Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/323830343a366539303a3a2f33322d3332203d3e20323730363035.roa
File:                     323830343a366539303a3a2f33322d3332203d3e20323730363035.roa (raw, json)
Hash identifier:          bDp6TmHUrJzR47fnJnUwFpPVhAxxliDsLco7F9A+bRo=
Subject key identifier:   0D:3A:8D:61:D7:4B:B8:93:94:08:68:49:51:AF:EA:9B:55:58:79:95
Certificate issuer:       /CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
Certificate serial:       7C434AFE40F601F99C17B140467F068E4F027229
Authority key identifier: 1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/323830343a366539303a3a2f33322d3332203d3e20323730363035.roa
Signing time:             Wed 14 Aug 2024 15:54:42 +0000
ROA not before:           Wed 14 Aug 2024 15:49:42 +0000
ROA not after:            Wed 13 Aug 2025 15:54:42 +0000
asID:                     270605
IP address blocks:        2804:6e90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl
                          rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:43:4a:fe:40:f6:01:f9:9c:17:b1:40:46:7f:06:8e:4f:02:72:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4067D9FC8880CD844526B4C8268B525C75BAEF
        Validity
            Not Before: Aug 14 15:49:42 2024 GMT
            Not After : Aug 13 15:54:42 2025 GMT
        Subject: CN=0D3A8D61D74BB8939408684951AFEA9B55587995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:b7:09:cf:f2:2d:6f:47:73:92:16:4c:ad:
                    4d:ab:1d:76:e0:41:81:00:14:b7:9a:10:59:25:44:
                    7a:98:f2:4a:c6:c2:81:1d:12:b1:7a:69:66:b3:c7:
                    14:0c:5f:91:ba:24:64:0c:c4:d6:51:90:41:37:3f:
                    17:a7:64:54:69:f7:a0:60:e4:8a:c6:e4:5b:d7:ba:
                    0b:22:5e:31:0a:e9:6a:6d:e5:4a:8f:29:99:f6:cf:
                    e4:6f:3c:9a:10:6a:65:b9:14:0d:b4:4d:7f:1b:e6:
                    98:97:04:3e:97:55:f9:e2:49:e3:1a:b5:8d:98:a9:
                    04:6e:fd:35:85:e2:4c:1d:30:d1:35:f2:c3:6f:4d:
                    30:49:c9:d6:33:1c:4b:6b:2f:01:bc:15:ef:fb:96:
                    72:2c:81:4c:af:1e:cb:64:87:74:25:cd:a7:34:70:
                    a1:49:d4:d6:54:52:37:b5:88:df:f2:1d:06:ad:7b:
                    29:06:08:d9:bd:16:32:ff:aa:c1:52:b7:4e:40:d8:
                    b5:5e:c0:88:81:52:2f:91:18:a3:4f:9b:42:43:64:
                    db:08:44:aa:28:55:6b:38:e4:86:06:e2:96:cd:e5:
                    f7:87:b4:e0:90:00:ec:5c:95:57:1b:9a:a3:4f:bd:
                    be:b4:17:4a:fe:35:aa:92:a7:6e:1a:5a:74:3a:c8:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:8D:61:D7:4B:B8:93:94:08:68:49:51:AF:EA:9B:55:58:79:95
            X509v3 Authority Key Identifier:
                keyid:1C:40:67:D9:FC:88:80:CD:84:45:26:B4:C8:26:8B:52:5C:75:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/1C4067D9FC8880CD844526B4C8268B525C75BAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4067D9FC8880CD844526B4C8268B525C75BAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EX9Ai4d7ZcnsBRZWQMshqjuMiM3dWQSrmK4NtLfrafDj/0/323830343a366539303a3a2f33322d3332203d3e20323730363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:79:5a:4e:89:0e:ef:87:04:75:b2:1a:05:24:5f:9c:95:0a:
         a2:ec:52:cd:17:4d:37:6c:e8:31:0a:b9:01:02:c5:3c:ed:7a:
         66:7a:a4:95:5f:4a:e8:31:82:f0:20:18:ea:5b:7f:69:74:bf:
         9e:8c:42:61:fa:58:2c:35:8e:3f:f3:bf:5c:02:f3:e6:45:b3:
         c0:f5:4d:ca:7a:a9:19:98:6d:e8:2f:1b:44:3c:0b:b4:57:ba:
         7a:92:41:f3:a3:e5:c7:57:c8:4e:fa:23:93:ae:ef:71:fc:b8:
         d9:39:7d:04:66:64:d2:a6:8e:21:db:20:b0:ec:a9:a8:06:d3:
         1e:0f:20:fb:58:b3:4e:05:72:4f:c4:4e:97:6e:cd:03:1c:63:
         bd:d2:65:95:fb:63:aa:62:ae:13:5a:55:2d:ca:68:94:13:f7:
         89:f3:f7:13:bf:5b:18:72:92:61:b6:26:82:dd:0b:b4:2d:1a:
         b3:4d:e3:22:a4:a5:31:d3:a3:4d:1d:e3:b1:18:2c:9d:dd:24:
         ab:e3:b9:d1:c5:cb:cd:7e:93:ad:c3:35:3d:4a:d0:76:49:7d:
         a1:d1:bf:20:68:95:98:8a:0f:e7:59:39:65:6d:41:eb:24:55:
         19:76:aa:20:61:c5:c4:5c:cb:65:77:6e:20:b2:0b:71:13:44:
         d3:71:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:42 2024 by rpki-client on console-ams.rpki-client.org