Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          m2W7W4wGzM3myBlU5BDjai1WnrrEV/cO1KWqTMjJv+8=
Subject key identifier:   C2:8B:43:16:FC:2B:B7:46:B3:4F:76:7D:C5:EB:01:CE:66:0A:D3:BB
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       16F4D4F1229A6767FBCE66E3781A76EF5664206C
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 11:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f4:d4:f1:22:9a:67:67:fb:ce:66:e3:78:1a:76:ef:56:64:20:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:43:02:c7:5c:4f:81:49:7f:ff:e1:6e:29:
                    b8:b0:e7:ff:22:dc:80:62:6b:27:d2:0d:c0:50:0f:
                    25:7e:59:0a:d5:5e:68:7f:31:0f:a5:cc:fe:17:68:
                    d9:bd:dd:80:79:8f:90:7e:09:d0:23:64:9c:4a:21:
                    1a:cd:6b:5e:1c:7d:20:89:13:7a:42:af:63:48:70:
                    fd:61:a3:54:5a:8a:13:2b:76:95:94:4a:fb:05:f6:
                    cd:a9:b9:c1:f6:b0:05:e3:75:c1:0e:71:ff:11:d6:
                    0a:aa:44:c2:c0:85:a4:ae:96:6a:0b:40:55:6a:de:
                    97:7e:bd:6c:26:9d:a7:da:cf:4c:6b:ce:cb:ac:b1:
                    b2:b4:21:67:ab:4a:52:16:f6:26:ec:77:1a:47:72:
                    81:46:28:39:a0:a1:c6:0c:23:23:13:8b:de:88:ef:
                    1a:16:74:b3:d6:02:34:5b:09:3e:52:c8:11:8f:e4:
                    5d:c5:96:13:0d:2a:21:bc:5d:04:3d:5b:4f:65:39:
                    f3:47:0d:08:4d:97:1c:ab:20:cf:c9:69:48:88:72:
                    d0:fa:af:e4:4c:21:62:fe:b3:f3:73:2a:fa:56:96:
                    5a:78:10:4a:10:1e:ea:54:aa:9f:6d:b1:e6:18:01:
                    da:62:aa:92:d0:f2:5d:72:eb:d1:7d:ad:c1:17:b4:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8B:43:16:FC:2B:B7:46:B3:4F:76:7D:C5:EB:01:CE:66:0A:D3:BB
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:ef:53:6a:25:77:d4:21:19:78:43:c0:fd:f4:0b:6a:aa:
         3f:78:cf:7b:a8:a8:ca:3c:90:40:1d:3f:07:6d:37:8d:75:be:
         d1:f9:f5:b3:6c:43:65:7a:77:89:f2:54:dc:58:d2:6d:bc:d2:
         4d:58:81:ce:e1:9a:f7:6a:8a:c0:74:01:69:a2:ef:4d:8f:a8:
         86:21:b5:5b:24:cb:90:32:cc:10:52:d0:a7:27:6c:d2:4e:c1:
         0d:f4:0f:b2:fd:97:2f:97:12:08:23:01:2a:07:a5:95:c8:d7:
         e1:f7:5f:c8:dd:0a:02:fb:ff:3f:a7:15:50:fa:7a:fb:b3:08:
         de:2a:61:a8:9c:20:ca:d4:63:f9:31:ec:b0:52:3a:a7:ce:d2:
         c5:cc:16:cb:a5:c3:0d:aa:52:b9:9f:53:be:88:16:e5:fa:7c:
         b5:71:4d:98:a0:95:58:a8:1a:86:f7:d2:e9:56:e5:05:02:83:
         03:59:35:50:e5:2b:97:e1:5e:1a:57:eb:ea:83:47:97:54:2a:
         cd:7f:aa:f2:16:7a:1f:48:3d:15:66:97:91:ed:63:27:94:44:
         42:21:4a:5b:ce:7d:91:6d:87:1e:ac:70:a9:ae:7b:00:4b:0f:
         97:1e:e8:37:44:ed:d5:9b:f9:a9:d4:ca:e8:52:da:3e:9d:56:
         41:26:d3:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:43:20 2025 by rpki-client