Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
File:                     323830343a343538383a3a2f33322d313238203d3e20323636393333.roa (raw, json)
Hash identifier:          PVPZ7WywoSUw+EsOA8JANERQeYR8T7z1NgLckf35ZXs=
Subject key identifier:   EC:E9:E2:B2:AC:A6:09:F6:41:63:49:69:B6:4D:AB:C7:6D:EF:7A:55
Certificate issuer:       /CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
Certificate serial:       0DDE249203C1F726BB851559B4E48BF0DA6DFD56
Authority key identifier: 9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa
Signing time:             Thu 11 Apr 2024 12:20:11 +0000
ROA not before:           Thu 11 Apr 2024 12:15:11 +0000
ROA not after:            Thu 10 Apr 2025 12:20:11 +0000
asID:                     266933
IP address blocks:        2804:4588::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl
                          rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:de:24:92:03:c1:f7:26:bb:85:15:59:b4:e4:8b:f0:da:6d:fd:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C2E73CC95F1D482A4D9A31AD876FAF4B2753016
        Validity
            Not Before: Apr 11 12:15:11 2024 GMT
            Not After : Apr 10 12:20:11 2025 GMT
        Subject: CN=ECE9E2B2ACA609F641634969B64DABC76DEF7A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:b4:14:9a:c6:58:32:71:d4:dc:48:8a:d8:
                    89:d4:2a:6b:07:c1:9b:64:e2:49:5b:44:b9:a7:16:
                    4b:c5:52:80:0e:63:19:db:bd:81:a4:51:8c:7c:41:
                    cb:b9:1f:bd:ca:4f:a9:0f:fa:92:bf:b9:f7:b6:03:
                    16:c5:0c:e7:6c:b2:8f:fc:5e:d4:ff:0d:de:93:ba:
                    44:ba:39:f7:27:c2:a7:d0:dd:4d:51:08:da:d0:28:
                    fc:6f:20:64:3b:57:6a:df:20:09:43:16:cf:49:82:
                    6c:23:28:b4:4b:dc:1e:25:96:94:b1:79:9c:58:6d:
                    50:c5:1a:a4:a2:da:9e:5c:57:a6:50:71:9e:3f:a6:
                    29:5e:df:18:dc:81:8e:5f:55:a0:4a:d4:76:f7:64:
                    2a:00:40:2a:52:72:c6:97:1f:eb:12:cd:ef:f8:35:
                    68:45:80:de:57:06:93:3c:88:01:6b:df:22:42:fa:
                    53:4d:c8:49:f8:bf:64:62:e1:53:09:10:df:95:28:
                    26:ec:d7:fe:cf:83:ae:bb:bc:f6:aa:65:57:33:4a:
                    91:cd:ad:7f:8e:83:47:58:18:a5:4f:8d:0f:b0:5a:
                    94:f8:81:18:cd:7e:46:8e:aa:b1:96:1c:1f:b1:8b:
                    83:58:93:a9:6a:5e:35:52:1f:ba:1f:bc:b6:1f:ba:
                    d8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E9:E2:B2:AC:A6:09:F6:41:63:49:69:B6:4D:AB:C7:6D:EF:7A:55
            X509v3 Authority Key Identifier:
                keyid:9C:2E:73:CC:95:F1:D4:82:A4:D9:A3:1A:D8:76:FA:F4:B2:75:30:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C2E73CC95F1D482A4D9A31AD876FAF4B2753016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9fvSw8R3fiuREoP2LjmD1HpEguzb3be4sFDzqsy8mo1/0/323830343a343538383a3a2f33322d313238203d3e20323636393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4588::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:b3:17:5d:71:97:4e:bc:a0:06:25:2b:9b:f3:5a:cc:2f:
         97:bf:be:80:cb:fe:6a:fb:22:9a:76:09:c2:be:d3:10:b4:a9:
         0f:fa:23:11:c4:a5:bb:bc:b6:f2:82:de:86:fc:23:a2:4a:73:
         19:c6:fe:ef:29:9e:fc:40:9a:94:47:6a:c0:b2:06:0b:e6:85:
         53:37:b5:ed:40:3b:77:4b:60:c3:9f:ba:5c:94:b0:24:28:3d:
         3d:57:36:9c:0b:c8:23:b1:ef:7d:29:b0:46:fb:b9:ea:51:06:
         13:49:d3:65:4b:21:98:4a:49:5e:8d:1f:53:c5:e2:cc:b3:2e:
         1b:94:d1:3c:b3:74:5e:29:6d:d8:e0:ae:3f:52:d6:75:2c:58:
         76:bc:cf:dc:4c:14:87:9d:3f:35:3d:bb:a4:70:f7:05:fe:11:
         fd:4b:de:1c:50:6d:d0:74:0a:6e:c0:b5:35:d1:9e:4c:03:12:
         e6:46:23:fe:88:5f:48:c2:23:03:61:cf:d2:dc:cf:f1:ab:f6:
         ea:ab:a1:6a:1a:7e:21:14:be:ae:35:81:3d:e7:5f:21:69:f9:
         51:e4:2c:2a:57:6b:99:dc:72:ce:67:ac:b6:70:72:c2:cb:49:
         e4:7f:f4:f6:00:b9:d5:8f:0e:6e:67:28:e5:62:5b:e0:70:f1:
         70:c9:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:25 2024 by rpki-client on console-ams.rpki-client.org