Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          sGhoRJ6gMHnX2CuJd4FVW5d5Q9OZVhqlmQVH4q2yXYc=
Subject key identifier:   70:30:A8:CE:A3:AE:C2:E8:8D:8F:68:89:A4:14:29:4D:36:FE:19:9B
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       4BDEAD64510AF90E87F195920DD5F0631575CC98
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:25 +0000
ROA not before:           Fri 23 Aug 2024 19:45:25 +0000
ROA not after:            Fri 22 Aug 2025 19:50:25 +0000
asID:                     61689
IP address blocks:        2804:1d04:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:de:ad:64:51:0a:f9:0e:87:f1:95:92:0d:d5:f0:63:15:75:cc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:25 2024 GMT
            Not After : Aug 22 19:50:25 2025 GMT
        Subject: CN=7030A8CEA3AEC2E88D8F6889A414294D36FE199B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:51:05:d9:6e:12:9e:68:9d:16:25:3c:1d:
                    90:74:78:fd:53:78:a8:b9:ec:13:0a:1d:6c:00:16:
                    8b:67:86:d2:55:f4:e3:0b:52:2b:33:13:df:1d:11:
                    e4:4c:8e:b3:70:c3:47:69:85:ce:99:83:24:96:53:
                    e0:e1:e4:2b:e2:ef:09:2d:6d:66:2d:f0:02:32:4f:
                    a2:86:40:14:71:8e:24:69:e8:cf:9c:a8:40:79:98:
                    dd:cb:f6:20:7b:0a:d2:30:a6:c7:fc:72:99:7f:f5:
                    70:a5:a4:e4:2c:19:f0:51:97:1a:3a:90:ae:0e:b2:
                    97:83:3a:ad:be:b0:0e:36:93:13:8b:50:a6:95:56:
                    93:51:2e:0c:06:f4:30:71:4b:95:72:64:07:4c:b8:
                    68:c7:82:81:4f:08:78:90:a3:e3:65:35:05:3b:cd:
                    eb:70:54:40:07:cd:a1:d7:be:eb:e4:15:f8:c8:65:
                    9e:19:f6:b4:b6:84:91:69:48:b4:ed:eb:0d:1a:65:
                    b3:07:13:8a:85:d6:e4:2d:5c:59:20:0a:4f:e8:8d:
                    76:99:7b:04:c3:44:2b:f1:3c:cc:e9:d7:c3:c3:c0:
                    f8:2b:df:0c:f3:ce:cb:fc:96:87:2d:62:9b:4a:6e:
                    ec:24:2b:ba:8c:a5:9c:3f:e3:5c:9c:42:22:94:10:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:A8:CE:A3:AE:C2:E8:8D:8F:68:89:A4:14:29:4D:36:FE:19:9B
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a333030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:f4:b4:2a:16:59:ab:7d:e8:14:80:a0:90:f6:83:a9:f8:ca:
         35:54:b3:fc:05:b8:28:36:90:75:63:61:00:5f:b9:a2:aa:40:
         80:9b:18:55:77:e9:06:a2:cd:b2:71:d5:5c:9e:85:0b:93:71:
         6f:87:87:91:72:99:8d:5d:08:39:77:e2:1e:2f:38:7d:1c:61:
         8b:7c:aa:81:7a:1b:7c:87:d8:ed:fb:0f:0e:8e:fd:22:21:c9:
         3c:8c:73:7d:70:f5:4e:bc:c4:df:a9:8f:66:1a:10:d8:ce:d8:
         96:6b:b2:f5:a9:6c:ea:18:3a:6d:46:91:db:13:bd:a3:18:08:
         76:9b:9d:0b:5a:14:5e:56:39:9d:1b:ba:c2:a6:82:d0:79:08:
         b9:2d:e6:92:54:05:2a:10:58:21:65:47:8d:4f:8c:35:96:a7:
         69:d0:4a:09:ef:ae:1d:b3:1a:bf:5c:34:3a:22:7d:e6:4c:5d:
         38:9e:c6:3c:bb:fe:6c:d8:25:ad:ea:55:bc:22:57:0b:fe:e3:
         f0:16:99:6d:cc:0a:4a:1e:f8:42:ae:1e:51:a7:ac:cf:9c:85:
         8e:e7:33:2a:2c:e2:2d:17:20:86:58:cf:2a:12:5f:5f:d2:bb:
         70:1d:29:a5:ba:49:13:82:c6:b4:1e:08:b5:d2:0a:81:aa:22:
         46:59:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org