Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
File:                     323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa (raw, json)
Hash identifier:          TFJETKICpABVW0v4qPcXt+kSV07Acz6Mrq7ZJWXSMS4=
Subject key identifier:   9A:52:D0:BA:B2:6D:37:35:00:95:82:6A:25:D3:96:FE:CB:E0:8F:61
Certificate issuer:       /CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
Certificate serial:       4C3AF3DC5109D3819FE375D9B10F574E6591ACBB
Authority key identifier: 99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa
Signing time:             Thu 12 Sep 2024 15:11:12 +0000
ROA not before:           Thu 12 Sep 2024 15:06:12 +0000
ROA not after:            Thu 11 Sep 2025 15:11:12 +0000
asID:                     271478
IP address blocks:        2804:7c24:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl
                          rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3a:f3:dc:51:09:d3:81:9f:e3:75:d9:b1:0f:57:4e:65:91:ac:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996B4ACF19CC682F1B6E4549A9A3A004BC03137D
        Validity
            Not Before: Sep 12 15:06:12 2024 GMT
            Not After : Sep 11 15:11:12 2025 GMT
        Subject: CN=9A52D0BAB26D37350095826A25D396FECBE08F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:c8:64:00:3b:9b:17:96:d7:80:91:8b:fd:
                    5d:2d:03:c6:15:b3:c0:2a:cb:a1:c7:ba:2f:8c:dd:
                    5e:75:11:ed:da:c7:1b:9f:3d:92:ae:60:67:58:eb:
                    a3:1a:19:0b:c2:35:02:f0:a4:e1:d5:c6:ad:04:4c:
                    fd:2f:ed:43:3b:c1:e5:15:27:7f:2b:e0:34:71:d8:
                    91:f4:c5:ab:55:80:fc:ba:79:42:0c:d1:25:a8:1c:
                    db:03:cd:3e:a1:28:78:61:ab:3a:95:69:fe:1f:9d:
                    56:45:79:a7:1a:99:9c:1e:54:78:7b:e8:2b:f5:bd:
                    98:cf:60:a6:5e:02:0a:a8:05:90:13:e1:81:07:30:
                    51:5e:9b:b8:18:48:d3:60:82:83:ee:73:0f:23:83:
                    37:fc:83:fb:47:5e:ea:ac:a3:fd:aa:86:bd:4b:27:
                    84:41:03:03:5d:d7:15:5d:c8:24:97:65:88:a8:09:
                    f6:6d:a3:84:16:5a:e6:68:29:2b:4d:44:f5:d1:41:
                    e7:0c:67:0e:1b:49:e9:aa:73:28:9b:7e:c3:0b:ea:
                    d8:7e:f7:31:9f:96:63:dc:51:53:4d:0e:e8:a5:ae:
                    0d:76:21:93:4c:22:92:ea:50:af:09:37:0e:f5:84:
                    cb:68:c2:eb:22:63:6d:b4:aa:86:c7:e6:a0:8f:b4:
                    46:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:52:D0:BA:B2:6D:37:35:00:95:82:6A:25:D3:96:FE:CB:E0:8F:61
            X509v3 Authority Key Identifier:
                keyid:99:6B:4A:CF:19:CC:68:2F:1B:6E:45:49:A9:A3:A0:04:BC:03:13:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996B4ACF19CC682F1B6E4549A9A3A004BC03137D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/323830343a376332343a343030303a3a2f33342d3334203d3e20323731343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c24:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:dd:aa:69:b3:0d:ef:7d:d9:8d:e5:ff:17:8a:33:4e:58:24:
         c3:d2:80:1e:d2:e2:b1:23:aa:74:8f:0c:66:dc:0a:7a:95:13:
         95:f1:fb:75:51:60:fc:29:1d:c2:00:e9:0b:69:6b:0e:32:cb:
         bd:8d:09:e2:47:4a:1b:b7:39:70:16:ac:74:29:fa:dd:d2:40:
         a6:a9:98:51:68:f3:79:d4:00:ef:a0:fb:94:4d:41:0f:25:00:
         8d:f0:e0:6a:7e:b7:db:73:38:57:8c:a3:76:b7:32:23:ff:fe:
         6f:f6:d2:7a:ae:37:14:6d:25:4c:e1:0c:76:76:bc:73:c7:ce:
         0b:da:e7:c6:ca:c0:83:80:2a:67:40:ff:75:b7:d7:c0:85:69:
         c2:d1:1e:c5:81:51:d6:12:4a:19:8c:eb:6c:6c:86:87:a9:4b:
         a8:9d:32:2d:7d:65:b9:e0:b3:34:39:ed:cf:77:e5:1e:20:f5:
         76:48:e3:03:6b:f1:c3:85:fa:4b:3e:e9:75:aa:cb:0a:f1:f0:
         86:a4:2c:b2:e4:6d:64:ae:5b:e9:73:63:65:e6:c9:23:05:20:
         c2:fb:a5:9d:74:9c:29:f1:90:6d:c6:ab:f3:16:8f:41:a6:01:
         67:01:61:9a:e6:5b:a1:48:d2:fb:3f:cd:1c:e7:a4:ca:df:c6:
         0e:15:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:13 2024 by rpki-client on console-ams.rpki-client.org