Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a633030303a3a2f33342d3334203d3e203631363134.roa
File:                     323830343a346166633a633030303a3a2f33342d3334203d3e203631363134.roa (raw, json)
Hash identifier:          ZtKR5Lakjfq7l5HaCDF9eKUZ0xBT5WEXsJiIq6/whkk=
Subject key identifier:   E7:71:05:45:B1:14:61:79:A5:E9:D5:19:38:59:AC:D0:04:18:38:01
Certificate issuer:       /CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
Certificate serial:       1850576FAFED43BE9B66553076C0793BFD87D0AF
Authority key identifier: A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a633030303a3a2f33342d3334203d3e203631363134.roa
Signing time:             Wed 03 Apr 2024 18:31:08 +0000
ROA not before:           Wed 03 Apr 2024 18:26:08 +0000
ROA not after:            Wed 02 Apr 2025 18:31:08 +0000
asID:                     61614
IP address blocks:        2804:4afc:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl
                          rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:50:57:6f:af:ed:43:be:9b:66:55:30:76:c0:79:3b:fd:87:d0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9E011B38B3A6810C10DE285FD8D256FABCEDBAF
        Validity
            Not Before: Apr  3 18:26:08 2024 GMT
            Not After : Apr  2 18:31:08 2025 GMT
        Subject: CN=3082010A0282010100B42B704FE33B732001A7FA3DBD0CB1DCB1E366E922237CC615B93BB602FE4EECBDE7FE0B0071DAD7FA25907362FBBADAF1ACCA4A5F15590560C1087A7A334D95CFB2262BCA03D366B27B6B5594AB1C57F871E64C52B7BED00F9A94575855EA74DA77F9B8BE094DF3D33BEEE6E3322BA41CB1B0B4AF2952460F61A31BDB2645CA8F33136CA6AB3689904121E1DC089D583DC51E604D484EDC625F8C4BD0CD084B69C78648F6E7DED8C933F5A459ACC5177978C67C6BE030AE9E83E72EBD5159971D1C160ADCA752C86FE1705736085A1BB258BCF8DF1635C3490DE4E5D014B2B51FD744DA1AAE7EA54325335E8C3393412FDF841BA10E83C91799C58BADFC76F50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:70:4f:e3:3b:73:20:01:a7:fa:3d:bd:0c:
                    b1:dc:b1:e3:66:e9:22:23:7c:c6:15:b9:3b:b6:02:
                    fe:4e:ec:bd:e7:fe:0b:00:71:da:d7:fa:25:90:73:
                    62:fb:ba:da:f1:ac:ca:4a:5f:15:59:05:60:c1:08:
                    7a:7a:33:4d:95:cf:b2:26:2b:ca:03:d3:66:b2:7b:
                    6b:55:94:ab:1c:57:f8:71:e6:4c:52:b7:be:d0:0f:
                    9a:94:57:58:55:ea:74:da:77:f9:b8:be:09:4d:f3:
                    d3:3b:ee:e6:e3:32:2b:a4:1c:b1:b0:b4:af:29:52:
                    46:0f:61:a3:1b:db:26:45:ca:8f:33:13:6c:a6:ab:
                    36:89:90:41:21:e1:dc:08:9d:58:3d:c5:1e:60:4d:
                    48:4e:dc:62:5f:8c:4b:d0:cd:08:4b:69:c7:86:48:
                    f6:e7:de:d8:c9:33:f5:a4:59:ac:c5:17:79:78:c6:
                    7c:6b:e0:30:ae:9e:83:e7:2e:bd:51:59:97:1d:1c:
                    16:0a:dc:a7:52:c8:6f:e1:70:57:36:08:5a:1b:b2:
                    58:bc:f8:df:16:35:c3:49:0d:e4:e5:d0:14:b2:b5:
                    1f:d7:44:da:1a:ae:7e:a5:43:25:33:5e:8c:33:93:
                    41:2f:df:84:1b:a1:0e:83:c9:17:99:c5:8b:ad:fc:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:05:45:B1:14:61:79:A5:E9:D5:19:38:59:AC:D0:04:18:38:01
            X509v3 Authority Key Identifier:
                keyid:A9:E0:11:B3:8B:3A:68:10:C1:0D:E2:85:FD:8D:25:6F:AB:CE:DB:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9E011B38B3A6810C10DE285FD8D256FABCEDBAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nh9ad2c6vSjaP5jTwTHQzCEvKvoWcx1Jz3ikHSSgayF/1/323830343a346166633a633030303a3a2f33342d3334203d3e203631363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4afc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ce:72:a7:1d:70:cb:d1:2c:f2:05:84:09:6d:66:bb:73:d1:80:
         5f:aa:8e:16:e7:2c:0d:5c:fd:f5:31:f8:90:70:b3:77:bb:0d:
         cb:f5:76:4b:48:18:24:b2:e8:ad:95:d3:77:fa:46:9c:6e:32:
         b3:ef:0f:9a:1b:37:cf:2f:11:f0:ad:88:0c:d2:84:71:63:fb:
         14:eb:ec:a9:e4:6f:b8:b7:15:bc:71:ce:3d:86:39:46:28:de:
         99:26:89:e7:34:85:a9:67:6f:4f:0a:c7:87:a8:21:05:55:fd:
         37:97:80:24:3d:b8:72:89:0f:ab:ea:1c:2b:6d:0d:82:40:e3:
         39:f6:30:61:ba:9c:6b:96:c2:22:99:2f:fb:3c:6a:2e:b5:aa:
         0c:b2:8a:31:4d:dd:50:57:6b:f3:29:57:fd:b9:92:e3:4c:b9:
         c7:9a:e9:eb:8e:20:28:63:28:29:17:cb:45:18:fc:8f:09:66:
         b6:f1:46:d2:a6:c8:7e:b8:c1:9a:59:b9:ef:ea:f8:6b:1b:9a:
         b6:44:fc:bc:91:d3:47:27:da:ed:23:d4:f8:eb:05:48:4c:bb:
         1a:f8:3d:90:cc:84:aa:be:61:a7:8d:a2:e8:7f:44:91:aa:26:
         0c:be:e7:cf:20:20:c4:36:1f:d0:02:c2:cf:8b:4e:e6:98:e8:
         06:c3:c2:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 28 19:42:02 2024 by rpki-client on console-fra.rpki-client.org