Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          iLlw+oweKJIQykP67NU9YHOkiE01Hn2dpn+Tsq0bn5o=
Subject key identifier:   35:71:AD:16:A0:40:1B:4E:95:EF:D4:B9:1C:59:F4:07:E5:67:35:F3
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       1531F2A0C1F5A00D4E587C02661A77EA3F3D25E4
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:52 +0000
ROA not before:           Tue 01 Oct 2024 14:00:52 +0000
ROA not after:            Tue 30 Sep 2025 14:05:52 +0000
asID:                     265175
IP address blocks:        2804:2bc8:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:31:f2:a0:c1:f5:a0:0d:4e:58:7c:02:66:1a:77:ea:3f:3d:25:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:52 2024 GMT
            Not After : Sep 30 14:05:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:77:3f:f7:0e:a8:5e:e6:ab:17:64:f3:5e:
                    01:ef:70:6c:a3:36:1f:1c:1b:d5:41:6a:5c:3e:8b:
                    ce:9b:f7:cc:fa:ab:f6:53:80:62:e1:fb:26:83:55:
                    59:26:1c:ab:ae:75:fd:ed:13:43:c4:12:83:d3:95:
                    36:ca:3b:86:f5:c8:02:e8:a9:d6:e9:aa:7f:b4:90:
                    e2:53:7e:ff:f3:c9:b6:87:8d:9a:95:67:8b:a5:95:
                    97:75:7b:bb:f9:9d:96:f5:f4:d1:c1:86:06:5c:80:
                    23:cb:af:60:35:60:8a:37:e4:5a:39:42:58:bb:65:
                    61:eb:b9:17:45:96:2b:92:96:21:fd:60:7a:2e:21:
                    4e:e9:96:15:ac:ea:c0:f0:0a:cc:ed:a2:ca:33:8d:
                    1a:93:72:ae:e7:d7:a3:6a:21:91:d0:17:24:41:62:
                    34:99:6c:1d:4e:90:01:c5:20:7a:c3:03:38:28:ec:
                    0c:ed:5a:2b:cd:cd:6a:09:a2:f1:32:10:06:d8:6e:
                    cf:83:d7:ec:7a:2c:06:6d:a8:0b:97:27:31:31:1f:
                    ac:aa:69:65:dc:c0:81:a8:34:53:fe:a9:35:01:0f:
                    77:dc:c8:43:75:92:33:01:5a:0a:a4:3c:de:59:33:
                    a0:3a:6c:92:1e:0c:07:01:7b:42:6a:2d:eb:69:70:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:71:AD:16:A0:40:1B:4E:95:EF:D4:B9:1C:59:F4:07:E5:67:35:F3
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a653030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:c5:bd:b4:42:f4:c3:66:a8:5e:e7:c1:60:a8:8e:6d:6d:
         4b:e1:1b:60:12:3b:cf:fc:b3:d9:ad:14:f8:ab:c8:18:d9:04:
         51:99:d1:f7:95:55:6f:80:a5:58:a0:8f:07:05:cb:0b:31:a4:
         ae:fd:29:9a:dd:eb:a7:8e:d9:45:fb:ad:69:29:5e:7a:d6:d2:
         d0:b8:08:3a:e6:c7:0b:80:b4:6d:69:d2:ce:59:09:63:9e:ad:
         03:12:54:84:bc:b8:f7:fb:a8:33:f9:b5:7e:03:e1:b1:cd:1b:
         6e:55:c8:24:f4:27:ef:e2:ed:6d:b3:b4:a3:15:ef:26:73:fd:
         e5:5c:21:d3:59:04:0b:28:bb:ab:b8:d5:02:ae:e8:c6:a9:53:
         bd:f2:bb:92:97:48:ca:b0:3d:2b:ae:35:ae:2e:4d:ad:be:79:
         ff:b2:fc:c0:4c:ce:e5:1d:3e:7f:c4:1b:57:ae:9e:c2:e4:e6:
         54:36:98:ae:61:9b:fe:a2:2a:bb:90:02:3d:bb:37:49:e0:83:
         3c:ad:f9:f0:5d:a8:b6:ab:bf:c7:86:f0:77:26:11:0a:78:ba:
         99:74:7a:85:28:11:69:f4:44:2f:25:3c:c0:c1:80:42:be:3f:
         6e:33:a0:b9:7d:d7:9e:08:06:9b:e2:34:d4:96:0e:44:e1:61:
         ac:07:83:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org