Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa
File:                     323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa (raw, json)
Hash identifier:          dz/MCtW3rBapS8hK8ly8rWcjuSXj/t5nbqVeg5+vj14=
Subject key identifier:   6A:D1:44:52:2D:1D:24:9F:B1:F8:4D:B7:79:99:84:62:44:34:48:43
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       76205D3717E1718FA415897E708E7194AEDCBC27
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870:7000::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:20:5d:37:17:e1:71:8f:a4:15:89:7e:70:8e:71:94:ae:dc:bc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:da:80:c1:a3:ff:32:eb:b5:b8:ca:9e:f6:
                    b9:d0:33:fa:2a:8f:a5:08:82:22:96:af:b7:69:3e:
                    d8:f1:fe:c0:b5:7c:9c:14:fb:37:55:f8:b4:61:cf:
                    36:1f:fe:8d:f4:9d:a4:3e:87:8e:6b:04:a5:38:f1:
                    52:73:ed:92:b9:4d:5d:95:15:7b:46:53:5c:8c:0d:
                    fe:06:f1:b8:f1:a4:c5:b7:d2:90:d7:0d:91:5b:10:
                    0f:3c:21:23:b4:2b:e7:21:79:73:5d:63:08:8a:bb:
                    1d:86:ab:ff:72:94:3c:5c:72:89:a2:b3:bb:6f:36:
                    89:27:2d:c9:d8:8b:e7:dd:94:9f:31:20:dd:3f:1c:
                    0a:5c:7f:10:cc:f7:21:c4:be:c2:94:35:8d:f8:2c:
                    d6:30:9f:e6:cc:8e:c4:e0:ad:a3:19:e7:d7:5e:8e:
                    eb:a3:c2:6f:1e:0f:78:c5:f5:11:83:6b:be:18:71:
                    43:d1:87:b6:cd:84:6b:18:97:f0:61:5a:dd:3e:13:
                    7c:5d:18:3a:73:9f:b6:ff:56:56:a1:74:08:e1:38:
                    03:ef:52:6e:45:b2:09:3f:a9:84:a7:fd:b5:a1:53:
                    40:21:3a:2b:58:bc:2e:8b:ba:fa:9b:6a:40:43:b3:
                    18:a9:b4:62:03:bb:84:31:53:66:f3:77:b7:dc:40:
                    6c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D1:44:52:2D:1D:24:9F:B1:F8:4D:B7:79:99:84:62:44:34:48:43
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a373030303a3a2f33382d3338203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870:7000::/38

    Signature Algorithm: sha256WithRSAEncryption
         92:54:12:c4:f9:c7:76:36:fa:2b:71:21:37:c4:8b:3a:bc:e4:
         80:1b:7f:3c:b7:1d:ce:8a:4b:e3:9e:45:a8:98:35:10:29:06:
         5b:dd:ce:f2:ea:00:96:16:4b:74:86:8e:83:d2:8a:d3:50:db:
         e0:f9:85:d4:f8:0d:61:f2:23:81:3e:2a:c3:0c:70:f5:f0:a5:
         83:df:97:e4:89:44:c9:73:d3:7c:96:7b:fb:f9:a4:ef:93:fa:
         e8:e2:e7:e4:4a:d8:a1:06:17:c5:50:fa:43:13:6b:0e:63:94:
         78:35:73:22:72:6b:97:c4:e7:52:8c:33:04:d9:8f:0b:a5:e8:
         6b:22:af:64:a0:c7:de:a7:c5:52:a8:ec:0a:09:dd:26:02:04:
         1a:02:86:22:10:19:8e:e3:85:b5:0e:1b:2f:da:2d:3f:86:ba:
         8b:ff:d6:f8:d9:39:3d:5c:af:41:d3:14:63:14:93:2a:a8:5d:
         5b:80:50:88:97:ff:59:bd:a4:96:53:55:ad:76:54:83:d3:eb:
         75:4b:15:ea:f5:bc:0d:61:93:37:f6:29:50:2b:42:98:5f:a9:
         e9:76:a2:62:73:80:3c:0f:3b:c2:bc:7c:df:b0:ca:50:3d:88:
         24:79:ea:8b:67:c1:3a:a5:01:cf:62:37:4e:2a:96:1b:b3:7f:
         d5:5e:50:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org