Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa
File:                     323830343a343837303a3a2f33322d3332203d3e20323637313231.roa (raw, json)
Hash identifier:          8+JtJjhklA3uqaZjFHHnNo1M5VDbEIP6+icz5NqhxqQ=
Subject key identifier:   26:52:C7:CD:40:B4:F0:D5:99:87:BE:DB:84:4A:45:04:F0:F2:49:DE
Certificate issuer:       /CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
Certificate serial:       4BB05E07B3E4E6D13121605FBFDC8F7FE1D7A5B2
Authority key identifier: 59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa
Signing time:             Mon 12 Aug 2024 17:10:08 +0000
ROA not before:           Mon 12 Aug 2024 17:05:08 +0000
ROA not after:            Mon 11 Aug 2025 17:10:08 +0000
asID:                     267121
IP address blocks:        2804:4870::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl
                          rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b0:5e:07:b3:e4:e6:d1:31:21:60:5f:bf:dc:8f:7f:e1:d7:a5:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59286C095D010494BBABEA22C9AEC94874E4F3C0
        Validity
            Not Before: Aug 12 17:05:08 2024 GMT
            Not After : Aug 11 17:10:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e0:de:d8:ac:ab:b7:0d:b3:6e:fb:e8:fb:ad:
                    3e:17:b5:8c:1d:78:31:15:40:c8:c7:78:28:e7:dc:
                    62:c3:86:5e:24:4d:50:7c:97:1b:16:31:e1:91:10:
                    88:a4:28:e4:23:8a:ff:5e:84:35:48:42:08:9d:15:
                    8e:8a:42:2f:f3:13:e2:ac:ce:9f:b2:2d:be:da:3c:
                    c5:41:9e:3a:09:b7:33:c1:26:d0:65:e3:17:0b:6f:
                    91:fd:d9:e8:f8:48:42:e4:46:a9:19:2c:31:ff:06:
                    1a:34:3b:ee:71:8e:4d:b0:30:f1:dc:e8:91:d4:c4:
                    13:20:af:9b:8b:86:5e:4c:aa:7d:21:57:b5:f0:f7:
                    a5:78:e5:6d:3b:0b:13:15:9a:95:a3:c5:04:53:e7:
                    02:98:7a:89:3e:0a:16:0e:1d:fa:17:74:e9:e3:1a:
                    6a:a7:b1:73:38:e8:e9:c3:41:1f:89:b5:9e:16:4a:
                    ef:07:ca:aa:fa:86:9e:f7:f7:13:64:df:19:d8:0d:
                    92:6a:4f:1a:c3:1c:ed:5e:f6:b5:0b:39:80:12:81:
                    e1:42:7c:6a:b2:d3:3c:22:00:d5:7b:a5:59:cd:19:
                    87:54:62:6c:1a:ea:b9:00:6b:96:0b:61:bf:63:37:
                    49:bd:d0:99:95:49:86:d8:08:76:cd:4e:02:e0:0f:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:52:C7:CD:40:B4:F0:D5:99:87:BE:DB:84:4A:45:04:F0:F2:49:DE
            X509v3 Authority Key Identifier:
                keyid:59:28:6C:09:5D:01:04:94:BB:AB:EA:22:C9:AE:C9:48:74:E4:F3:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59286C095D010494BBABEA22C9AEC94874E4F3C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zTamxmiHmVd3GaW2AK2kkoWayCH6eQSW4tDMPRJ5a87/1/323830343a343837303a3a2f33322d3332203d3e20323637313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4870::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:30:52:bd:d2:c9:42:95:2c:c3:25:52:28:10:be:6f:bb:17:
         24:d0:d7:a1:de:ea:5e:9f:12:24:ee:1b:2f:9f:ea:22:bb:9c:
         15:b7:7d:34:24:90:56:6c:6c:07:2e:18:f0:db:61:f3:da:80:
         d0:cd:de:c1:f0:4a:6b:82:aa:66:9f:cc:3c:e6:c6:e8:5c:ec:
         84:c2:b8:9f:7d:4e:fb:f8:d7:1f:3a:43:79:a3:61:dd:76:72:
         cc:4e:0e:a6:c0:7e:48:35:63:9a:b2:e2:83:b9:b6:4a:11:74:
         b5:37:f4:2b:57:15:c8:0e:a5:3f:84:0b:4d:ae:25:c7:b3:5a:
         fe:09:91:25:59:b3:3a:95:dd:e5:c2:2c:a2:44:81:bb:c0:d9:
         0e:88:d1:1e:1e:a8:4c:e8:26:41:7e:e2:c5:2b:b7:8a:a9:89:
         84:2d:c7:be:de:6f:15:36:a2:8d:0b:d0:f6:64:1e:bc:c8:e0:
         3e:01:39:c9:39:58:37:80:29:37:06:60:f9:70:62:a7:04:44:
         08:8d:32:8f:db:99:11:be:3d:4f:6c:8e:e9:bc:4c:32:22:c3:
         55:bd:c5:2d:c5:b4:cd:21:8f:79:0f:e2:46:09:3f:af:73:d6:
         e2:64:07:5e:26:17:dc:42:81:c6:2d:7f:a4:a5:13:bb:e8:95:
         52:a7:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:14 2024 by rpki-client on console-fra.rpki-client.org