Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
File:                     323830343a3931383a3a2f33322d3438203d3e203238353834.roa (raw, json)
Hash identifier:          I4/oNYXR06fh49xxBRdXLqwKyXAUfRr0y5o5ccsRbWk=
Subject key identifier:   90:56:BE:24:37:E8:2A:5A:F5:0B:0B:35:F8:0A:9A:0A:9D:FC:BC:5D
Certificate issuer:       /CN=31A0D65979DD9912F3B220BB4A873ED35729257C
Certificate serial:       1F05AFE70E73632DEAB0687451A102A363681C0A
Authority key identifier: 31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
Signing time:             Sun 15 Sep 2024 21:57:11 +0000
ROA not before:           Sun 15 Sep 2024 21:52:11 +0000
ROA not after:            Sun 14 Sep 2025 21:57:11 +0000
asID:                     28584
IP address blocks:        2804:918::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl
                          rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 01:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:05:af:e7:0e:73:63:2d:ea:b0:68:74:51:a1:02:a3:63:68:1c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31A0D65979DD9912F3B220BB4A873ED35729257C
        Validity
            Not Before: Sep 15 21:52:11 2024 GMT
            Not After : Sep 14 21:57:11 2025 GMT
        Subject: CN=9056BE2437E82A5AF50B0B35F80A9A0A9DFCBC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b3:34:00:5b:a7:0e:da:fe:f6:b3:c7:e8:04:
                    ea:bf:93:d8:af:60:4b:3b:dc:68:a1:18:27:66:c5:
                    c2:04:ac:2d:96:19:46:7e:ba:0a:86:4d:76:79:23:
                    5b:02:34:9e:c3:23:bc:ad:cb:bf:6a:fa:0c:a1:74:
                    07:d9:14:ab:d3:e4:bb:cc:e5:f0:a0:9d:5b:c4:e0:
                    38:a6:07:3c:99:be:56:a7:d2:4f:3f:b5:ec:bb:cd:
                    e5:7e:05:47:cb:25:7d:08:8a:2c:5f:1f:8c:84:45:
                    01:5f:fe:95:d7:90:d4:07:99:21:8b:b8:41:9a:14:
                    d9:9c:1b:0c:08:ee:63:67:ea:eb:ce:1b:f0:e0:72:
                    35:ef:17:54:cc:d1:b4:74:15:2f:17:f5:00:5b:5b:
                    03:42:6e:d2:7e:cc:b8:50:46:ca:f2:1f:c1:a7:ba:
                    c0:3e:63:c0:88:eb:d7:b3:b7:c3:51:c9:b4:0b:e6:
                    8a:6b:7b:e1:f4:9c:1d:68:e7:24:d5:79:37:91:80:
                    ae:c9:35:90:c7:af:ef:02:f1:1e:40:e6:51:b7:f7:
                    00:a8:94:52:9c:20:4b:57:60:01:fb:99:16:bf:ae:
                    63:05:83:42:0f:37:e2:be:b2:31:ad:ea:0b:94:38:
                    04:15:5f:25:6e:87:94:75:39:fd:ba:96:3c:e0:05:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:56:BE:24:37:E8:2A:5A:F5:0B:0B:35:F8:0A:9A:0A:9D:FC:BC:5D
            X509v3 Authority Key Identifier:
                keyid:31:A0:D6:59:79:DD:99:12:F3:B2:20:BB:4A:87:3E:D3:57:29:25:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/31A0D65979DD9912F3B220BB4A873ED35729257C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31A0D65979DD9912F3B220BB4A873ED35729257C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/1/323830343a3931383a3a2f33322d3438203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:918::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:47:90:cd:71:3f:18:d0:02:53:ce:23:76:85:33:57:e0:
         f7:74:c3:8a:82:9f:89:27:de:17:dc:52:62:0c:6e:53:45:d6:
         b3:ca:59:a0:d4:bd:9d:cb:9a:4b:99:24:22:16:d0:2d:35:4e:
         8a:1c:a4:e4:91:00:8b:84:14:42:8b:2c:98:72:3c:68:67:8a:
         2a:bf:45:13:6a:39:7f:40:1a:05:35:a9:b0:42:da:20:8a:1c:
         d0:22:16:9f:5a:ad:75:ff:42:6a:09:7f:9e:19:db:25:96:4f:
         68:27:08:48:75:c3:5c:c4:e4:92:2b:13:da:71:77:ab:ad:c7:
         55:2f:1f:1e:ba:46:02:7b:fe:5f:7e:73:8a:49:35:b8:8d:ce:
         87:90:1e:67:91:13:49:8a:8f:17:f8:d9:83:dd:c2:a3:cd:a9:
         13:dc:9d:42:83:67:55:bb:c4:8f:cd:42:14:ab:6f:68:b5:54:
         b5:19:1f:ca:93:07:8b:1b:e4:21:64:8e:34:43:f1:58:4d:63:
         9e:8b:41:92:17:04:97:9b:ab:aa:9d:23:e7:58:53:c8:97:81:
         f6:3f:4e:1c:2f:21:d2:00:9e:e7:2f:4c:de:48:8e:39:36:92:
         6c:4b:bc:45:1b:51:e5:cf:9a:28:d8:ea:72:51:dd:80:86:f8:
         b3:ef:7f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:44 2024 by rpki-client on console-fra.rpki-client.org