Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa
File:                     323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa (raw, json)
Hash identifier:          PaYpd8pb3Db7SUMnXwmQPrO4mnRAEFwaX3AlA9uG7Oo=
Subject key identifier:   E2:77:5D:B7:89:34:8A:56:11:13:04:B1:33:34:55:1F:51:B1:D1:FA
Certificate issuer:       /CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
Certificate serial:       62B2741E08FA7219A771A97F05056AE0E93882EE
Authority key identifier: 76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa
Signing time:             Thu 14 Nov 2024 02:55:39 +0000
ROA not before:           Thu 14 Nov 2024 02:50:39 +0000
ROA not after:            Thu 13 Nov 2025 02:55:39 +0000
asID:                     267456
IP address blocks:        2804:41c8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl
                          rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b2:74:1e:08:fa:72:19:a7:71:a9:7f:05:05:6a:e0:e9:38:82:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E1848CDA572B37FCF5D9FC2F32072BAB9072B2
        Validity
            Not Before: Nov 14 02:50:39 2024 GMT
            Not After : Nov 13 02:55:39 2025 GMT
        Subject: CN=E2775DB789348A56111304B13334551F51B1D1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:fb:f0:fd:b9:b6:54:b0:96:8e:d6:45:b5:
                    d7:18:d0:81:73:cb:70:7a:34:06:c4:0e:95:ad:72:
                    54:e6:42:ca:84:93:de:68:64:e6:c5:11:36:d9:6f:
                    0d:06:0e:6c:f9:cd:09:e6:b6:d8:76:6c:c8:64:ac:
                    f4:fa:df:5d:e7:8e:c7:b1:31:20:5a:43:6e:01:3c:
                    f0:cd:fa:c6:da:30:33:9c:87:ee:5e:0f:b5:0f:7b:
                    6e:b8:46:74:a6:13:90:e5:fe:41:ee:b0:b7:fa:79:
                    3b:41:7f:01:44:02:e4:76:26:08:ce:50:a5:5b:88:
                    ea:a8:03:da:3d:56:47:6d:51:c9:42:eb:ad:cf:96:
                    7c:ef:20:db:49:6a:79:cf:5b:21:36:9e:b6:9d:17:
                    39:d5:51:1c:3a:30:df:b9:2b:26:92:54:0a:f5:6e:
                    8e:1b:f8:c8:62:6a:a1:0d:b7:3c:cc:36:14:30:18:
                    55:c3:69:90:91:91:fd:20:a0:36:90:b8:c5:63:04:
                    a0:c7:dc:35:fc:75:a9:3c:1f:13:85:69:72:d9:54:
                    cd:69:ab:b8:92:1c:b9:bd:40:b5:32:38:84:68:d6:
                    47:1b:c1:5e:89:d9:4e:6c:fe:11:a3:b2:20:58:d7:
                    e7:15:cd:21:b9:46:b7:f4:a9:28:94:86:0b:9d:aa:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:77:5D:B7:89:34:8A:56:11:13:04:B1:33:34:55:1F:51:B1:D1:FA
            X509v3 Authority Key Identifier:
                keyid:76:E1:84:8C:DA:57:2B:37:FC:F5:D9:FC:2F:32:07:2B:AB:90:72:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76E1848CDA572B37FCF5D9FC2F32072BAB9072B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a633030303a3a2f33342d3334203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         50:32:ac:b7:c9:e7:57:79:e6:75:48:aa:a9:50:b6:56:04:ed:
         89:98:6e:0b:c3:4b:55:d7:fd:ba:bf:2d:4c:9d:bd:f3:f9:cd:
         3c:02:29:57:ef:32:84:51:82:c5:0f:ad:17:e3:d3:7e:9b:5f:
         f7:46:b0:89:66:36:05:e7:ed:ec:6e:95:12:45:90:07:43:ad:
         4e:94:b5:88:13:eb:39:7c:e3:59:13:09:dd:cd:13:91:91:c5:
         51:14:77:72:7c:88:d3:e9:3f:c8:40:c8:94:97:b5:89:06:ad:
         53:bc:0b:24:71:9c:1d:c2:d2:02:83:75:76:40:fa:d3:7c:66:
         d3:cd:21:e2:0e:89:49:f6:89:fc:47:7d:03:8e:43:fb:bb:c3:
         f3:1e:b0:62:22:f2:df:5b:e4:1d:23:17:c7:75:d3:4a:ef:e5:
         fb:91:bd:b7:69:4f:8b:4a:58:24:23:b0:de:59:7e:9f:5b:da:
         87:61:8f:f8:a1:4c:ca:12:01:4c:76:10:8f:25:b7:6e:4e:c3:
         34:a7:71:c1:f4:72:ea:46:c0:bd:a0:25:83:12:a0:30:fe:64:
         9c:dc:da:ec:59:4e:79:3f:bc:02:02:ed:85:73:34:aa:c9:d2:
         2a:d6:0d:20:76:68:3d:43:65:0b:15:47:d0:fa:0f:fb:7f:f4:
         ed:92:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:01 2024 by rpki-client on console-fra.rpki-client.org