Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
File:                     323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa (raw, json)
Hash identifier:          PwdW+eSVbnbcBLUJAENr8enaWegyJMnfy55foSJBmYY=
Subject key identifier:   57:B5:06:78:93:D5:54:DD:8F:CF:3A:A3:2B:7D:58:1E:E6:F4:18:D1
Certificate issuer:       /CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
Certificate serial:       29F50F2935064D15D626A67C4886F8F3D8032CED
Authority key identifier: 6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa
Signing time:             Thu 04 Apr 2024 08:59:10 +0000
ROA not before:           Thu 04 Apr 2024 08:54:10 +0000
ROA not after:            Thu 03 Apr 2025 08:59:10 +0000
asID:                     266610
IP address blocks:        2804:3ea0:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl
                          rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:0f:29:35:06:4d:15:d6:26:a6:7c:48:86:f8:f3:d8:03:2c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Validity
            Not Before: Apr  4 08:54:10 2024 GMT
            Not After : Apr  3 08:59:10 2025 GMT
        Subject: CN=57B5067893D554DD8FCF3AA32B7D581EE6F418D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:76:68:85:3c:a9:27:e7:a2:10:20:de:7e:
                    ec:94:48:46:e9:02:e4:0a:c4:3a:4c:d8:d3:47:59:
                    73:8b:e3:49:8f:5e:34:c3:ea:27:53:33:7e:df:62:
                    5a:e6:14:e7:37:4c:6d:77:5a:5c:f4:a8:1c:ff:6e:
                    d0:de:e4:fe:51:e9:d5:78:1d:88:21:e4:fc:97:9e:
                    da:52:1c:0d:d8:be:3d:ac:2d:cf:b7:cf:65:35:ca:
                    90:7b:72:bc:aa:be:99:cf:2f:64:25:6b:04:8d:f8:
                    00:72:84:83:6e:de:50:26:9e:4c:8b:d9:b9:1d:0b:
                    91:38:c5:eb:2b:de:b5:d0:f9:8f:a0:b7:2f:d6:5e:
                    95:68:48:a5:46:eb:67:1c:11:15:4c:46:d9:96:88:
                    a8:59:24:1c:0a:f0:de:6b:6a:b7:76:9f:d7:d8:c4:
                    4b:e8:86:6d:17:65:85:34:a7:72:a6:0f:ad:6c:00:
                    02:72:8d:de:69:61:ff:9f:f4:f3:c4:11:aa:05:0a:
                    56:c9:f0:3e:fb:a3:b1:97:1c:1c:39:c5:d8:53:6c:
                    b4:31:87:3a:c0:73:c3:7e:d3:b1:90:81:7e:16:6e:
                    c6:54:9a:27:e9:0b:50:67:e4:fe:1f:58:d6:ca:89:
                    ea:9e:c5:45:74:e9:74:f1:6c:aa:bf:37:c4:c4:fb:
                    c5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:06:78:93:D5:54:DD:8F:CF:3A:A3:2B:7D:58:1E:E6:F4:18:D1
            X509v3 Authority Key Identifier:
                keyid:6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/323830343a336561303a383030303a3a2f34302d3430203d3e20323636363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:12:57:af:61:fa:c7:77:1d:3d:7d:b4:80:db:0f:38:29:c3:
         3e:a7:9c:a1:24:24:af:3d:eb:6e:0e:45:f2:85:1e:13:25:04:
         2a:6e:89:00:ad:e6:ad:73:30:d5:8b:86:ee:1f:b7:ce:bd:6a:
         28:5e:b8:ea:1a:64:41:e8:ae:0e:d5:e3:cb:4c:ec:8e:b8:c7:
         0b:47:d9:40:b0:80:50:03:b9:9c:fd:b9:c7:ed:8a:38:8a:7b:
         c4:de:9b:b6:6d:7e:fc:74:04:90:b7:fa:5c:44:67:ff:a5:74:
         c6:da:fe:3c:64:ec:5c:1d:0b:ed:09:e8:15:f0:27:2b:ec:73:
         e9:e1:a3:84:90:91:29:e5:ab:d8:c5:0a:c4:80:d2:c0:c7:46:
         d8:40:19:de:e7:81:20:55:3f:82:fc:46:35:b7:fd:b5:5c:a5:
         f1:4f:bc:71:a5:e0:0c:f2:a1:bf:36:cc:26:ed:44:d3:5a:55:
         cb:13:04:7d:16:4a:fe:75:ff:06:ee:8c:7c:fd:9a:00:63:77:
         7f:72:2b:24:11:9f:3d:f3:da:7d:d0:a6:df:d8:dd:5b:81:ce:
         b4:4e:70:c2:f3:29:83:46:72:fb:7d:f2:70:b5:c3:33:ef:86:
         4e:ea:43:68:be:e7:02:5a:95:ab:24:74:db:07:1d:ca:09:5d:
         89:00:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org