blocks:        2804:4870:3000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c7:fc:12:e6:32:70:ef:3c:68:8d:20:17:7b:83:55:45:3c:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:07 2024 GMT
            Not After : Aug 11 17:10:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:61:fa:95:71:79:f2:85:02:b2:b5:7b:6e:
                    2a:c8:51:36:d3:dc:6a:9a:29:e7:5e:69:73:57:a1:
                    2b:e6:39:3d:96:6a:16:4a:a1:db:f6:97:74:c5:d0:
                    e9:a3:8d:24:5e:3a:56:cc:57:8a:f4:ec:d8:3b:6a:
                    a1:62:2e:80:47:0b:75:f8:0f:8a:47:f2:63:9c:32:
                    09:10:a9:a7:d0:9d:df:e0:8e:fe:bc:b7:d7:26:99:
                    41:1d:a8:c1:2e:9d:ee:70:6c:8c:bb:30:64:1c:8c:
                    9e:ae:fb:3a:ef:48:59:f7:49:48:e1:9c:7c:06:a7:
                    ef:a0:8e:78:14:fc:11:af:6b:f1:5a:4e:35:be:82:
                    bc:f8:78:b9:59:ee:e1:f4:80:c2:05:c9:a3:6e:8d:
                    b7:4d:d7:11:6c:47:de:58:5a:3d:e9:7b:28:c1:d4:
                    a9:de:d4:d4:34:07:3d:be:ca:77:f8:cd:ff:eb:68:
                    98:f3:1c:57:9c:bd:3e:d8:e9:dd:09:b9:4a:cf:e4:
                    0d:79:60:c3:57:20:4e:7e:8c:36:4d:24:3d:c0:b4:
                    ae:88:e8:ce:4b:57:0a:07:e4:b2:53:90:08:64:4b:
                    75:33:fe:bf:49:97:15:e0:4c:e3:c0:4d:f9:6d:c0:
                    d0:f2:bd:44:b0:42:97:b8:ab:0f:a5:2b:58:d5:bc:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:AE:0B:5C:F5:C3:8C:92:D5:B3:8E:48:62:08:54:13:95:F9:ED:69
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a333030303a3a2f34302d3430203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:6c:d1:df:c1:41:a1:3f:50:78:94:ae:a7:66:55:8e:d7:
         db:2c:be:33:7c:a4:e8:00:86:c5:0f:69:2b:f5:f8:a3:8e:ed:
         01:5c:df:ee:89:1d:e6:af:2c:de:a1:d8:6c:7c:93:b1:bd:07:
         4e:11:93:5c:9c:d0:6e:b2:36:e4:fe:d1:44:40:48:a1:81:66:
         96:c9:1c:eb:aa:2b:1d:59:60:66:82:a7:d9:00:9d:d2:80:61:
         96:fc:e8:d4:15:b9:50:d1:9c:21:00:0f:e2:c1:3a:8c:81:70:
         25:90:19:c3:32:ef:f0:37:00:f6:97:05:bb:e9:41:33:4c:e0:
         25:be:cb:7a:8d:90:23:ee:67:b8:02:93:ff:b2:43:a1:9e:52:
         1f:4e:b5:2d:4e:1c:e8:99:5d:93:5c:b5:7f:76:ee:c5:f5:ec:
         df:ed:7a:ec:51:bb:dd:62:e8:09:7a:54:e5:37:d6:3b:f2:2a:
         75:f0:15:f6:7a:af:d9:ab:7b:0c:ff:69:68:e1:8d:7f:27:bf:
         18:48:7c:45:f7:4d:fe:bc:5e:2f:bb:58:dc:82:c3:5a:53:06:
         c8:a4:b5:79:ce:58:34:05:15:f4:9f:c4:95:b5:09:2e:f5:31:
         cb:62:2f:57:7e:c8:ba:bd:ab:6c:9f:e4:be:9e:05:53:bd:3f:
         21:3c:b6:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:01:43 2024 by rpki-client on console-ams.rpki-client.org