Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
File:                     323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa (raw, json)
Hash identifier:          ACCClRS5aXFpNaNjIznBBcnhDY9y789vP1fnEeWSLeU=
Subject key identifier:   64:A7:E0:D0:F5:80:32:82:DB:66:01:35:D6:78:0F:CE:2C:04:AB:A0
Certificate issuer:       /CN=001C1582B42E32880AA66677B51A015B52D2C781
Certificate serial:       619D2142351B9E4058F20FE9BE27FDC13870C244
Authority key identifier: 00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa
Signing time:             Mon 09 Sep 2024 15:00:21 +0000
ROA not before:           Mon 09 Sep 2024 14:55:21 +0000
ROA not after:            Mon 08 Sep 2025 15:00:21 +0000
asID:                     26506
IP address blocks:        2804:880:100:ed::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl
                          rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9d:21:42:35:1b:9e:40:58:f2:0f:e9:be:27:fd:c1:38:70:c2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=001C1582B42E32880AA66677B51A015B52D2C781
        Validity
            Not Before: Sep  9 14:55:21 2024 GMT
            Not After : Sep  8 15:00:21 2025 GMT
        Subject: CN=64A7E0D0F5803282DB660135D6780FCE2C04ABA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:d3:31:62:2f:26:9b:62:58:4e:15:f5:2b:
                    1a:cb:24:e4:53:bb:89:f9:14:68:5e:ef:a7:4e:92:
                    d6:65:21:db:c5:9d:63:54:99:b4:40:ec:aa:df:f6:
                    7e:9b:27:f4:0e:70:00:c5:ff:c4:a3:c9:34:90:b0:
                    8e:c9:53:7f:af:e6:41:50:c7:7f:f2:f8:eb:16:73:
                    5f:ea:0c:03:64:f6:0f:30:a6:2e:0c:bd:58:ee:74:
                    14:2c:da:b3:4e:ee:1c:05:52:14:f3:c1:68:2f:8b:
                    b0:06:d1:fa:d1:1c:7d:b2:ff:5d:c6:55:1b:56:8e:
                    6b:da:57:8b:bf:1e:c7:7b:e6:27:7e:67:2d:b0:18:
                    a1:a1:36:ae:18:99:46:83:89:1a:2c:b9:8f:95:ec:
                    ff:61:c2:41:2a:71:32:c4:bf:78:30:3b:b5:23:55:
                    20:4d:46:63:f8:e2:11:66:78:a7:76:93:30:05:49:
                    66:51:45:8d:21:c3:1b:25:18:9e:03:58:6a:9f:19:
                    62:45:d8:c3:2f:00:47:16:ff:08:ed:e9:dd:8e:7d:
                    d3:69:4e:9a:24:44:b7:e3:37:22:37:84:8a:d0:0e:
                    fa:41:1f:c7:3f:50:e8:1e:ea:6e:aa:14:a2:78:e6:
                    7a:ab:6e:f9:94:06:57:0d:8d:6c:5e:d3:29:3d:95:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:E0:D0:F5:80:32:82:DB:66:01:35:D6:78:0F:CE:2C:04:AB:A0
            X509v3 Authority Key Identifier:
                keyid:00:1C:15:82:B4:2E:32:88:0A:A6:66:77:B5:1A:01:5B:52:D2:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/001C1582B42E32880AA66677B51A015B52D2C781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/001C1582B42E32880AA66677B51A015B52D2C781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/323830343a3838303a3130303a65643a3a2f36342d3634203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:880:100:ed::/64

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:c3:42:08:8c:bb:a3:7e:dd:d5:7c:13:f5:d9:3f:69:39:
         f3:ed:e7:d1:f7:85:cc:64:23:ea:78:ec:72:cf:4a:29:d9:1f:
         01:1f:40:00:19:ad:39:ed:ba:4a:0b:af:4f:95:77:6c:92:5f:
         e2:f7:51:3f:24:e6:b4:cf:45:2e:6f:09:7a:d2:b3:6c:65:02:
         81:1a:f5:8a:b8:a9:68:22:d0:f4:89:3d:10:5f:03:91:87:46:
         21:d4:b0:b1:b0:4a:92:6a:fe:f4:7e:b8:93:fd:2d:c5:6b:c9:
         fa:0b:78:d2:9f:49:91:94:7b:e0:48:3f:5c:59:16:c8:b0:c6:
         56:64:ff:46:d9:4e:e6:b4:2d:91:5f:c5:30:50:f5:5a:26:e2:
         b2:85:73:fd:17:ec:33:49:28:98:68:9d:7c:6a:a4:f8:64:7d:
         8c:30:07:f7:bd:57:57:8d:b7:c5:da:f4:66:2c:ba:db:e9:da:
         9d:33:08:d3:a2:5f:9e:0e:02:08:75:d1:08:fc:2a:a4:ae:6b:
         33:b3:ce:fb:cc:06:3c:79:6d:a3:f4:7d:f6:ba:6a:a8:c3:48:
         fe:f6:4e:3b:02:cf:ea:a2:63:d6:cf:e3:03:fd:a2:72:74:50:
         fc:5d:f2:36:7d:f5:d7:03:90:dd:c3:48:98:eb:45:b0:a3:8c:
         c1:18:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:27 2024 by rpki-client on console-ams.rpki-client.org