Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          a24pbCvmnAwWrrTssDtW97f58uZ+yk5S3JIjwpneagU=
Subject key identifier:   CD:87:D5:5D:8F:B5:E9:A5:84:5A:53:75:01:E9:01:A1:FF:2C:F8:DE
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       03925E5E6C63D06DAA396F3158A7C311A55D9638
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        2804:4afc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:92:5e:5e:6c:63:d0:6d:aa:39:6f:31:58:a7:c3:11:a5:5d:96:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:5e:49:b5:22:d2:2c:e5:15:56:01:a6:80:
                    64:99:05:bb:6c:97:40:5e:d9:71:06:f1:6c:a7:d5:
                    51:ec:0b:c6:02:8a:ef:e9:04:c4:c9:66:30:c9:1b:
                    e7:41:da:36:5f:22:88:50:a8:1a:b0:8d:20:6c:1e:
                    59:2d:df:18:72:3f:c5:9b:a3:3e:9b:f6:a1:a3:56:
                    17:49:e5:41:7d:a7:c4:ce:9f:45:8e:79:47:a0:79:
                    48:a2:b9:46:0d:c6:32:44:0f:89:68:bd:d8:8c:5c:
                    2f:93:fe:9b:d6:71:37:02:7a:0d:84:85:7e:1a:3a:
                    85:f8:2a:77:10:81:6f:6f:7d:b9:e8:79:d5:71:33:
                    b2:dc:a1:d5:a5:b1:35:4a:64:48:59:41:f0:db:5e:
                    82:5b:e8:0c:8f:ab:74:9d:d0:66:77:1f:58:56:f1:
                    8b:80:c4:3b:59:ec:c8:b7:6b:5c:9d:67:e2:c2:10:
                    33:9a:ea:80:fe:1a:26:cc:a7:2b:14:8f:f8:10:93:
                    c9:dc:83:89:f2:a9:55:3d:62:49:ea:24:7e:61:c3:
                    50:a6:6a:44:99:e6:ed:3a:1d:1d:03:48:92:1f:55:
                    bd:d7:0d:7d:a5:4f:2f:e5:b7:81:10:bf:da:7e:91:
                    41:93:35:4e:ee:b3:cc:bb:1a:e3:2e:38:d5:6b:6e:
                    3c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:87:D5:5D:8F:B5:E9:A5:84:5A:53:75:01:E9:01:A1:FF:2C:F8:DE
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         63:9f:35:6f:7c:c4:5b:21:b7:42:3e:89:10:0d:d9:df:a2:21:
         c4:87:a7:ca:64:88:22:73:ce:7c:ea:d2:01:f5:d0:2c:be:73:
         a7:7b:2a:21:4f:3c:c3:e1:84:b3:ce:c8:3a:a7:1b:82:51:48:
         d6:3c:4e:7b:86:f0:c7:55:40:56:7b:cd:7f:73:3e:48:90:26:
         a2:cc:3d:ea:39:5e:4f:90:ea:22:6d:53:f2:ec:c9:46:66:e1:
         f3:22:6d:de:4e:ec:ef:d2:94:88:2a:3c:c6:29:f5:50:56:10:
         04:98:10:22:37:dd:13:66:e1:04:83:97:c6:ac:dc:1e:b7:23:
         95:c6:66:d8:1b:4d:d5:4d:9d:0b:20:81:91:c3:0b:dd:ba:44:
         75:99:a7:86:05:0c:ee:d0:16:23:76:65:7d:6c:55:4a:b3:76:
         66:7c:77:bd:22:fa:b5:80:e9:c9:64:b5:12:e3:ea:5c:df:87:
         74:c2:af:aa:5b:31:20:15:6c:60:2a:2b:11:30:ef:b4:80:29:
         df:af:4d:1b:f3:18:42:97:71:7f:b3:5f:83:8f:f8:28:53:76:
         9f:38:30:98:99:c1:f1:91:4b:56:4f:7c:69:be:b2:c4:95:f9:
         fa:25:f4:57:5f:16:3a:c1:38:4a:15:70:93:92:52:f1:cf:53:
         3a:e0:a1:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org