Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
File:                     323830343a313261303a3a2f33322d3333203d3e203631393030.roa (raw, json)
Hash identifier:          aMZTWW4SAxfR1C/G33DANFa/gcxhW+QbkGto9D/e+Bs=
Subject key identifier:   C2:81:CB:DA:9C:A3:00:D4:87:0D:CA:4C:24:78:67:2C:A9:A5:75:39
Certificate issuer:       /CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
Certificate serial:       2D34EE30DA6CF4160BE14A761FFE615AA132F58F
Authority key identifier: 00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa
Signing time:             Mon 07 Oct 2024 19:21:31 +0000
ROA not before:           Mon 07 Oct 2024 19:16:31 +0000
ROA not after:            Mon 06 Oct 2025 19:21:31 +0000
asID:                     61900
IP address blocks:        2804:12a0::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:34:ee:30:da:6c:f4:16:0b:e1:4a:76:1f:fe:61:5a:a1:32:f5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A
        Validity
            Not Before: Oct  7 19:16:31 2024 GMT
            Not After : Oct  6 19:21:31 2025 GMT
        Subject: CN=C281CBDA9CA300D4870DCA4C2478672CA9A57539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:54:ca:f6:da:62:44:73:11:1c:6f:a6:f1:
                    b9:f1:44:63:aa:7d:24:c6:75:11:03:64:20:02:ab:
                    71:6d:49:b3:9b:36:a5:40:13:90:8c:a8:35:87:dc:
                    dc:f2:a3:a1:0e:eb:4c:42:3e:06:3d:43:3e:62:c9:
                    33:86:5f:6a:18:fc:50:43:38:3c:8a:c2:7f:f6:c6:
                    ca:ad:38:ae:32:cb:93:cd:ba:41:86:ef:b5:1e:81:
                    9b:75:4d:82:9a:98:eb:28:00:5c:db:44:6e:32:5f:
                    e9:a5:90:79:c7:d6:53:11:0d:18:e1:13:60:4f:fe:
                    8d:66:91:be:42:29:75:8e:78:d8:8a:ff:57:a6:a9:
                    1a:1a:ea:17:70:04:93:60:52:51:17:4f:9d:0a:52:
                    55:23:a9:e4:7b:15:77:bb:07:f7:64:67:c8:08:51:
                    45:f6:02:ca:4f:ec:21:d7:f7:f8:af:73:87:72:46:
                    96:de:d4:2a:ac:bb:88:a3:ed:e8:98:e7:d5:9c:37:
                    94:f2:bf:2d:4b:75:6f:5b:0e:cc:e5:7c:04:50:8c:
                    d1:e5:e0:41:35:21:4b:5e:03:de:27:3d:31:be:6f:
                    47:04:7d:c6:ca:4e:dc:5c:e8:90:90:87:a9:d0:02:
                    c7:08:4f:02:68:6a:9c:c8:37:86:e3:62:e3:42:fa:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:CB:DA:9C:A3:00:D4:87:0D:CA:4C:24:78:67:2C:A9:A5:75:39
            X509v3 Authority Key Identifier:
                keyid:00:44:F5:46:62:1F:1E:BF:7C:BF:84:9F:4F:ED:A8:E8:C1:6D:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0044F546621F1EBF7CBF849F4FEDA8E8C16D1E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3a2f33322d3333203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:99:c5:29:20:4a:18:fe:ba:68:a9:33:5d:fb:95:f8:ed:65:
         f8:a8:55:45:59:59:2c:29:11:4e:fd:9c:e3:fc:ab:f2:2f:a9:
         1e:9c:1d:5b:7e:b2:b8:a7:b6:d9:8a:56:1c:bd:fe:31:30:af:
         a6:92:79:de:5c:2f:f1:4e:45:fc:a8:d3:b6:f4:23:bc:71:d3:
         ea:be:33:5d:c9:ad:32:3f:08:40:7f:6f:2d:6d:8a:78:fe:16:
         b2:a4:47:ef:23:8f:07:9a:02:55:a0:f0:0a:0d:a9:26:c4:1a:
         06:dc:ea:5f:e4:d9:87:41:2b:de:eb:ad:c2:6d:ee:a5:be:88:
         71:8b:39:e7:14:cd:bf:96:d3:6d:4d:15:89:30:6e:06:35:8f:
         b5:2f:3f:fc:ba:6c:5e:9b:0e:e9:b1:91:ce:ca:3d:c6:10:69:
         9e:88:4f:69:7f:96:01:44:9e:92:3f:13:b3:b6:65:d5:24:5f:
         16:90:a6:56:7b:f7:bb:9c:2b:e6:5e:98:10:72:24:8a:fd:45:
         ca:e6:00:44:2d:8f:63:a4:cb:db:a5:2e:28:46:75:b3:8d:5e:
         73:ea:c9:e8:d6:8f:2d:cf:5f:2d:3e:48:c8:d8:c0:e5:3f:d4:
         25:1f:da:b9:1c:da:ba:3a:86:03:31:4b:ef:db:37:0d:a5:9d:
         94:55:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org