Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
File:                     323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa (raw, json)
Hash identifier:          w9uLMZ0BYMtoHGkbOxDSvOiUfnwjhfzkh8OM4G9DjPE=
Subject key identifier:   04:19:89:61:7F:71:81:0C:68:1E:0F:06:9F:E8:C8:3A:25:09:5C:B7
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       20C2C4F1FFB56D5FE457B60E73BBC301F690B1B8
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:09 +0000
ROA not before:           Mon 12 Aug 2024 17:05:09 +0000
ROA not after:            Mon 11 Aug 2025 17:10:09 +0000
asID:                     267121
IP address blocks:        2804:4870:4400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c2:c4:f1:ff:b5:6d:5f:e4:57:b6:0e:73:bb:c3:01:f6:90:b1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:09 2024 GMT
            Not After : Aug 11 17:10:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:65:8c:e1:d8:9d:c6:9a:7c:2d:e8:60:7a:
                    58:13:92:8f:68:b2:da:ab:66:08:7a:a3:b0:ba:8e:
                    3a:f1:06:15:cc:9c:69:17:6c:e5:62:ea:76:40:f3:
                    a2:b2:4c:31:26:65:b9:49:41:08:56:69:24:64:93:
                    39:d5:6a:8a:a0:9c:78:de:ad:01:ac:41:49:d7:d4:
                    c1:2a:a0:65:73:3c:8d:d3:05:c0:27:3b:19:76:df:
                    fe:ba:42:f7:65:fc:dd:68:b5:18:af:6a:c8:28:4f:
                    6c:b5:68:25:07:e4:9e:36:8b:33:1a:c3:7c:16:1b:
                    09:43:7c:98:dc:86:8e:e5:56:5e:c7:51:d4:b4:ee:
                    9a:79:f3:c9:16:73:a1:28:9d:a9:47:4e:38:6f:33:
                    0a:d9:54:d4:b6:cc:c5:04:43:fe:ef:11:16:e3:b8:
                    94:a9:63:58:65:52:0c:32:38:62:6b:69:c1:a7:5a:
                    dc:9e:31:bc:6e:b8:30:e4:38:13:05:db:c4:7b:36:
                    58:fc:2a:dc:55:04:82:5f:f8:38:e4:41:10:64:37:
                    cd:2c:96:27:4d:51:25:d7:50:eb:a3:5c:fc:2b:36:
                    76:07:dc:41:9b:99:76:6a:c1:9c:db:21:56:8a:bd:
                    83:5e:e1:ee:a0:b8:69:38:7f:af:da:3c:a0:44:ba:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:19:89:61:7F:71:81:0C:68:1E:0F:06:9F:E8:C8:3A:25:09:5C:B7
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a343430303a3a2f33382d3338203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:4400::/38

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:dc:8d:04:99:d6:ce:6b:ae:fe:c3:b8:93:0b:ed:64:4f:
         68:63:a6:79:84:85:4c:eb:32:a8:43:99:ec:c0:d7:9f:7a:75:
         1d:87:d0:d2:14:f3:0c:ba:3f:69:66:96:dc:32:ee:2b:02:e5:
         75:eb:c0:fa:82:a0:48:55:4c:a7:0d:0e:af:39:94:55:d8:70:
         c7:0e:ac:de:19:8b:03:07:ae:d2:07:46:a8:f7:d6:7e:f7:a6:
         50:43:91:e7:8e:09:9a:9c:f4:13:28:73:c9:3d:eb:15:e6:7b:
         84:66:a4:a0:01:ed:f3:6c:6b:6b:90:9d:c5:46:13:f7:2f:98:
         6e:bf:c5:c0:a4:70:11:4f:81:d7:9d:30:6a:0c:41:71:4f:08:
         46:28:00:23:53:2e:3c:75:57:07:54:37:fc:c4:bf:4c:e2:4f:
         26:dd:90:6c:7f:41:a6:1b:46:cb:f3:00:c0:25:f5:77:87:cd:
         78:11:66:0e:e6:24:2c:cd:0d:00:10:dc:fa:e5:56:db:2d:a5:
         45:1d:a9:47:07:23:e3:2c:e6:c5:f7:aa:e9:9f:e3:b9:5b:d0:
         be:b6:6e:cd:94:fc:b2:67:a6:0b:19:9c:f8:de:43:a6:00:8c:
         f2:5f:96:b0:22:a9:ea:48:02:1f:6b:c6:38:23:bf:51:dd:16:
         e4:bf:b6:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:01:43 2024 by rpki-client on console-ams.rpki-client.org