Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a643030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a643030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          H8emFdLw2Xqb9JdY1/Y5CZYN6k9tet0fP5pKon09dp0=
Subject key identifier:   CD:6C:EE:8D:0E:14:F6:9E:21:87:A0:8F:8E:8A:BA:C7:F2:E4:CA:B7
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       05851E07004121CA3833B9659183D2DE47505F2F
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a643030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:17 +0000
ROA not before:           Fri 23 Aug 2024 19:45:17 +0000
ROA not after:            Fri 22 Aug 2025 19:50:17 +0000
asID:                     61689
IP address blocks:        2804:1d04:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:85:1e:07:00:41:21:ca:38:33:b9:65:91:83:d2:de:47:50:5f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:17 2024 GMT
            Not After : Aug 22 19:50:17 2025 GMT
        Subject: CN=CD6CEE8D0E14F69E2187A08F8E8ABAC7F2E4CAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:99:b1:c4:bc:1b:a8:54:07:cc:e2:ef:93:
                    55:82:f4:e6:62:f8:be:b4:ee:2b:13:6c:2a:9c:25:
                    d7:a5:b3:b1:65:e2:b2:73:d7:c4:4e:c6:35:d1:2a:
                    ce:f9:8c:c5:62:5d:cc:01:8c:59:6c:3b:10:47:ac:
                    9c:06:da:33:00:f4:8a:1e:e3:5f:36:00:95:cd:aa:
                    82:cd:40:7f:34:89:43:f2:b1:19:1e:9f:80:1a:d8:
                    d3:b5:ee:09:be:d3:d4:c8:00:33:4a:d0:c2:50:45:
                    ff:0c:bd:b7:82:fc:2b:f8:45:95:e7:f6:10:8c:bc:
                    04:66:77:94:2f:3a:e4:e3:11:df:b6:fb:bd:e9:b9:
                    2c:17:69:0e:c9:7d:1d:d7:20:4b:cb:c2:9b:af:79:
                    90:25:ad:2c:22:59:7c:9f:24:cc:bc:58:dc:8b:8e:
                    ae:c0:67:0f:85:c5:d4:53:b2:e1:62:91:c5:e4:2c:
                    69:c6:af:4c:35:ba:8d:58:b7:2f:a5:0d:4a:e0:4a:
                    b0:7e:7b:64:1a:86:46:17:ff:ff:8c:a7:77:cb:91:
                    92:a1:23:c5:0c:2c:17:76:5b:3f:f2:15:36:a3:4a:
                    48:36:e1:d6:c0:72:90:49:0a:0e:34:d8:08:ea:d9:
                    3f:f0:05:ea:df:ca:ec:c1:c5:29:fa:fd:fd:e6:42:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6C:EE:8D:0E:14:F6:9E:21:87:A0:8F:8E:8A:BA:C7:F2:E4:CA:B7
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a643030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:13:67:88:af:19:45:92:87:f3:13:d0:a2:b2:11:f5:e1:4a:
         a8:7c:44:cb:6e:03:ca:c6:bb:a8:80:de:11:31:4f:d8:3e:41:
         a7:3f:49:da:45:92:30:bf:3b:4c:1f:f8:b5:57:53:2c:78:c7:
         3c:a1:45:0f:1f:c6:ba:7d:51:a0:7a:c9:10:9f:a2:bd:1c:96:
         e5:f4:17:80:a6:61:38:3e:9f:cd:3e:7b:8b:b5:49:a4:f9:bf:
         86:07:f1:fb:88:a5:d8:02:89:6b:95:85:37:1b:96:26:c6:17:
         6d:8b:b1:6b:47:f5:74:db:fd:1f:5a:ec:44:ab:c7:fe:44:33:
         ba:ed:ad:94:17:e7:1c:dc:f0:ab:83:b2:f8:07:62:19:c6:e6:
         6b:b8:95:3b:8c:2a:2d:bf:87:c8:47:31:28:cc:ec:f1:12:4e:
         ed:da:ef:a4:a0:af:d4:49:e0:78:69:e8:db:ea:6a:81:18:a4:
         60:ee:ac:1d:1f:c8:79:1f:0a:83:bb:d5:77:6a:77:71:9b:b2:
         93:1f:5c:10:60:ca:70:1d:89:f1:88:5c:c1:31:49:9e:6a:47:
         18:a9:aa:09:92:6c:55:a2:e7:d6:99:3f:62:3c:82:49:74:e0:
         2e:30:35:13:3b:61:ed:db:75:ee:47:11:06:63:11:83:24:03:
         3c:c3:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:32 2024 by rpki-client on console-fra.rpki-client.org