Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
File:                     323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (raw, json)
Hash identifier:          CtTtJ+jMicWLJgzOVe2HhIGjkg7lMhcB2RxeD2K2fZE=
Subject key identifier:   06:5A:CE:3B:AE:57:9B:99:00:32:BD:DF:DC:41:68:31:52:5A:F1:DA
Certificate issuer:       /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Certificate serial:       4A540C5EC3CA7BFC5B022010EB00AFA9A5FA37CB
Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
Signing time:             Wed 03 Apr 2024 22:52:40 +0000
ROA not before:           Wed 03 Apr 2024 22:47:40 +0000
ROA not after:            Wed 02 Apr 2025 22:52:40 +0000
asID:                     270891
IP address blocks:        2804:7308::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl
                          rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:54:0c:5e:c3:ca:7b:fc:5b:02:20:10:eb:00:af:a9:a5:fa:37:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
        Validity
            Not Before: Apr  3 22:47:40 2024 GMT
            Not After : Apr  2 22:52:40 2025 GMT
        Subject: CN=065ACE3BAE579B990032BDDFDC416831525AF1DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:2a:89:12:34:75:43:97:b7:03:77:df:62:
                    4d:ea:dc:ec:9d:3a:c1:4b:9b:51:16:69:d2:bb:f5:
                    c8:c3:32:6e:34:74:a4:2b:7d:d4:0e:be:9b:f6:d0:
                    bb:d1:83:27:72:99:82:51:7d:ed:1b:1a:bb:49:90:
                    2c:70:27:09:6a:fb:3a:62:44:c5:66:c5:7b:26:39:
                    e5:b6:06:bf:80:56:9e:be:f7:af:74:b5:d3:19:f2:
                    60:e3:3e:7e:16:96:b6:e4:53:e2:65:30:f9:0e:c5:
                    81:51:c8:96:49:45:bb:73:22:f2:c0:de:8c:44:d2:
                    90:10:46:e1:e7:bb:10:9f:45:c4:7e:65:1f:b5:6e:
                    fd:eb:2a:d5:62:38:ce:65:ce:c5:e4:62:85:26:24:
                    74:77:f9:64:97:54:a0:ec:81:15:15:2d:0a:aa:18:
                    dd:53:c3:0c:29:c1:61:6b:4c:ab:cb:07:82:c3:61:
                    92:61:44:38:79:e3:33:96:20:64:ea:a6:49:cf:74:
                    8a:0e:c0:6e:23:35:70:1a:ea:ce:49:3b:f0:bf:50:
                    4a:20:64:b6:4c:7f:6a:4c:a4:3f:15:06:13:f5:7c:
                    62:76:69:40:8c:d8:62:18:82:a3:53:63:d3:8f:1d:
                    5c:4a:b1:e9:73:5e:8e:90:95:1f:01:54:28:6b:ef:
                    b3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:CE:3B:AE:57:9B:99:00:32:BD:DF:DC:41:68:31:52:5A:F1:DA
            X509v3 Authority Key Identifier:
                keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7308::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:81:61:fe:b7:33:75:16:3f:3d:fe:d6:53:b1:c5:36:e9:
         a9:e2:df:f0:f2:4b:7a:86:9d:ba:9b:0f:ff:81:ac:c4:a0:b1:
         1a:63:33:f1:38:58:d3:17:dd:fd:32:98:40:16:db:24:ca:dd:
         ef:bb:0b:f3:2c:43:52:33:43:00:53:d6:eb:51:ac:62:c2:49:
         cd:c2:54:e7:3f:a6:69:bd:fa:07:92:cd:f5:ef:3c:e8:99:93:
         e4:d0:aa:53:0e:fe:4f:33:19:99:8b:7e:f0:bc:a8:d1:93:98:
         32:15:c7:ef:45:c6:00:08:53:21:ad:16:79:93:8c:0d:ea:31:
         32:87:12:f0:71:98:2b:2f:9a:69:5e:81:8c:4c:77:2e:1b:60:
         e6:1e:bb:46:60:92:cc:57:a8:9c:14:ee:53:ec:0a:e6:82:ff:
         03:2d:3a:e6:24:98:f6:a0:13:6b:2f:9a:83:08:d2:0d:78:4d:
         90:5a:f6:70:ec:da:a8:5d:20:75:f6:15:b8:62:9c:39:54:fa:
         8a:f2:85:eb:c0:b0:c6:5b:47:ed:e3:8b:b5:0d:41:3d:39:33:
         0e:b6:4c:e5:c8:dc:4a:ee:94:e1:c3:13:f3:51:7e:e6:07:12:
         dd:19:84:ff:a2:a5:ef:fb:c9:82:32:01:9a:fa:31:8c:c3:db:
         2a:c3:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:34 2024 by rpki-client on console-ams.rpki-client.org