Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          NJ6+aCbmOXR5jC8LKHKik0Q7nyAdU6LQ63Xncx8orS8=
Subject key identifier:   94:59:56:0C:6A:71:74:D8:23:E5:40:FD:45:A1:A0:7A:9C:55:71:34
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       087101491684C40181A7A4154B26B942450596AA
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:41 +0000
ROA not before:           Thu 04 Apr 2024 07:57:41 +0000
ROA not after:            Thu 03 Apr 2025 08:02:41 +0000
asID:                     264589
IP address blocks:        2804:2210:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:71:01:49:16:84:c4:01:81:a7:a4:15:4b:26:b9:42:45:05:96:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:41 2024 GMT
            Not After : Apr  3 08:02:41 2025 GMT
        Subject: CN=9459560C6A7174D823E540FD45A1A07A9C557134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:ad:47:a8:f7:90:a6:e7:b5:b6:cd:b1:50:
                    d5:1c:33:ff:d8:6a:7a:06:20:01:f1:09:a4:b0:4f:
                    f2:33:ec:ed:b5:12:cf:50:58:f4:bf:17:1b:49:9e:
                    78:b9:3f:81:c6:82:c9:77:3e:4c:36:49:0e:9a:18:
                    2e:35:6d:7b:72:5b:0f:1c:6d:98:d1:b6:3e:ff:57:
                    24:3e:c6:59:b3:40:4e:75:af:de:22:4d:12:7c:53:
                    77:ee:1c:27:a2:8e:83:49:b6:10:c2:46:78:fd:e1:
                    93:77:3d:e3:37:ae:cd:2d:56:66:ca:40:b9:36:4d:
                    3b:ac:5b:a5:8d:7a:d8:03:c7:ae:52:e1:00:40:c6:
                    66:94:bb:bc:8f:c4:8d:14:13:c6:10:87:01:17:d7:
                    5b:c7:e4:48:7e:17:bd:5c:c6:60:71:74:e5:33:fd:
                    e4:4c:e7:9a:b6:80:32:62:b8:7f:c3:5a:4e:2f:63:
                    4a:74:96:48:9c:09:f3:15:cd:71:26:57:66:cf:6b:
                    39:1e:ee:7d:5f:7b:56:8f:e4:d2:db:5f:fc:de:88:
                    56:5b:da:3c:2f:7c:bd:fe:fc:15:65:13:67:1f:cf:
                    9d:f8:d2:b8:e2:77:bc:8c:25:0a:b3:a3:b3:11:f5:
                    a6:2a:07:60:b1:24:5a:c2:95:c4:5c:66:bf:db:3d:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:59:56:0C:6A:71:74:D8:23:E5:40:FD:45:A1:A0:7A:9C:55:71:34
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:5f:a0:e2:a9:b9:c4:65:64:dd:2b:8f:2d:82:5d:74:bf:
         14:8f:18:b4:f9:6a:67:65:ec:03:6c:fb:13:9e:7b:73:a9:e9:
         d0:fb:18:32:1e:47:81:e4:22:2d:53:1d:70:59:36:70:69:d0:
         64:15:1a:cd:de:ff:25:de:f7:94:66:c8:c3:c1:95:3f:2c:e8:
         97:94:24:d7:ad:a7:c3:3f:6c:16:fc:dc:78:fe:bd:a0:69:e5:
         45:65:c2:a5:db:4d:0b:da:e5:19:85:b1:41:43:f0:83:16:f0:
         a7:8f:eb:b4:89:0f:09:2d:22:ae:fa:48:0e:93:69:f1:3f:68:
         2f:a7:4e:ee:cb:29:e7:64:c5:35:ba:11:e4:c4:18:ac:29:2b:
         4c:08:0f:16:96:85:83:fa:83:c7:00:44:4b:0b:df:cb:dd:cf:
         7e:39:b1:18:5c:2f:32:a7:57:65:37:d0:be:ca:7a:e0:c5:a8:
         d3:d4:67:a3:bf:50:32:45:d7:d1:ba:5a:40:5b:55:27:5e:b9:
         6e:72:c8:d3:95:7e:0e:be:15:fa:78:e9:35:c8:ff:71:10:5c:
         10:f7:a4:d5:44:76:58:42:87:0f:2c:d9:a4:23:af:99:39:70:
         2a:6e:fe:92:5b:d8:da:d9:41:ba:d9:04:8a:26:e3:9d:aa:bf:
         55:e4:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org