Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          WLxAN0m+QFBPtgNqr5GBX3rNccFJjY3H08pEbEk7EIw=
Subject key identifier:   57:C5:AA:16:EC:72:DA:63:66:61:2E:F3:D7:A8:A8:01:01:0D:F3:BD
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       53DD83B69B2858C7607556FC4B50D16003BF3BBA
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        2804:4afc:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dd:83:b6:9b:28:58:c7:60:75:56:fc:4b:50:d1:60:03:bf:3b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:04:c3:0c:1a:cb:80:85:d3:94:6f:20:7f:
                    c8:45:5e:b4:be:0c:bf:4e:34:79:8e:fd:7a:d0:5f:
                    59:d1:04:66:14:ad:50:16:bd:8b:97:2a:8c:d9:0b:
                    b2:be:8a:a0:98:a2:ac:ee:27:ad:00:4f:95:a7:6b:
                    6c:69:60:0b:f9:7e:e3:b5:ae:ea:51:af:4f:b3:d6:
                    ec:bb:26:97:b0:22:37:33:86:2c:30:8d:c2:50:15:
                    c4:7c:2c:47:7c:10:40:49:75:3d:3c:b9:82:f4:fe:
                    47:b4:de:3a:7e:3a:6c:9d:6b:8b:93:a2:06:f0:e7:
                    27:56:8d:8f:94:34:ea:ba:97:63:5b:f4:33:4d:16:
                    f9:11:63:02:22:c6:bc:4e:cb:73:d4:21:7e:2b:2e:
                    b6:3d:0f:fe:b2:4f:cd:8a:4f:6b:69:9f:37:f6:63:
                    42:9a:ce:0f:06:c6:8a:33:ca:8f:34:a5:bc:b2:fc:
                    00:83:70:27:78:93:c0:20:9f:46:ee:aa:cd:d4:f5:
                    c3:9b:7c:18:b0:54:87:2a:74:91:27:da:f7:4c:8d:
                    bb:3b:ce:5c:9a:21:d5:d8:c1:a1:62:11:e2:8b:c7:
                    bd:bf:95:ba:c3:32:77:74:01:44:a8:45:43:1c:6f:
                    29:e8:3e:d9:d3:04:4c:97:03:1f:4f:6d:0a:ac:99:
                    ad:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C5:AA:16:EC:72:DA:63:66:61:2E:F3:D7:A8:A8:01:01:0D:F3:BD
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a383030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         44:91:59:a4:2d:83:3a:af:0b:9e:84:32:b2:9f:df:92:10:92:
         f1:2f:87:f9:4d:6c:2a:b9:94:5b:86:38:b2:89:9c:e3:60:c7:
         3d:ae:2d:11:99:77:3b:56:6b:80:06:11:2a:87:dd:0e:46:dd:
         02:0c:f8:7c:8d:b3:28:1f:91:74:a8:20:1c:31:d2:8c:c1:bc:
         71:c2:1c:56:ef:36:6c:b2:10:0f:4e:50:78:5d:1c:d5:ee:0a:
         7f:61:bb:6c:a0:88:fe:61:20:5d:fc:fc:3a:97:d4:98:dd:0f:
         ba:a4:71:ac:b7:4a:ea:3a:38:9c:06:c8:90:42:f5:12:e1:ef:
         9b:99:26:ce:9d:d1:a7:7f:3d:79:e2:5c:72:81:32:c5:57:fc:
         fd:20:82:66:8c:5c:5e:3c:54:4b:61:21:7c:64:58:69:3d:2f:
         26:aa:d5:e9:7d:68:73:73:82:93:42:79:70:3a:98:e4:31:bd:
         44:95:df:40:c8:4b:e1:5f:5c:f9:26:bd:46:34:a1:de:e7:0e:
         05:81:9b:37:0a:f8:55:ce:f5:38:81:c4:b9:63:12:7e:5b:68:
         32:8d:d9:7c:3a:cb:42:68:8f:a7:a4:c7:42:d1:a6:3a:03:bc:
         1c:61:66:21:35:07:3b:a7:93:f0:ca:e1:d4:33:9f:52:0e:e8:
         d3:dc:1f:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:02 2024 by rpki-client on console-ams.rpki-client.org