Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa
File:                     323830343a363063303a3a2f33322d3438203d3e20323639313838.roa (raw, json)
Hash identifier:          VTIXHLSfB8uS19br6k4M+cCRY465bhk570mjI2sUnKg=
Subject key identifier:   6B:12:84:A5:0B:D7:46:75:68:33:44:EB:8D:29:73:88:CF:C3:EF:8A
Certificate issuer:       /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial:       4658F3FA2E120E1DD80034A708357BF2582E489C
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa
Signing time:             Fri 12 Jul 2024 17:50:58 +0000
ROA not before:           Fri 12 Jul 2024 17:45:58 +0000
ROA not after:            Fri 11 Jul 2025 17:50:58 +0000
asID:                     269188
IP address blocks:        2804:60c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
                          rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 14:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:58:f3:fa:2e:12:0e:1d:d8:00:34:a7:08:35:7b:f2:58:2e:48:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
        Validity
            Not Before: Jul 12 17:45:58 2024 GMT
            Not After : Jul 11 17:50:58 2025 GMT
        Subject: CN=6B1284A50BD74675683344EB8D297388CFC3EF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:5c:fe:41:38:1e:11:f4:e7:36:b4:49:54:
                    65:26:68:d2:c4:c7:de:ee:90:fb:ec:99:74:11:ea:
                    ad:2c:82:94:62:80:4b:f1:21:0c:cc:21:c5:d7:f1:
                    9f:eb:12:9b:4b:d0:95:7d:56:c7:2f:28:7b:02:a2:
                    ed:3a:e0:47:bb:2c:f2:e6:d2:c1:15:92:6a:5b:81:
                    2d:23:d8:bf:d9:ba:08:18:5c:41:cc:47:9e:46:50:
                    1d:13:e3:b5:f0:14:20:50:a9:59:b3:6e:d2:3c:96:
                    cd:1d:f8:a3:2d:5f:14:f1:8e:30:ab:1e:09:b9:e7:
                    51:bd:d2:82:67:54:8a:ad:f7:6f:95:a8:06:84:f7:
                    96:8a:26:58:b1:7e:64:24:c4:14:6f:b2:24:68:4b:
                    be:64:2d:57:ac:f2:7e:0b:9e:b9:2b:67:bd:57:ee:
                    8e:5e:e5:11:70:9c:57:18:fe:98:ab:b9:79:a6:09:
                    d7:b5:4a:50:12:3c:a1:2c:1b:e8:33:6a:fd:16:ef:
                    ab:71:93:f7:e4:53:4e:72:28:86:d5:ff:a7:74:9d:
                    79:2a:5d:16:52:1e:7b:ee:9a:44:25:2d:d8:51:e4:
                    fc:29:81:d7:f3:34:3f:d2:16:c5:31:90:e8:a8:67:
                    e2:1c:d2:04:28:6a:c6:f6:72:2b:f3:d7:2c:3e:5f:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:12:84:A5:0B:D7:46:75:68:33:44:EB:8D:29:73:88:CF:C3:EF:8A
            X509v3 Authority Key Identifier:
                keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/323830343a363063303a3a2f33322d3438203d3e20323639313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:b1:88:38:35:cd:5d:92:29:b9:46:1b:90:ea:5c:93:78:
         c8:62:e4:f4:92:4b:fe:04:b9:8b:93:33:0a:a6:b8:91:57:3c:
         8e:a4:9e:15:a6:3d:2a:ee:b5:fb:d1:80:18:09:5d:74:db:86:
         4a:a2:e1:90:b2:e3:b7:05:c3:3f:52:cf:1f:0c:ec:b7:97:a7:
         dc:40:4b:00:50:10:67:18:68:df:2e:5c:c1:c0:b8:c9:2b:0a:
         da:7a:fa:d0:3a:ca:f9:fa:4f:af:2d:79:b1:c1:cc:bb:85:22:
         55:f2:56:a6:68:5c:db:d2:48:91:33:0e:16:9f:b8:df:07:30:
         e5:c1:f7:7a:74:86:4f:f2:89:18:96:f0:89:ce:00:20:96:f2:
         62:e6:e3:a7:b5:b2:f7:00:7d:29:4c:fb:43:e4:6d:12:18:fe:
         b7:73:a1:a1:b6:b9:b2:07:0f:1f:78:85:c5:f1:21:4a:2c:37:
         90:8e:f7:75:ef:aa:09:3c:7c:2c:42:53:76:09:72:0c:16:8d:
         8a:85:1f:35:cd:df:39:b4:29:53:1c:89:db:45:05:8d:7a:c1:
         89:c4:5b:d1:47:6c:8b:4c:07:75:c0:02:30:73:ca:f6:d9:f5:
         3a:db:fb:d7:dc:56:1a:9e:59:66:7c:ca:5e:5f:51:5d:6b:9e:
         43:54:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org