Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          3MxpF61U6WCNAVAB1GfFcec4yQZeruuCFvxLdtBnzkU=
Subject key identifier:   F2:D5:00:CE:14:76:D9:EC:67:75:EC:7F:C1:E4:92:2F:97:4F:42:7B
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       10F3055D1CA7BC5BCEDB116E8301018F1F7C8C9E
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:01 +0000
ROA not before:           Thu 01 Aug 2024 11:54:01 +0000
ROA not after:            Thu 31 Jul 2025 11:59:01 +0000
asID:                     267386
IP address blocks:        2804:4cb4:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 14:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f3:05:5d:1c:a7:bc:5b:ce:db:11:6e:83:01:01:8f:1f:7c:8c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:01 2024 GMT
            Not After : Jul 31 11:59:01 2025 GMT
        Subject: CN=F2D500CE1476D9EC6775EC7FC1E4922F974F427B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:b3:f2:6f:e3:da:63:2d:43:c9:b2:ca:e0:
                    4e:28:9d:8a:f3:ca:78:92:51:cb:24:c3:b7:03:d7:
                    c3:cd:70:0d:5d:23:dd:99:f7:4f:9d:3a:71:d7:c0:
                    d8:a6:2b:7e:d5:ad:77:3e:57:37:d0:1b:51:7f:44:
                    86:02:da:25:6a:b5:b5:dd:75:ea:67:af:46:1e:c0:
                    48:7c:96:8f:23:63:9f:ed:ab:17:8e:b3:1c:41:07:
                    0e:d3:ce:82:c9:4c:d4:21:c5:56:74:70:8b:5e:70:
                    89:ee:51:b0:a0:d6:5f:4b:44:b8:ae:09:a2:3f:29:
                    52:77:ad:a8:12:e3:49:a6:37:d2:e0:f4:05:4d:fe:
                    5c:30:8c:0c:9b:be:ca:19:6f:0d:df:78:a5:95:21:
                    bd:76:36:95:c5:5e:a1:80:63:9c:ae:98:72:d4:80:
                    c2:1a:9c:ce:ac:44:41:83:6b:8c:e2:dc:8c:4f:df:
                    ae:d3:36:9f:f1:01:86:60:5d:65:30:84:a0:e9:66:
                    ad:27:29:1a:bf:6f:9f:83:90:ff:14:10:a2:01:54:
                    80:26:c4:70:c1:c2:5e:79:7d:2a:7f:ed:4d:62:be:
                    e4:bd:1f:85:23:2a:c0:cf:ac:a1:72:a6:4b:31:c4:
                    e1:fd:14:01:1c:9f:5e:14:06:3d:7b:73:46:c8:b2:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D5:00:CE:14:76:D9:EC:67:75:EC:7F:C1:E4:92:2F:97:4F:42:7B
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a323030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:fb:f2:19:15:83:0f:54:03:0d:c1:c0:d7:5f:e9:8a:fb:
         58:96:21:83:16:0b:97:82:3f:bf:19:8f:64:a5:04:4c:63:7f:
         8c:70:b4:59:58:71:0c:f5:92:ae:17:20:6c:66:d8:45:fc:22:
         b8:12:72:d0:f6:5b:27:ad:d8:4e:71:9c:92:6e:70:a7:e6:68:
         52:70:ad:95:4e:8b:ed:9d:e2:37:fb:4d:6b:73:e9:a9:6c:75:
         7d:8d:41:f9:38:09:c1:c1:81:42:02:d1:4e:52:7c:6a:96:03:
         79:29:4e:13:2d:24:f6:c3:ee:5b:25:25:1d:25:3f:c9:2c:66:
         0b:c1:06:80:6b:03:37:13:7f:72:30:44:fd:40:de:ed:fb:63:
         fc:8c:93:6d:47:70:1e:8a:d0:da:22:1b:c3:17:65:d8:2e:de:
         5d:f7:55:54:9b:05:6f:93:47:2d:76:10:85:ba:bf:8d:09:c7:
         cc:e4:6e:46:5f:09:5d:35:8d:a6:28:ae:5f:27:0b:94:bd:87:
         86:92:13:44:92:46:34:0d:41:35:08:05:e8:44:95:ad:77:f5:
         e0:d9:41:bf:5c:c6:50:1a:6d:ba:60:f0:ae:1b:7a:0c:6a:e0:
         1f:f1:22:3e:a6:16:a8:27:24:ae:2d:e4:d5:1b:9c:2a:5a:7d:
         ef:7e:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:38 2024 by rpki-client on console.sobornost.net