Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a633030303a3a2f33342d3334203d3e20323638303333.roa
File:                     323830343a353666303a633030303a3a2f33342d3334203d3e20323638303333.roa (raw, json)
Hash identifier:          rVyYkznlIakmSRxsPbWZvy+am3ZMVzDt6rxynFccEz8=
Subject key identifier:   C9:E1:E6:A6:E4:85:DC:75:5A:2C:06:AA:F4:B3:29:E8:DF:7F:20:F6
Certificate issuer:       /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial:       2CE5B0E230A6D53B6FC1C6248A6E36091462D720
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a633030303a3a2f33342d3334203d3e20323638303333.roa
Signing time:             Thu 31 Oct 2024 14:03:05 +0000
ROA not before:           Thu 31 Oct 2024 13:58:05 +0000
ROA not after:            Thu 30 Oct 2025 14:03:05 +0000
asID:                     268033
IP address blocks:        2804:56f0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
                          rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:b0:e2:30:a6:d5:3b:6f:c1:c6:24:8a:6e:36:09:14:62:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
        Validity
            Not Before: Oct 31 13:58:05 2024 GMT
            Not After : Oct 30 14:03:05 2025 GMT
        Subject: CN=C9E1E6A6E485DC755A2C06AAF4B329E8DF7F20F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:91:d1:b9:39:46:3a:0f:81:a4:85:b1:99:ec:
                    c9:b5:68:41:c4:cb:42:1b:5c:bf:11:9c:8b:99:0e:
                    c7:26:3f:09:06:d1:45:96:2d:1e:91:7d:90:48:2b:
                    26:ea:91:91:30:07:10:5e:31:0a:bd:e9:07:c0:8b:
                    ef:fd:66:5f:53:9d:57:d6:1e:29:9f:0c:1c:4b:c2:
                    63:48:ea:ab:f4:78:75:4d:6d:54:3d:09:0b:a8:e6:
                    80:42:07:31:a0:bf:70:21:a2:76:e1:a6:f1:87:3f:
                    ab:a3:76:b8:5c:3a:b8:7a:e7:4b:20:1c:1a:e7:3e:
                    c3:9d:f2:63:fb:55:68:e8:c2:27:2b:97:97:bc:c1:
                    54:23:1d:47:0f:8d:42:b3:b8:cf:1d:18:f5:86:25:
                    e6:14:c4:4e:a1:3d:52:e8:b1:4d:99:54:7a:4c:36:
                    7f:46:59:73:64:b5:f7:6f:58:e1:b9:98:06:a2:77:
                    43:ec:ca:47:ca:fd:23:71:86:c2:c6:72:d7:48:60:
                    82:80:3e:45:8d:f3:e7:40:90:57:41:d8:f6:3e:5b:
                    8b:2a:a0:52:77:ce:40:af:0d:21:88:50:16:44:c3:
                    e0:a3:e9:71:59:15:00:25:cb:4f:0b:8c:03:ca:da:
                    b5:cd:87:cf:e5:07:51:80:80:35:88:37:ad:99:6e:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:E6:A6:E4:85:DC:75:5A:2C:06:AA:F4:B3:29:E8:DF:7F:20:F6
            X509v3 Authority Key Identifier:
                keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/323830343a353666303a633030303a3a2f33342d3334203d3e20323638303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:d9:67:94:40:58:cb:ae:e5:39:02:f7:71:d4:a5:a6:e9:11:
         e0:4d:94:d8:cd:19:c1:7b:09:59:7b:3f:fb:4c:4d:99:6c:9c:
         36:88:d1:f3:8d:51:56:1e:fe:ff:c7:9a:68:15:96:0b:1e:25:
         98:68:30:cd:bd:5a:fb:1f:47:00:2f:13:2b:7b:2c:71:1b:19:
         4e:6d:b4:57:ec:71:08:d6:75:31:03:a0:45:96:9e:ad:eb:85:
         68:62:23:8b:27:cd:6d:96:e2:81:27:26:82:c1:1f:42:ff:da:
         f2:4e:e4:ea:5e:8a:b3:ca:64:c5:38:21:cd:e1:f2:52:cb:8c:
         90:77:2f:c4:cd:28:eb:a0:2f:48:a1:69:85:4c:77:27:10:5d:
         69:9a:9a:a8:e9:14:ef:9b:d0:54:78:82:61:1b:0e:12:36:a3:
         ff:e5:64:92:a3:92:46:ec:a7:fb:c2:19:b7:12:ef:9c:43:49:
         ea:83:b4:2e:b2:56:9f:ab:3f:ce:65:9f:9e:a1:89:8f:5a:38:
         5d:9e:ee:c4:27:72:23:26:0f:29:4c:3e:29:b4:ea:b1:b1:9f:
         11:23:89:62:c4:74:bc:f8:24:bf:04:0b:9b:c6:fb:a7:6a:86:
         5c:67:d0:30:98:29:2f:64:92:9c:5f:7c:3c:c0:96:93:2d:39:
         37:f1:2d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org