Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          nHkapNd3RCMQN9cSBL8p+9c6/8ws4vd0GDUt5WzCzU4=
Subject key identifier:   81:A1:F6:EB:F6:A4:53:DE:A5:C8:F6:6A:34:D5:3B:B5:D6:37:76:C3
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       77E9876CF885B821ABB87874C0F40614C3A97D28
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e9:87:6c:f8:85:b8:21:ab:b8:78:74:c0:f4:06:14:c3:a9:7d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:5a:79:c8:9b:57:6c:3b:d4:55:ca:e6:d7:
                    cf:06:8a:f4:12:36:77:ef:cc:52:ae:73:b9:89:b5:
                    4b:e5:0f:ad:7c:2c:df:56:bd:31:c3:f3:d2:cb:4a:
                    61:cb:a6:cc:1a:f5:a0:5b:eb:e8:92:06:69:0b:98:
                    6e:11:54:3a:e3:43:5a:08:66:70:aa:15:69:77:16:
                    85:78:2d:cd:92:e4:76:54:dc:77:ab:c2:36:55:7a:
                    74:43:35:b7:1e:d3:c6:e4:95:aa:82:2c:b5:f9:f4:
                    a2:09:9f:5b:16:9b:9a:2b:ca:70:64:00:f1:a6:89:
                    2e:48:90:1a:b4:67:ec:04:1a:50:6b:3b:2d:46:a5:
                    6d:8d:55:eb:54:cd:6a:b6:d9:56:19:93:73:59:91:
                    85:15:c0:df:b2:ca:94:cb:74:cb:12:aa:07:66:b1:
                    b6:e8:1a:10:ae:08:08:b3:4e:21:5b:64:e7:8f:47:
                    b8:f9:71:1e:ad:4b:c0:14:42:0e:04:30:44:1a:31:
                    c3:9b:d3:8b:fe:e8:60:0e:b1:84:cd:0b:ef:a1:65:
                    ae:d9:49:1a:ae:72:27:d2:7b:00:99:6f:0a:ea:8a:
                    cc:fc:65:13:21:49:ab:fd:1a:ed:00:73:e3:2e:02:
                    45:93:9d:6d:f4:1a:cf:ca:04:47:af:bc:55:61:42:
                    3f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:F6:EB:F6:A4:53:DE:A5:C8:F6:6A:34:D5:3B:B5:D6:37:76:C3
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:11:00:4d:f4:20:92:81:26:e0:10:e5:ca:94:fc:f8:fb:
         59:e0:4f:e7:2b:17:a4:07:f3:b5:55:c5:dd:ed:36:e4:ed:b3:
         0b:62:8f:1d:93:2d:79:06:18:57:c9:b9:72:7e:d1:1d:31:28:
         ba:40:73:77:4e:2f:c4:b5:09:1c:bd:75:a0:7a:d5:81:28:66:
         c7:82:9a:9d:c4:dd:40:8c:e1:84:73:62:a3:f7:eb:72:a9:bf:
         58:2f:75:6d:a3:74:17:9e:19:b3:9e:a0:1a:bd:cb:88:59:cd:
         94:05:2e:65:3b:ff:69:c3:32:8e:64:6c:47:e6:e8:aa:65:4c:
         44:13:98:29:99:5a:6e:d5:1d:b9:b0:9d:e7:30:e9:61:3c:e4:
         f8:ef:d2:d2:6c:54:9a:7d:4b:21:80:4f:a8:1b:f4:38:18:6f:
         cd:bf:19:93:d9:19:b0:c6:56:94:4c:1d:14:38:bd:eb:bd:43:
         ee:49:df:87:e8:87:80:6a:4a:0c:1d:cb:af:a8:bd:5a:e4:4e:
         02:cb:5e:40:bc:ce:37:0e:ce:d7:d8:9b:77:5e:01:6a:e1:bc:
         47:84:4a:77:d1:95:ca:1f:69:8a:d3:ef:1b:9d:b1:a4:c8:00:
         b1:5d:2c:09:ba:39:46:e5:86:67:b4:c9:6f:bf:c6:27:01:86:
         eb:b0:1f:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org