Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a383030303a3a2f33342d3334203d3e20323633363636.roa
File:                     323830343a313134303a383030303a3a2f33342d3334203d3e20323633363636.roa (raw, json)
Hash identifier:          Is+X0bIaP/GRWGpEU3kgLNaA5LwrrFTh2Yo1RRzDAIU=
Subject key identifier:   8C:4C:C5:58:26:15:28:87:20:37:FA:57:62:8E:23:E1:32:A2:2C:5A
Certificate issuer:       /CN=0856D90987E19445A04E6CD69FA1B67E5A7EAAF9
Certificate serial:       67E0B01F7EE3C91838C26061C5923BC38F5F453E
Authority key identifier: 08:56:D9:09:87:E1:94:45:A0:4E:6C:D6:9F:A1:B6:7E:5A:7E:AA:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a383030303a3a2f33342d3334203d3e20323633363636.roa
Signing time:             Fri 26 May 2023 18:25:07 +0000
ROA not before:           Fri 26 May 2023 18:20:07 +0000
ROA not after:            Fri 24 May 2024 18:25:07 +0000
asID:                     263666
IP address blocks:        2804:1140:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.crl
                          rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 10:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e0:b0:1f:7e:e3:c9:18:38:c2:60:61:c5:92:3b:c3:8f:5f:45:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0856D90987E19445A04E6CD69FA1B67E5A7EAAF9
        Validity
            Not Before: May 26 18:20:07 2023 GMT
            Not After : May 24 18:25:07 2024 GMT
        Subject: CN=8C4CC558261528872037FA57628E23E132A22C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:e2:a9:02:f2:45:4c:f0:09:14:ca:04:60:
                    e2:0b:40:2f:63:22:65:9b:a1:62:b2:a5:cd:9f:db:
                    22:94:73:b0:b9:e6:63:3e:ff:b9:bf:b2:8d:d6:41:
                    6a:b9:55:f3:a2:7e:3a:f0:1c:29:27:6c:47:ef:67:
                    34:11:26:cd:c6:20:31:2b:1a:05:fe:1b:02:e6:7b:
                    cf:46:66:17:81:5a:0e:3b:5c:83:48:ec:ff:01:37:
                    58:28:3e:f5:c5:db:02:f8:4d:c1:b0:16:57:52:bc:
                    84:d8:db:26:d0:18:ec:2e:e7:5f:57:5f:2f:2e:0e:
                    94:8d:1b:4a:8b:1b:d6:43:c5:72:7c:05:5a:ad:57:
                    ed:23:a0:6b:7e:eb:3e:7b:8a:40:2d:be:6d:94:34:
                    4c:06:be:49:9b:17:40:c2:a0:90:d2:7c:e7:c4:0d:
                    26:53:f5:16:46:e8:85:f7:10:ef:64:ed:50:5d:b7:
                    39:2b:86:86:ca:e1:e2:9d:50:60:d9:2e:34:95:b4:
                    d5:01:88:7d:5f:bd:db:03:a3:90:d6:4c:5b:9f:fe:
                    31:8f:00:0b:93:fc:25:79:5a:7a:61:e6:d1:6f:9f:
                    76:b8:66:fa:92:38:b3:6d:c3:82:db:da:3a:99:a0:
                    31:c2:3b:e7:bf:f0:02:f7:1f:6c:6a:e3:19:a8:07:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:C5:58:26:15:28:87:20:37:FA:57:62:8E:23:E1:32:A2:2C:5A
            X509v3 Authority Key Identifier:
                keyid:08:56:D9:09:87:E1:94:45:A0:4E:6C:D6:9F:A1:B6:7E:5A:7E:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0856D90987E19445A04E6CD69FA1B67E5A7EAAF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bxy3vr7P8zkqY7DVrktnjXHMQnwmb4qpvqkFq9JdmfsB/0/323830343a313134303a383030303a3a2f33342d3334203d3e20323633363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1140:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:55:58:b9:ae:34:54:bd:53:fb:0a:3e:58:40:58:ee:2c:ba:
         37:3a:99:82:72:99:5d:a2:86:64:16:ff:0a:0a:33:b3:e3:13:
         16:d3:9a:d5:5c:64:4e:6f:2a:81:24:27:9c:fd:38:d9:14:b9:
         20:e4:d5:0d:a0:e4:63:e7:f6:93:cd:34:0a:ed:88:76:f4:65:
         b7:79:fb:ee:50:d6:5d:dc:9d:7c:8d:7b:6c:e0:49:98:e7:cc:
         a1:7a:c3:c8:b9:d2:dd:a4:58:18:a4:3d:a4:16:75:12:95:5b:
         3a:85:ee:78:31:43:8c:79:66:50:0a:51:53:5a:00:82:4e:4b:
         4a:65:76:1c:33:9e:6b:0c:1f:ed:1d:fc:1b:6e:f8:ac:91:51:
         c1:d7:f6:a4:a8:49:00:8a:66:17:9c:da:bf:04:e5:2f:e1:bc:
         01:0e:f0:34:1b:d4:b0:18:e6:f9:f1:3a:e7:58:89:a4:ad:05:
         77:b1:aa:72:50:b9:b8:c2:35:17:96:59:7c:2d:02:e1:b3:a9:
         ef:10:28:a8:df:47:81:66:65:f7:d3:b9:9d:42:67:5a:69:5b:
         65:2f:d0:0a:5f:e6:cf:80:fe:c8:9b:29:55:14:c5:7c:76:25:
         17:ad:20:44:e3:d8:87:d6:aa:98:37:a1:67:b2:b8:4f:85:53:
         26:6a:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:58 2024 by rpki-client on console.sobornost.net