Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa
File:                     323830343a323231303a3a2f33332d3333203d3e20323634353839.roa (raw, json)
Hash identifier:          oNzel7WXY2b7N/68CdszGY5IbfgyJH8jQU+OMHQhli0=
Subject key identifier:   34:A4:56:F3:B7:BF:8D:65:64:C4:87:5B:D5:4A:30:7B:AB:8F:F1:FE
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       6FAF27B493DFCD79B6940D5F82E3550C48453389
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:39 +0000
ROA not before:           Thu 04 Apr 2024 07:57:39 +0000
ROA not after:            Thu 03 Apr 2025 08:02:39 +0000
asID:                     264589
IP address blocks:        2804:2210::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:af:27:b4:93:df:cd:79:b6:94:0d:5f:82:e3:55:0c:48:45:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:39 2024 GMT
            Not After : Apr  3 08:02:39 2025 GMT
        Subject: CN=34A456F3B7BF8D6564C4875BD54A307BAB8FF1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:1c:5e:39:0f:4e:4d:d4:cb:d3:13:28:e0:
                    e7:34:17:6d:02:2e:51:92:f9:fd:2c:15:23:c2:f4:
                    e2:0e:d9:5a:65:46:96:d7:33:c8:5a:f1:79:b6:52:
                    50:7d:4a:ec:b9:33:09:01:52:ef:69:7a:cf:42:c7:
                    56:9c:5c:6b:58:26:9e:a0:8a:19:ff:40:49:2c:17:
                    e6:67:8e:70:35:87:20:94:2f:fb:66:f1:9a:91:ff:
                    f9:57:2f:f1:a6:af:13:5c:09:2c:41:e0:18:4b:ce:
                    d3:27:ea:db:df:f0:34:c7:23:aa:f2:7c:e1:9c:d2:
                    9f:5c:46:8b:6a:a0:d6:ff:83:38:dd:cf:78:cb:de:
                    de:82:b4:3a:63:e3:f6:34:98:f2:9a:af:47:fc:1a:
                    bc:c3:f9:dd:4e:a9:f5:9c:64:76:1f:8e:86:25:59:
                    d5:7c:3b:02:bc:e7:49:7b:d7:0e:69:83:58:7a:ea:
                    46:54:dc:df:ef:1e:98:87:f2:5d:ee:14:8b:47:ed:
                    8e:da:a4:d1:f1:37:ae:ba:0b:ba:27:81:4e:60:0a:
                    2e:91:3a:5f:a9:af:ef:a2:0c:cd:64:5d:26:e7:28:
                    ab:d8:d6:14:03:7b:95:07:bb:ca:5e:c7:ea:6a:46:
                    d8:50:72:47:84:ec:4b:db:74:b9:b6:ed:ff:fa:24:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:56:F3:B7:BF:8D:65:64:C4:87:5B:D5:4A:30:7B:AB:8F:F1:FE
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f33332d3333203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:1c:c8:fb:cb:d7:d4:bd:7d:82:13:6a:ec:6a:a3:51:6a:
         4f:b1:66:5d:67:38:d2:ff:62:7a:5c:c0:46:6b:c6:17:35:8c:
         5d:71:c1:c5:1d:d6:4e:8d:da:ab:3f:cd:55:3e:0c:84:52:24:
         2b:08:50:fc:a6:2f:57:6e:aa:3c:dd:a9:6c:1d:17:5c:2b:78:
         e0:ef:10:15:9e:3f:08:f6:af:84:f1:a7:8e:53:bd:2d:99:16:
         98:99:8b:5e:04:a9:42:52:58:3f:08:28:eb:2c:b4:cb:49:e5:
         14:b7:e3:db:bb:fb:06:1a:3e:7b:e4:50:0d:2e:6d:70:96:8d:
         16:34:76:04:1e:34:3d:82:e8:b1:cd:8e:dc:f6:9f:14:e6:b4:
         9e:37:fc:6b:c6:11:1b:ce:2a:51:de:91:ce:a2:7d:71:5a:f3:
         59:b0:68:82:a8:c0:39:a5:f2:01:5b:ab:08:3e:31:a3:d2:07:
         88:c5:4d:ff:b5:f3:2f:54:d0:e8:d8:51:b2:51:dc:62:55:57:
         1f:7b:db:08:ed:fa:7f:da:d2:eb:6c:6f:6f:5b:a3:8f:0f:44:
         1e:00:36:9d:f4:5a:96:ef:1c:f4:f3:bd:f6:55:df:f4:12:a6:
         6e:52:49:15:63:0a:7e:d8:79:e7:08:a8:1c:c3:79:09:12:bb:
         b8:5e:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org