Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          wU+VUYfho/MGHvZpDtWDVMQuaDV/XLXDlevdh+/Ub7I=
Subject key identifier:   C7:CE:6C:7A:1B:E0:56:D3:94:2E:CB:91:E0:29:F0:89:B5:07:B4:11
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       685DDCF78713BF25F744DE339A9433F2A19880FD
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     61614
IP address blocks:        2804:4afc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:5d:dc:f7:87:13:bf:25:f7:44:de:33:9a:94:33:f2:a1:98:80:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:40:65:92:05:34:db:c6:18:cf:44:c7:1b:8f:
                    e9:ac:84:20:62:63:02:f8:08:34:d7:17:99:64:db:
                    92:f5:fd:8c:93:1f:f0:56:1d:72:fc:0c:32:d7:8e:
                    58:42:d8:da:23:c4:16:b2:16:89:c4:d0:d0:e3:ba:
                    12:58:ac:00:f3:4e:83:b2:92:17:44:85:ac:c1:85:
                    b3:db:f7:14:15:ff:64:51:e8:8a:52:03:f7:c7:d0:
                    c9:fa:a6:86:f1:9d:5e:5a:b2:d4:b3:b1:a2:89:39:
                    f4:da:c2:da:e3:1d:40:37:1f:e9:49:c9:b0:a0:64:
                    7f:10:b6:9d:9f:8f:06:3c:cc:28:9d:56:9a:6b:bb:
                    b5:3b:bf:99:24:f9:c2:63:91:78:5a:83:f1:d2:3a:
                    78:bb:22:24:c0:14:11:ab:ec:dd:85:ee:5f:f5:95:
                    cc:85:56:4c:9a:41:86:86:23:5f:0e:fe:7b:87:5b:
                    58:51:02:8f:82:a9:28:cf:41:98:d4:4c:2f:d0:da:
                    6a:95:17:b9:22:4d:a7:9d:a2:2c:6e:3d:99:bb:9a:
                    0d:bf:92:61:d1:a7:30:f1:4c:61:04:08:ae:05:73:
                    d0:a4:6e:af:5a:d9:9a:2b:2a:e6:36:82:9c:ff:06:
                    80:cf:81:93:90:ba:f2:83:eb:68:ba:c2:55:9a:9e:
                    a6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CE:6C:7A:1B:E0:56:D3:94:2E:CB:91:E0:29:F0:89:B5:07:B4:11
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:c1:44:ed:24:e1:c6:18:84:a8:91:09:84:1e:16:87:d0:cd:
         52:81:66:b3:0d:a6:3e:94:59:95:75:1e:03:14:e4:a7:87:0c:
         2d:98:56:88:3b:cc:02:ae:c7:9b:2e:85:8b:ac:8a:51:2d:c3:
         e2:48:7a:bb:4a:a1:0b:06:74:56:75:36:c7:e1:f5:0a:4a:84:
         26:f9:30:76:dc:40:f8:94:8e:87:c9:27:d2:83:64:8d:42:9e:
         a8:48:c6:54:31:bf:af:6a:74:ac:21:68:0a:a8:b5:2b:3f:09:
         dd:f5:70:45:44:f6:60:2b:9d:53:90:2c:34:09:d0:87:8e:64:
         f2:c0:5e:51:ae:d9:1d:d5:cd:03:4e:ba:25:32:64:0a:83:f2:
         de:aa:4d:8d:44:9b:eb:00:ab:64:81:f2:4c:59:19:b9:c1:82:
         55:a3:8c:1f:14:ef:40:92:fa:a0:ed:f2:b4:69:e4:a5:1b:68:
         d4:e1:7c:fe:04:ee:45:a5:ef:03:fe:57:fc:93:cc:25:10:e2:
         37:51:0a:50:80:51:12:6c:f0:df:2a:07:97:75:bf:49:8e:0f:
         f4:eb:56:94:ce:3c:72:0d:01:27:5a:17:9c:a4:e7:b0:fa:06:
         e0:d1:63:ae:9f:d2:e1:92:83:d4:8f:15:49:4b:6f:01:de:82:
         e7:d3:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:37:20 2025 by rpki-client