Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          aIZpjm9xabhu6CpcxYiS2PsJlvOqngXxac/ro9mD+2A=
Subject key identifier:   08:57:36:6D:34:FE:E7:9B:64:2A:56:36:AC:DC:7D:65:8E:C9:BD:E8
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       3CF2310BAB27EA9C00CF240C6942B053BCD64701
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f2:31:0b:ab:27:ea:9c:00:cf:24:0c:69:42:b0:53:bc:d6:47:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:8e:71:bf:7d:0b:74:9d:ba:86:ef:0d:83:
                    2e:10:f9:7d:c4:37:f6:7c:18:c6:5e:65:29:87:a6:
                    70:df:51:86:f6:bf:cc:fe:3c:30:28:61:3d:b2:a9:
                    a9:12:17:91:d0:63:b6:61:63:93:67:36:a3:11:48:
                    3a:dc:2e:00:09:15:3e:55:37:52:25:93:43:6f:5a:
                    6f:45:ae:f1:53:6a:2f:a9:6a:4d:ef:79:1b:41:3f:
                    e6:3f:39:c4:7c:da:6d:71:d6:d7:17:cf:58:02:27:
                    60:f8:ea:dc:63:99:ad:fb:58:d0:dc:94:a8:91:d5:
                    0e:17:16:fa:c3:63:35:1a:23:35:37:9f:34:90:a1:
                    e5:b3:9b:55:23:ad:b1:be:eb:be:e4:94:b4:a5:27:
                    1f:38:b6:47:13:38:90:fe:54:fd:c2:2f:38:cc:4c:
                    37:95:b9:df:9f:78:74:6a:5f:8f:40:10:de:d5:3b:
                    a9:59:99:11:a1:c6:dd:39:40:54:21:fd:92:5d:dc:
                    c9:25:24:76:8b:fd:53:09:7c:db:29:79:07:2e:cb:
                    26:f8:40:c7:0c:db:1d:01:96:e1:a9:8b:d6:92:a9:
                    5d:38:c0:d5:ec:0c:3d:dc:2e:72:0d:03:ec:f3:0c:
                    0c:95:9d:ee:45:a1:df:6c:45:20:f2:50:b6:a9:90:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:36:6D:34:FE:E7:9B:64:2A:56:36:AC:DC:7D:65:8E:C9:BD:E8
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:53:e3:a2:d9:78:2c:50:5c:be:eb:ea:e4:4f:f4:ac:9b:5f:
         54:8a:ab:17:b9:a1:d4:47:2a:23:dd:6e:74:4f:ac:76:4f:80:
         f2:17:92:b8:48:80:ae:d5:f7:c3:95:1e:90:32:ab:9d:55:eb:
         e8:b7:4a:36:01:5a:98:cd:8d:35:1c:52:2d:71:91:5a:33:02:
         eb:7c:c5:b8:2a:92:31:ba:02:b7:63:a2:20:01:61:fb:f0:3f:
         43:f9:a3:ad:ab:bf:75:09:1a:ff:62:76:a2:9b:ae:46:d0:0f:
         a3:e9:10:d0:db:5b:64:ab:b7:2d:1d:a9:e4:73:86:37:5c:59:
         37:22:ab:26:6e:b8:a9:c0:07:0f:3c:e2:b8:48:1e:73:b6:af:
         bc:7c:63:32:6c:96:24:48:db:76:f9:55:40:db:9e:fe:af:9c:
         61:06:e1:ca:3b:b0:23:8c:6d:6d:3b:42:71:94:25:99:e3:bf:
         44:ae:f1:99:ad:5d:47:35:f8:a2:02:66:8d:8a:ac:16:7a:51:
         58:98:26:b9:fd:95:9f:9d:c6:e7:1f:73:b3:4d:2c:8e:c1:c1:
         8c:10:13:0c:bb:7d:43:e1:02:8c:e5:1e:71:e3:a1:99:41:c5:
         c9:cf:ae:55:a4:b4:b1:23:f0:cb:f7:2b:2f:7d:44:74:f8:ce:
         ec:11:97:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:08:26 2025 by rpki-client