Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa
File:                     323830343a363831343a3a2f33322d3438203d3e20323639363638.roa (raw, json)
Hash identifier:          pQ+t1+osgxPP1TkNq58SzuwfgfLYLoNQt6WPfM0ibjk=
Subject key identifier:   36:89:78:16:D9:56:6F:C2:E0:94:47:C3:40:EA:2F:4B:5A:7A:6F:96
Certificate issuer:       /CN=9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF
Certificate serial:       6011CEDB96734A5D1C11DB92AC9E951AEA4B103E
Authority key identifier: 9E:30:3F:EF:2B:C6:F3:4D:7B:29:88:B8:06:A0:BE:AA:F0:7D:C1:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa
Signing time:             Tue 05 Nov 2024 13:50:29 +0000
ROA not before:           Tue 05 Nov 2024 13:45:29 +0000
ROA not after:            Tue 04 Nov 2025 13:50:29 +0000
asID:                     269668
IP address blocks:        2804:6814::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.crl
                          rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:11:ce:db:96:73:4a:5d:1c:11:db:92:ac:9e:95:1a:ea:4b:10:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF
        Validity
            Not Before: Nov  5 13:45:29 2024 GMT
            Not After : Nov  4 13:50:29 2025 GMT
        Subject: CN=36897816D9566FC2E09447C340EA2F4B5A7A6F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:00:9c:da:33:3f:bb:af:48:1a:5a:a7:31:
                    f4:99:02:3c:dc:05:65:b8:de:35:18:60:24:de:21:
                    40:e4:66:ca:6c:60:9f:f1:50:52:4f:33:4d:f3:52:
                    fc:8e:b4:21:81:ff:cb:db:87:17:79:80:b1:74:8d:
                    e0:59:5c:30:98:e2:b9:9b:b4:ce:c8:a4:ee:5e:69:
                    95:fb:56:01:56:a6:31:49:79:68:e9:67:c5:18:f0:
                    e9:37:0d:ad:86:e8:07:b0:be:6e:18:01:c5:c2:91:
                    4f:66:38:b3:02:c0:6c:f9:32:bd:d1:66:04:ef:76:
                    f1:74:ac:96:22:6a:1f:9f:8f:d4:4f:f4:8f:86:6f:
                    c3:82:38:1d:34:23:65:03:50:35:e1:30:f2:b8:3c:
                    2d:8b:dc:0a:8a:76:24:06:80:e2:60:ef:15:ff:b7:
                    d6:ad:99:ad:64:27:d1:7c:ee:e5:1b:d8:78:2f:f6:
                    70:65:b4:65:ae:1e:8b:18:73:5a:b8:9e:cd:8e:a4:
                    de:33:6a:bb:03:56:7f:73:3a:67:97:0f:b5:d2:c3:
                    08:12:16:1c:08:0a:75:87:17:86:66:db:24:83:ef:
                    2a:69:49:2c:cd:bc:29:76:21:89:fc:03:40:21:a8:
                    0a:56:81:df:47:0c:12:a9:65:29:8e:8a:51:ff:5a:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:89:78:16:D9:56:6F:C2:E0:94:47:C3:40:EA:2F:4B:5A:7A:6F:96
            X509v3 Authority Key Identifier:
                keyid:9E:30:3F:EF:2B:C6:F3:4D:7B:29:88:B8:06:A0:BE:AA:F0:7D:C1:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E303FEF2BC6F34D7B2988B806A0BEAAF07DC1FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ft8iia2we44ZUNaXP16s7VQ7bTCRuqUk4TnnR43hTsd8/0/323830343a363831343a3a2f33322d3438203d3e20323639363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6814::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:22:8a:0d:67:c2:ac:cc:1f:6b:24:00:8e:a6:14:ae:33:39:
         3e:a3:3d:14:19:9e:cf:8f:7f:60:b6:a3:38:20:0f:fe:fe:46:
         9b:d6:a4:ad:71:94:66:d1:e8:d6:8b:8b:5f:8a:b2:72:95:a2:
         d3:61:e8:0f:6e:16:67:45:c1:6d:30:dd:d7:18:e4:cd:b3:29:
         26:24:55:9a:91:92:3c:5f:ef:85:32:2e:16:e2:8c:6f:eb:9e:
         aa:65:12:2c:a5:a9:c2:ba:1d:f3:a5:f3:60:5d:2c:b5:d2:ee:
         96:06:da:f9:7f:5c:be:33:f4:fa:45:b0:6b:26:91:55:4d:d1:
         21:fe:d9:5f:1d:01:0d:f5:c7:f4:3b:a6:58:05:e0:69:21:a6:
         b7:02:3a:f4:39:57:14:e6:93:c5:37:a4:cb:d6:95:74:f8:7d:
         58:78:54:18:23:02:b9:8c:3c:a4:98:fa:74:bc:73:25:08:b9:
         2e:45:ea:3d:41:9a:fa:cc:6e:a9:11:65:0a:a9:3c:67:a6:fb:
         95:a4:51:f9:5f:08:7e:06:e1:4b:d9:6b:35:f4:04:dd:87:98:
         89:df:69:23:96:30:24:72:ae:34:53:d3:fc:42:cb:7f:03:f2:
         e1:b8:74:bc:49:26:d0:3d:0e:ef:f4:61:a4:10:5c:e8:32:7a:
         58:86:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:15 2024 by rpki-client on console-ams.rpki-client.org