Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa
File:                     323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa (raw, json)
Hash identifier:          /LJNQZNY/0IDWXpsOfzH/XnySG8NHgNXNnNQU9d5gaw=
Subject key identifier:   93:49:F8:E9:30:24:D9:39:B3:55:4C:2D:9F:F9:C7:BC:D1:08:BD:19
Certificate issuer:       /CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
Certificate serial:       29E3F690AECFCF6FFD31D4860AC5B16AD278DF14
Authority key identifier: FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa
Signing time:             Fri 22 Nov 2024 21:13:16 +0000
ROA not before:           Fri 22 Nov 2024 21:08:16 +0000
ROA not after:            Fri 21 Nov 2025 21:13:16 +0000
asID:                     265949
IP address blocks:        2804:4048:4110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl
                          rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 06:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e3:f6:90:ae:cf:cf:6f:fd:31:d4:86:0a:c5:b1:6a:d2:78:df:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922
        Validity
            Not Before: Nov 22 21:08:16 2024 GMT
            Not After : Nov 21 21:13:16 2025 GMT
        Subject: CN=9349F8E93024D939B3554C2D9FF9C7BCD108BD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4e:dd:62:f1:16:87:c9:aa:a5:70:d3:f5:ea:
                    66:c1:bf:29:5a:d3:60:29:bb:ac:b7:ad:7d:fe:5d:
                    ca:a3:46:0a:d2:21:c8:f7:c6:00:a7:14:1b:ee:e6:
                    e8:7a:0c:cc:3e:6d:c4:84:2b:6b:c5:8e:ca:3a:23:
                    5d:b7:8d:0c:aa:49:ab:a3:e0:52:91:21:7e:04:f8:
                    69:81:69:d2:50:38:6e:1d:6a:2d:83:0a:3f:4d:bf:
                    83:20:a0:e4:93:9a:08:7a:ab:a9:9d:e4:ed:c2:ec:
                    44:cf:2f:8a:b0:27:6a:8b:8d:bc:3b:3e:b4:bc:61:
                    7f:9e:c4:6f:d0:c9:02:1e:82:7c:3f:6d:2c:13:8a:
                    4e:76:7d:41:51:d9:be:57:f4:af:79:58:be:97:9f:
                    d9:ad:af:ad:18:75:c8:89:50:10:64:3b:74:50:3a:
                    07:5b:66:7a:84:7f:00:db:ab:6c:10:26:32:8c:c4:
                    78:7f:ea:30:ba:ff:ea:ef:2f:92:70:80:c6:99:54:
                    a4:0b:53:ad:ab:a7:47:e5:3a:16:41:a7:34:2a:01:
                    9b:dd:8e:42:01:70:45:8a:ab:5d:7f:81:b6:e1:b2:
                    af:b9:31:be:0f:a3:52:dc:57:44:36:13:bf:e6:26:
                    de:59:2c:c1:25:ef:2d:6a:78:39:dd:a4:1f:7c:fd:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:F8:E9:30:24:D9:39:B3:55:4C:2D:9F:F9:C7:BC:D1:08:BD:19
            X509v3 Authority Key Identifier:
                keyid:FF:4A:CB:08:28:10:1F:FD:6F:91:BF:BC:FB:F0:5E:E9:8F:2F:99:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF4ACB0828101FFD6F91BFBCFBF05EE98F2F9922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a343131303a3a2f34342d3434203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4048:4110::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:58:d5:74:5f:9f:61:b7:1a:31:7f:7c:25:ac:2e:d8:35:b9:
         cc:60:31:63:cc:53:3d:55:43:f6:b3:51:6b:3b:e4:c3:c1:01:
         fd:53:63:1d:2d:8a:ec:93:e5:89:a2:e9:30:bc:1d:0b:d8:38:
         b5:7e:5b:04:81:49:58:8b:a3:f4:5e:6f:40:99:a0:af:38:e5:
         91:ef:2b:0d:bf:d6:e5:0c:f4:19:10:14:a8:e6:f6:f9:c7:65:
         09:f2:4f:ad:54:2c:de:67:4f:a8:8d:7d:be:c1:6f:e9:4b:15:
         2b:3d:9c:e7:72:4b:f8:47:eb:48:63:4c:00:04:ec:24:5e:8d:
         4f:b0:b5:33:54:92:99:c7:35:e5:21:d7:15:39:16:66:e2:9e:
         dd:d0:b1:19:e9:b6:12:7d:d1:4d:ae:95:20:bd:b9:7d:6b:f5:
         08:e9:19:f8:ba:b7:e3:6c:33:60:3b:ab:53:bd:24:e6:cf:72:
         af:77:33:b8:4c:ae:38:fc:e5:b3:70:eb:ab:24:7c:87:f2:63:
         da:13:69:7e:60:55:5e:64:0d:dd:b8:9d:1f:ba:f8:5a:9f:60:
         78:75:3c:89:57:3c:fa:74:4b:9a:ec:d9:38:54:3c:47:cf:87:
         2b:c3:80:b0:ef:fa:b1:a8:66:bd:3b:c0:a1:ac:dd:51:02:71:
         2e:63:8a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 07:37:23 2024 by rpki-client on console-ams.rpki-client.org