Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa
File:                     323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa (raw, json)
Hash identifier:          7y70b0YE8madDpOsFFU7kPmQvR1WC0nAgowGpA/NubE=
Subject key identifier:   71:30:61:F9:DF:B8:D3:7D:0A:17:C5:55:19:E8:41:CD:17:D8:3B:7F
Certificate issuer:       /CN=272EE1B25800F489DD72CC554F5C22037BDA8291
Certificate serial:       09E50A2B4E60EC728234A1C102018FB5E5B2E8F4
Authority key identifier: 27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa
Signing time:             Thu 01 Aug 2024 11:59:02 +0000
ROA not before:           Thu 01 Aug 2024 11:54:02 +0000
ROA not after:            Thu 31 Jul 2025 11:59:02 +0000
asID:                     267386
IP address blocks:        2804:4cb4:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl
                          rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 14:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e5:0a:2b:4e:60:ec:72:82:34:a1:c1:02:01:8f:b5:e5:b2:e8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=272EE1B25800F489DD72CC554F5C22037BDA8291
        Validity
            Not Before: Aug  1 11:54:02 2024 GMT
            Not After : Jul 31 11:59:02 2025 GMT
        Subject: CN=713061F9DFB8D37D0A17C55519E841CD17D83B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:f5:38:0c:5a:c1:65:47:80:11:ab:94:03:
                    7c:92:c0:5f:ef:fe:b1:7e:51:4e:62:5e:4c:f5:e0:
                    79:fb:24:96:da:7c:e8:8d:88:c4:6c:6b:4d:5e:e6:
                    96:15:84:44:d1:bf:41:0d:f1:b9:10:4c:24:b3:5d:
                    3b:42:42:ff:e4:96:17:9f:05:3a:0a:02:01:97:35:
                    2f:3c:ed:95:83:c0:3c:4d:90:20:4a:c2:67:b5:8b:
                    42:5d:df:41:24:f0:f7:e0:43:97:86:be:54:99:d0:
                    30:3d:2b:53:88:d9:91:4e:41:66:8d:57:c8:0e:b3:
                    e3:7e:a1:fd:43:21:c4:9b:a6:d9:81:dd:b6:fa:26:
                    c6:95:f4:20:a6:fa:ff:5d:f4:2b:b3:c6:c5:1c:e0:
                    56:33:1f:74:14:f2:83:59:29:b8:31:10:9c:d8:be:
                    17:56:f0:3f:f1:47:16:42:94:58:75:cc:2c:48:ae:
                    d1:47:cc:df:ae:61:19:71:8e:f0:e1:06:68:21:bb:
                    50:79:b3:14:74:4d:0c:0d:39:dd:c2:15:27:14:ea:
                    a6:98:74:77:5f:63:e5:32:42:7b:c1:1e:86:72:19:
                    9c:a5:a9:0e:18:4d:3e:65:9f:b9:b2:de:0b:47:b1:
                    87:04:a2:b1:23:3e:ab:50:95:6d:97:f8:7f:34:6b:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:61:F9:DF:B8:D3:7D:0A:17:C5:55:19:E8:41:CD:17:D8:3B:7F
            X509v3 Authority Key Identifier:
                keyid:27:2E:E1:B2:58:00:F4:89:DD:72:CC:55:4F:5C:22:03:7B:DA:82:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/272EE1B25800F489DD72CC554F5C22037BDA8291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/272EE1B25800F489DD72CC554F5C22037BDA8291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wLDsLtFQeAp8qGSNgdcqUB27m9wF8BRQVjSafy6u2g9/0/323830343a346362343a383030303a3a2f33362d3336203d3e20323637333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb4:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:c4:e8:61:31:89:b6:fb:b2:74:7a:e6:24:84:21:22:1b:
         9c:92:ad:0b:5f:de:dc:b7:24:de:04:58:ce:1f:3d:36:73:21:
         af:ad:91:16:47:b8:d1:a0:12:6a:f0:88:2c:3c:d1:27:4a:53:
         aa:81:6c:98:0b:8f:c6:43:84:95:d6:28:99:22:c7:f4:55:a0:
         46:08:54:06:4d:1c:6b:8b:d1:c1:99:29:de:91:67:b3:1d:9f:
         d3:78:62:41:da:fd:3a:78:3a:07:c9:b9:fe:33:d0:09:7c:9a:
         9e:00:82:67:68:09:8c:93:32:71:87:dc:d7:e3:31:be:dd:91:
         99:88:72:e1:37:6e:7f:0f:af:e9:1b:8a:f0:4a:1b:c6:4e:8a:
         98:60:38:67:14:8c:62:83:bc:20:ee:8f:74:f5:0a:10:2c:5a:
         10:9d:48:8c:7b:31:5d:33:e3:c9:35:5d:e0:69:5f:e4:45:a0:
         af:e6:8f:3a:df:8b:0e:16:b2:7e:2e:c0:e1:36:4b:7d:5c:8d:
         b8:be:e8:b7:40:8a:5d:67:b6:13:6a:38:69:93:d5:cb:04:3e:
         9c:8f:84:d6:2c:60:e1:a4:ff:18:25:31:35:a1:58:74:b4:bf:
         36:01:d1:8c:42:43:bb:34:b6:5b:88:91:8d:1d:f9:4b:33:da:
         1d:0c:43:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 17:01:38 2024 by rpki-client on console.sobornost.net