Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
File:                     323830343a346166633a3a2f33332d3333203d3e203631363134.roa (raw, json)
Hash identifier:          LwqCHvSwKpzVIWZWtfV1aarHNlCSwFFvmtU5ON4bEJ8=
Subject key identifier:   0B:E6:6E:7B:12:6C:3F:F8:28:CB:40:E9:8B:50:62:02:96:81:F3:8A
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       453C79DC9161C9C955B2978DBC5DAC01EF0CB1A3
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     61614
IP address blocks:        2804:4afc::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3c:79:dc:91:61:c9:c9:55:b2:97:8d:bc:5d:ac:01:ef:0c:b1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:04:f8:b2:89:6c:63:31:3f:06:68:ac:ab:fe:
                    c1:6a:e1:86:2d:80:00:2d:f2:b6:27:3d:88:59:02:
                    78:69:e8:c0:32:93:c6:4a:ce:f8:ae:80:25:e4:3c:
                    8d:b6:6e:26:e1:d4:87:9a:bd:38:ce:c6:43:46:a2:
                    a6:35:2a:a3:6c:22:cc:5f:47:be:c9:4b:2a:a7:2e:
                    f1:eb:06:e2:22:e2:49:5d:c6:7e:53:d1:f2:ff:0c:
                    b5:8d:3c:a7:8c:20:3f:2f:56:38:49:3c:88:cf:f4:
                    8e:a7:82:41:c8:04:94:2e:b1:62:35:bf:75:af:a2:
                    c0:6b:6e:24:28:76:e3:b2:1e:20:d6:9c:b7:87:1f:
                    39:28:c0:52:be:22:c0:37:b1:3b:e1:10:d5:57:29:
                    ea:60:92:01:c4:fa:fd:eb:b3:47:03:65:e8:cf:c8:
                    74:37:5a:cd:bb:2c:67:73:20:e9:af:3a:05:a3:09:
                    c8:6b:be:cf:6e:41:bc:ae:7e:8e:0b:d5:54:f2:5e:
                    9b:10:91:37:61:8b:64:91:a2:f2:6b:0d:c0:80:aa:
                    46:56:cc:5b:5e:92:46:8b:1c:6e:32:8b:ff:88:97:
                    61:a5:8d:94:c5:11:12:67:e5:40:ad:8b:08:24:77:
                    65:e9:d1:75:f0:fa:d4:9f:6a:a6:8c:cb:12:e6:73:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E6:6E:7B:12:6C:3F:F8:28:CB:40:E9:8B:50:62:02:96:81:F3:8A
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a3a2f33332d3333203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc::/33

    Signature Algorithm: sha256WithRSAEncryption
         af:ff:35:7f:a9:a3:25:ba:1f:5e:89:b1:3a:2b:4b:0e:f3:e2:
         fc:7a:51:b1:79:2c:3b:67:73:c0:6e:68:b4:68:47:ba:c6:9f:
         0d:61:0a:dc:f8:d0:30:6d:26:04:09:66:89:33:36:7c:8c:5a:
         95:56:87:c0:48:86:49:e4:95:8c:11:6a:45:50:15:de:8c:ec:
         2b:1f:36:ea:d8:9e:57:9d:55:37:00:14:80:c4:cb:d0:2a:8f:
         ce:70:7d:38:ad:b1:db:d7:6f:5b:ac:65:e3:9c:1c:8f:38:20:
         d8:72:6a:6c:6a:f0:76:93:67:5f:5f:ca:72:5b:1e:e7:fc:78:
         7e:eb:6c:90:f2:c6:72:96:e5:af:c6:6e:65:99:77:07:43:f6:
         5b:a3:2b:30:53:5c:b7:4a:ca:85:73:a9:07:90:61:5e:71:54:
         8d:47:69:07:f6:5d:ce:29:e6:88:21:00:a5:7d:21:33:58:e4:
         61:08:f2:c3:19:fe:4a:9f:b1:c4:8e:cb:39:03:4a:4d:51:c8:
         7b:5a:cd:18:d5:04:6a:c9:81:0c:1c:9e:c2:00:60:07:74:4d:
         04:a3:49:be:62:c1:68:3d:d0:9d:4b:b9:8f:f6:3d:78:17:c4:
         54:1f:2a:24:6e:c9:68:16:d0:e4:ac:26:f1:f3:fe:1b:e8:18:
         f5:18:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 22:39:31 2024 by rpki-client on console-fra.rpki-client.org