Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
File:                     323830343a346166633a3a2f33322d3332203d3e203631363134.roa (raw, json)
Hash identifier:          ipmqMFBqcxOPbu1MUfivzAn2d5hL/SOA9Fq87TB4BFg=
Subject key identifier:   B2:20:48:82:56:BF:BD:AE:CD:9E:29:6F:BD:62:FC:30:0B:FF:85:1E
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       1E548816AD5D37C58971BC03F775B3D012373055
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        2804:4afc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:54:88:16:ad:5d:37:c5:89:71:bc:03:f7:75:b3:d0:12:37:30:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:f3:d5:c7:08:fb:29:24:c2:31:97:73:12:
                    f7:da:6e:8f:ec:ea:5d:f1:db:8f:42:01:5f:a9:af:
                    0a:c5:3e:37:d5:51:03:b6:37:a5:0f:48:84:60:3c:
                    f5:4e:5f:0e:97:d3:df:c3:6a:cf:33:a8:01:5a:2a:
                    61:40:a8:8f:83:73:ef:a6:71:0e:09:6f:26:23:2c:
                    9e:9c:64:fa:d5:de:ed:f7:f6:19:1b:42:7d:1f:7d:
                    0e:5d:85:37:58:cc:67:31:9f:d7:72:44:c9:25:7e:
                    cf:f2:78:68:4e:b5:b0:49:6c:e8:8a:0b:28:8a:23:
                    75:a7:a7:01:fe:f3:80:60:9f:f0:49:05:6f:9e:45:
                    78:b5:43:0d:68:7a:9e:5a:c3:1c:31:f0:bd:3a:c8:
                    ef:72:d9:57:38:36:ac:43:a5:d5:fd:51:ee:fe:e1:
                    bb:40:43:46:fc:ac:8d:86:b0:54:a9:2d:b1:41:44:
                    d4:8d:f5:5c:46:6e:4f:31:54:ab:d7:1f:ba:79:17:
                    91:25:bb:43:43:82:c9:41:4f:18:c1:fa:a3:f3:10:
                    a0:49:c5:a9:d3:2e:43:44:cf:9a:64:5c:ba:af:40:
                    9d:aa:ca:7b:95:78:59:7c:dc:61:69:2b:30:49:66:
                    95:79:65:b6:bb:99:c6:de:d2:06:0c:94:3e:7f:ee:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:20:48:82:56:BF:BD:AE:CD:9E:29:6F:BD:62:FC:30:0B:FF:85:1E
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33322d3332203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:cd:ff:02:b4:61:f8:8e:9b:6e:9c:a5:5f:ba:c3:73:40:43:
         27:a6:10:90:49:ba:2b:33:3d:f6:0a:c9:c6:3d:e3:32:4b:50:
         35:b8:b4:eb:8b:0d:ff:09:05:a5:c1:bf:5c:57:8e:00:65:f8:
         25:e6:6d:f6:87:fe:57:2d:6d:b1:c1:d2:66:f8:3f:ba:9e:82:
         2a:d0:10:96:e3:c2:09:75:7b:f1:bf:8d:13:90:b2:7d:b9:38:
         49:71:7f:1f:29:70:99:00:e8:9d:63:3d:79:06:e9:1b:39:cd:
         ca:0a:58:c0:b9:7b:a3:ab:c5:1d:40:6a:13:68:d4:0c:3a:7b:
         ed:c0:3e:3b:73:fc:e8:9c:46:cf:a0:c7:86:21:23:21:f7:30:
         45:04:75:de:47:5d:9f:2d:1a:53:aa:7d:f4:34:eb:62:ad:76:
         50:5b:be:0f:ed:85:09:a4:48:83:ec:25:28:42:68:d4:87:09:
         d6:27:84:94:46:e3:d2:2e:22:76:3b:f5:1d:6d:f3:be:de:8e:
         04:da:7d:62:4e:39:40:95:81:01:b3:94:3d:65:b0:1f:f6:d1:
         3a:15:d3:fc:0a:7c:6d:a9:91:4c:8f:35:1a:05:56:ec:69:a5:
         17:1b:88:84:85:12:fd:c1:67:d3:9c:02:28:4f:9c:25:2c:6c:
         d8:5d:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org