Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa
File:                     323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa (raw, json)
Hash identifier:          zW1xCtJa5QCLgMyo6nJWymabeEMwLqJXph2CLwyCn+A=
Subject key identifier:   0D:CC:63:69:DF:D4:99:24:52:F2:BE:85:9B:A3:35:0D:06:46:E8:ED
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       71430051312CE81CDA6C94354D33D41295B29275
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa
Signing time:             Fri 22 Nov 2024 21:13:16 +0000
ROA not before:           Fri 22 Nov 2024 21:08:16 +0000
ROA not after:            Fri 21 Nov 2025 21:13:16 +0000
asID:                     265949
IP address blocks:        2804:4048:4100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 14:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:43:00:51:31:2c:e8:1c:da:6c:94:35:4d:33:d4:12:95:b2:92:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Nov 22 21:08:16 2024 GMT
            Not After : Nov 21 21:13:16 2025 GMT
        Subject: CN=0DCC6369DFD4992452F2BE859BA3350D0646E8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:26:2b:5c:5f:99:6c:2b:3b:3e:7e:21:17:8a:
                    62:f4:03:21:e5:e0:8f:0e:91:4d:b6:a3:0b:6b:48:
                    ad:c7:73:9f:6e:30:40:e8:65:a3:00:2e:74:f3:22:
                    44:1a:b0:f1:0b:56:27:63:66:07:87:97:92:fb:9f:
                    eb:7e:8c:5a:f8:45:b5:33:a6:ef:80:e1:f4:ed:29:
                    55:fc:a1:a4:bf:ff:76:37:a0:fd:3a:2c:f1:c8:29:
                    0f:d1:2b:13:87:f4:a3:47:11:cf:37:43:6a:ab:f0:
                    d1:3d:a4:4e:83:9f:f3:2e:66:55:1f:55:cf:5f:38:
                    e3:0f:08:95:bd:58:6d:96:cf:03:32:a1:70:33:e8:
                    38:92:d4:50:3a:d5:7f:34:84:58:1c:f7:2c:2e:55:
                    37:a5:c9:55:28:94:33:8e:b7:86:3d:6c:82:dc:72:
                    6f:24:f4:4b:5b:55:91:ea:90:7e:4f:aa:4f:72:77:
                    18:ae:f7:37:95:fd:ae:c2:78:d2:56:47:a5:46:86:
                    55:d8:08:fa:b5:7c:e8:1c:09:68:96:57:5a:47:84:
                    e0:b8:fd:f2:9b:1d:20:13:0e:b0:78:d2:55:ed:c8:
                    14:78:3d:f0:74:a9:61:a2:3e:2e:62:f6:2d:86:d0:
                    d2:f8:09:5d:0a:3d:71:81:59:77:87:c2:45:78:56:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CC:63:69:DF:D4:99:24:52:F2:BE:85:9B:A3:35:0D:06:46:E8:ED
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343130303a3a2f34342d3434203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4048:4100::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:61:72:bb:c2:fe:8a:e4:3e:a4:b2:83:c3:3f:99:48:df:00:
         f1:a6:06:51:05:f6:9e:dc:33:cd:0c:90:0a:1e:19:fa:cb:b7:
         34:2a:cb:b3:55:33:79:fc:fb:42:2a:ac:11:25:eb:8c:c6:8e:
         b4:c3:05:8c:70:02:7d:60:c9:c0:b0:92:1f:9c:2f:5d:45:e4:
         e4:c2:2d:4a:0b:f7:48:f4:cb:b7:52:fa:82:90:ed:92:87:fa:
         93:d4:5d:7f:8c:14:31:5a:50:6f:d2:e1:53:b2:3e:0a:cd:cf:
         6f:b8:6e:7f:50:42:7d:87:5e:9c:17:ff:30:44:d7:73:84:3f:
         2a:f3:88:bd:f7:51:63:82:1f:5d:83:7b:27:e7:69:b3:a5:47:
         a0:21:76:97:2b:a0:5d:b1:b3:8a:c2:d4:1c:8b:11:1b:d1:b5:
         02:14:98:dc:2d:48:f6:d4:04:98:4c:4d:0b:2c:12:8b:6d:e1:
         37:81:9d:af:1a:41:86:b1:e0:03:77:7b:be:e8:a4:04:8d:7a:
         95:ff:79:db:c5:50:98:2a:e0:e3:77:ec:71:31:92:d8:b9:40:
         ff:e4:b6:3e:99:50:88:b8:7b:f7:31:b6:56:ff:d7:2b:93:43:
         32:64:89:e3:79:f0:c7:25:68:45:20:69:2c:72:02:f6:ee:b4:
         73:2e:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 16:32:33 2024 by rpki-client on console-ams.rpki-client.org