Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          VkXvcvOpyj+RyZs7Lih+qza1IIXz1Y8qwofdne1R4yU=
Subject key identifier:   84:27:5E:02:26:84:4A:29:D7:8F:D3:68:0A:14:FF:B3:C2:D7:A9:7E
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       1F0289C42B44FFC62CD6303F63433B12935ED623
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        2804:4afc:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:02:89:c4:2b:44:ff:c6:2c:d6:30:3f:63:43:3b:12:93:5e:d6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4f:66:01:2f:1e:e4:4a:a1:ed:e2:63:fc:5a:
                    62:3e:32:db:86:f0:ca:63:e0:65:95:e2:66:bc:85:
                    aa:af:33:ef:37:ab:ee:2e:e3:67:ea:a8:32:70:17:
                    cc:6d:f3:e7:67:b3:7d:fb:27:1e:ba:87:06:1b:dd:
                    7a:fa:1e:47:1b:01:53:b5:e1:6b:93:e9:3b:19:f5:
                    34:f4:3f:bd:fd:f5:9c:1a:b4:f7:6f:c9:16:97:59:
                    01:f5:47:bf:19:52:8a:eb:a5:f9:99:8b:54:6e:0d:
                    29:66:ee:5c:5f:18:5b:c9:e5:90:0c:79:a2:55:cd:
                    e4:97:df:cb:9a:7c:46:84:bc:fb:58:65:ad:56:2f:
                    3f:fc:e7:8c:90:75:2d:13:e6:29:8e:26:51:a5:26:
                    e5:5b:24:92:ec:83:e7:ab:8c:96:65:53:74:94:b5:
                    5d:7d:98:b7:d5:98:07:3a:bb:02:37:8c:54:ea:0d:
                    17:d3:ee:46:8c:75:49:2f:9c:b2:41:4b:3a:f6:0b:
                    06:06:76:85:40:df:a6:ce:aa:c1:93:ce:cb:5d:ac:
                    95:ed:d1:c2:4f:da:6c:91:ad:3a:bf:84:8d:d1:f2:
                    33:08:3f:65:6d:dd:3e:cb:a5:97:5e:42:9e:f2:b7:
                    04:86:35:5c:74:04:e2:3d:2e:52:a5:d6:b6:82:24:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:27:5E:02:26:84:4A:29:D7:8F:D3:68:0A:14:FF:B3:C2:D7:A9:7E
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a343030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         d3:08:55:8c:0e:4a:36:b4:67:b6:ff:65:92:9e:e4:85:bd:d9:
         97:89:9e:24:73:69:39:43:b0:4d:dd:8e:d4:60:c9:e1:92:ee:
         d3:a6:32:b3:a0:a4:f2:11:84:22:84:46:42:19:ef:67:b6:0c:
         32:dd:e2:43:4f:ca:ce:fb:0c:69:2c:6c:21:f0:99:5b:e3:a4:
         7c:e2:70:97:14:27:66:70:3b:1f:d5:97:45:c4:5a:89:9a:30:
         7c:48:f5:41:2e:1c:1a:35:f8:36:4e:72:22:71:15:f4:05:03:
         9f:9b:26:27:93:eb:42:e8:3c:4e:f9:56:0a:82:b9:ae:54:ca:
         fa:03:6e:09:62:be:28:9d:dc:d3:35:e1:7e:34:24:c5:24:7c:
         4f:d8:c8:4c:b1:76:97:37:ac:4f:39:45:75:47:ab:bc:2d:a3:
         22:c4:55:cf:d1:c1:64:e6:fb:e1:f5:da:f1:71:a5:3d:c7:55:
         35:35:ed:2f:a1:37:79:a6:9f:05:ac:4a:4c:a1:49:7e:d2:12:
         21:8b:a6:d3:ec:db:e1:ea:c6:53:2f:09:52:c5:02:00:33:5e:
         62:b8:32:e6:67:45:2a:ec:3e:28:e7:66:2c:dc:33:26:71:89:
         d2:91:b6:1f:0e:ec:9a:12:b9:dd:7c:2c:5c:26:95:e5:f1:eb:
         b2:52:8d:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 2 05:04:44 2025 by rpki-client