Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa
File:                     323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa (raw, json)
Hash identifier:          o/27aSLb/RQhTM8JFPQ2dav+dbK5J6IGTu9t5h62rIs=
Subject key identifier:   37:AE:90:B8:64:56:97:76:38:68:23:5F:14:4F:77:4D:89:85:2B:BF
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       25B5427FDA9E8CD2AEE06516C14C6DD9EAEB3B
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa
Signing time:             Thu 04 Apr 2024 04:15:08 +0000
ROA not before:           Thu 04 Apr 2024 04:10:08 +0000
ROA not after:            Thu 03 Apr 2025 04:15:08 +0000
asID:                     266448
IP address blocks:        2804:37fc:2100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:42:7f:da:9e:8c:d2:ae:e0:65:16:c1:4c:6d:d9:ea:eb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Apr  4 04:10:08 2024 GMT
            Not After : Apr  3 04:15:08 2025 GMT
        Subject: CN=37AE90B8645697763868235F144F774D89852BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:39:c9:6a:98:82:0e:a5:c4:ea:19:63:05:
                    09:ea:a7:36:fd:9e:69:fc:bd:df:17:69:28:db:36:
                    e3:1a:71:9b:ab:e1:fe:ae:38:95:96:ca:68:1b:a1:
                    99:74:5f:0b:75:b1:a0:7e:0e:95:b7:5f:93:b9:9f:
                    be:be:56:7d:d9:2c:73:3f:b5:9f:0b:fb:3c:12:43:
                    80:72:14:bd:21:6c:f7:dc:0f:82:08:7f:8b:89:77:
                    58:74:4b:57:8e:a8:50:08:74:39:a8:7a:92:d5:3b:
                    14:48:5c:f5:42:2c:d3:99:d0:3f:ce:04:c4:ef:16:
                    71:1a:bb:1f:a6:de:da:3b:27:e8:28:0f:e5:39:e6:
                    68:1e:7c:ef:39:09:f4:54:42:e1:6a:34:30:56:74:
                    89:f7:8c:31:86:15:b0:85:e7:d7:77:a3:c0:0f:4c:
                    59:51:1c:ed:04:f0:b2:f8:0d:32:9b:c5:b2:81:cc:
                    77:dc:84:e8:ab:02:18:7f:d6:be:8a:1a:b5:b2:cb:
                    7f:47:8b:a5:76:7a:4b:ba:1b:f8:11:40:61:99:52:
                    14:7e:19:d4:f1:4c:c0:fd:1d:26:44:26:6f:53:7d:
                    e4:dc:25:48:e3:20:83:9e:df:30:66:da:1e:7a:09:
                    e3:96:d6:f9:69:15:1e:25:3d:3c:8e:a4:e8:5c:c4:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:AE:90:B8:64:56:97:76:38:68:23:5F:14:4F:77:4D:89:85:2B:BF
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323130303a3a2f34302d3430203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37fc:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:a4:c2:8f:c5:f4:51:35:5e:55:8b:e1:f8:19:db:91:45:ab:
         25:0e:df:ec:99:12:e6:8b:d6:ab:ad:e8:6b:cf:4c:f6:aa:a8:
         99:af:ef:b7:5c:b2:42:d9:68:96:f3:cd:2d:0a:0a:f6:39:af:
         f7:cf:b6:4c:bb:14:80:78:db:1d:e0:14:62:49:86:1b:91:f5:
         0b:cc:6a:7b:2c:d2:15:c2:1e:b2:7a:99:11:02:98:a5:20:c0:
         be:13:7f:34:d5:dc:69:40:56:fc:66:9f:e6:7f:6a:b0:7f:59:
         32:7b:c3:20:bd:1d:9b:bc:77:ad:f9:51:b3:02:de:9b:be:d4:
         38:7b:c9:9f:10:14:48:41:59:c1:d4:e4:d8:6d:2d:fa:f4:60:
         00:74:9c:8f:02:0e:7e:78:35:dc:87:89:ae:b0:9c:21:e2:6c:
         f8:97:81:67:f3:04:8b:49:c1:75:1c:19:76:f3:68:ce:47:2c:
         7a:6d:9f:4f:ec:89:4a:e0:37:cb:7b:c4:fa:cb:b9:b1:d9:40:
         05:3d:79:42:84:77:a8:12:26:69:fb:c0:3c:88:b2:94:98:be:
         2a:f0:80:33:87:bc:a9:09:66:de:f0:f2:a4:09:7f:a5:94:8f:
         c7:11:bd:02:83:33:27:b1:85:b9:2f:f9:ca:6f:7c:49:38:1e:
         9c:51:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:22 2024 by rpki-client on console-fra.rpki-client.org