Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa
File:                     323830343a336632633a3a2f33322d313238203d3e20323636363434.roa (raw, json)
Hash identifier:          vomqrNhdOYP+32dXYORyDvn2HZPUeNKeNuXmNm1zOhs=
Subject key identifier:   A4:65:0B:13:DD:5D:95:DD:C9:98:89:03:09:61:AA:EE:9A:2C:E3:64
Certificate issuer:       /CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
Certificate serial:       02F49DCF6B674B80C31609D7A22601444F2CD54F
Authority key identifier: 96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa
Signing time:             Wed 02 Oct 2024 11:34:49 +0000
ROA not before:           Wed 02 Oct 2024 11:29:49 +0000
ROA not after:            Wed 01 Oct 2025 11:34:49 +0000
asID:                     266644
IP address blocks:        2804:3f2c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl
                          rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f4:9d:cf:6b:67:4b:80:c3:16:09:d7:a2:26:01:44:4f:2c:d5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96A685ACC1AE4D09C4B25F227F9800FD9278C982
        Validity
            Not Before: Oct  2 11:29:49 2024 GMT
            Not After : Oct  1 11:34:49 2025 GMT
        Subject: CN=A4650B13DD5D95DDC99889030961AAEE9A2CE364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:0e:6d:b3:48:df:1c:3d:73:b8:fe:6d:50:
                    14:fe:58:6b:e2:a7:72:c6:d1:34:8a:14:61:f8:e6:
                    eb:ce:be:9e:47:f2:1a:bc:4c:44:0e:a3:71:91:8d:
                    6b:f2:fc:08:2f:cf:86:e9:0b:58:fb:a1:f1:76:80:
                    26:bf:0e:57:00:2e:c8:38:32:65:c6:cf:17:fa:c2:
                    6c:5e:ec:8f:31:63:04:a2:12:d5:0c:5c:c5:63:d2:
                    12:3f:ab:ba:3d:01:1d:a4:2f:65:58:53:95:c5:93:
                    89:9d:0d:74:46:a5:52:c7:4b:f1:2b:84:76:e2:4b:
                    3c:62:1f:c8:67:44:e5:15:51:4f:fc:18:da:41:c7:
                    26:25:97:53:4a:6e:4c:d3:4c:0e:71:0c:20:8c:44:
                    4a:2e:d0:64:f4:98:41:71:e4:8a:2f:64:d9:ee:db:
                    9c:98:dd:c9:80:2e:f8:1c:76:a9:45:53:d1:fe:bc:
                    9a:ce:ef:65:fd:86:3a:42:8c:49:21:95:28:2d:4e:
                    64:ee:5c:1c:da:f4:4a:d8:ad:fc:bd:21:6b:e8:71:
                    75:d4:e8:29:aa:92:84:36:4b:86:20:94:a5:09:e5:
                    e6:0e:07:29:1f:06:b1:6b:ab:d2:fd:0d:a8:69:bc:
                    39:57:7e:81:76:e8:a6:e2:75:99:7a:f7:61:97:ea:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:65:0B:13:DD:5D:95:DD:C9:98:89:03:09:61:AA:EE:9A:2C:E3:64
            X509v3 Authority Key Identifier:
                keyid:96:A6:85:AC:C1:AE:4D:09:C4:B2:5F:22:7F:98:00:FD:92:78:C9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/96A685ACC1AE4D09C4B25F227F9800FD9278C982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A685ACC1AE4D09C4B25F227F9800FD9278C982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/323830343a336632633a3a2f33322d313238203d3e20323636363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:35:22:0c:51:de:5e:83:f5:12:e1:19:09:a1:73:de:28:
         24:10:79:c8:cb:ad:18:a0:47:d9:bc:01:5a:fd:44:3d:96:f5:
         cd:97:61:5a:67:f0:8f:6f:2a:ae:93:81:a6:44:bd:18:56:8a:
         93:3a:82:8f:d5:d2:4e:2a:44:ee:2a:c8:5f:19:03:2f:40:d1:
         bc:7c:06:1b:36:d0:86:65:78:cf:54:fd:f4:85:61:58:35:37:
         af:c4:66:4f:7f:21:23:da:e7:61:63:0a:7f:0b:a0:35:a7:98:
         c7:28:02:4d:c9:db:54:6a:70:ae:c8:f8:d1:52:e8:74:39:4c:
         4c:c1:d5:24:9a:81:10:43:61:f2:24:7a:b3:f3:e1:fa:14:62:
         b7:ad:23:f8:1c:fa:a8:d2:5f:3d:4b:e0:04:3b:bb:f7:3f:42:
         88:5c:95:e0:78:7c:33:97:13:5b:22:01:ed:23:e7:0d:1c:51:
         41:8a:91:ce:82:25:b0:4a:50:5f:17:4b:24:35:63:3d:c0:26:
         ff:75:89:6c:f3:71:e3:01:54:fb:9b:1d:53:70:b6:8a:25:87:
         bf:65:4e:5e:ee:9f:3d:cd:9a:7e:c6:1d:ab:44:20:f4:93:41:
         9d:b4:a1:df:f3:37:10:85:15:37:1c:96:74:75:94:89:17:2a:
         49:ac:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:48 2024 by rpki-client on console-fra.rpki-client.org