Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa
File:                     323830343a343134633a3a2f33322d3438203d3e203238323034.roa (raw, json)
Hash identifier:          Y+DgAcjFJov2MwOMcTCBVD+DlxL8/JhlfjtG6/6PAho=
Subject key identifier:   34:DB:96:92:B2:39:FF:F1:AF:D2:16:B9:1C:8B:0B:35:39:0D:EB:56
Certificate issuer:       /CN=A99D272225729B303C95F28914878741C6AE29BE
Certificate serial:       68AFC9FE70CAE094B2181EEE2911B70081422B41
Authority key identifier: A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa
Signing time:             Wed 05 Jun 2024 19:06:09 +0000
ROA not before:           Wed 05 Jun 2024 19:01:09 +0000
ROA not after:            Wed 04 Jun 2025 19:06:09 +0000
asID:                     28204
IP address blocks:        2804:414c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl
                          rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 17:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:af:c9:fe:70:ca:e0:94:b2:18:1e:ee:29:11:b7:00:81:42:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A99D272225729B303C95F28914878741C6AE29BE
        Validity
            Not Before: Jun  5 19:01:09 2024 GMT
            Not After : Jun  4 19:06:09 2025 GMT
        Subject: CN=34DB9692B239FFF1AFD216B91C8B0B35390DEB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:6a:aa:e7:4f:99:48:06:38:2a:5a:30:7c:
                    59:ba:4d:d3:bb:16:21:99:30:fc:1d:60:e9:cf:0e:
                    05:4b:2f:d5:40:59:08:58:92:25:5f:d0:39:cf:f8:
                    f4:ec:ed:4b:cd:d7:a2:38:d8:02:2b:84:c5:40:b9:
                    80:a6:f3:ab:64:89:72:4e:6f:b3:b4:30:fa:ec:34:
                    71:50:d4:35:24:49:6f:b6:6e:9a:fa:4c:41:ac:01:
                    a8:bb:8d:d6:61:28:66:ee:88:36:ba:80:71:b4:a3:
                    9b:41:79:6e:bc:b0:16:65:2b:fb:a8:ac:e7:96:1e:
                    24:97:ac:a1:54:37:f4:a2:60:73:76:0a:d7:fe:fa:
                    9e:1e:79:c6:9e:e0:a2:04:08:4e:bb:1d:35:f3:4c:
                    c5:69:ac:73:63:da:bc:5b:c3:2c:c2:5c:d4:95:cf:
                    00:4e:ec:47:9a:e6:f9:df:82:65:47:c9:56:38:3f:
                    2a:6b:5a:4d:86:c3:7f:00:f7:d4:f0:15:66:94:aa:
                    b2:25:76:61:16:52:24:2f:d6:dc:94:e6:0d:62:a1:
                    ac:16:2b:54:97:11:0f:4c:ff:9a:ef:ad:5b:cb:d9:
                    80:8a:12:13:ff:ee:d9:76:aa:e1:c6:40:69:88:82:
                    5d:46:bb:f5:2f:ee:e8:8c:30:b2:ba:8a:d4:77:6c:
                    93:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DB:96:92:B2:39:FF:F1:AF:D2:16:B9:1C:8B:0B:35:39:0D:EB:56
            X509v3 Authority Key Identifier:
                keyid:A9:9D:27:22:25:72:9B:30:3C:95:F2:89:14:87:87:41:C6:AE:29:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/A99D272225729B303C95F28914878741C6AE29BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A99D272225729B303C95F28914878741C6AE29BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCkhwyTNHwLB1YLniMfMN8tRak6TQLY3kt6JpWDPMFh/0/323830343a343134633a3a2f33322d3438203d3e203238323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:414c::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:28:b2:f0:26:f0:08:48:39:3b:54:42:bb:50:d5:13:55:
         52:16:23:99:da:ad:d4:55:57:ff:39:23:0f:2c:a4:a3:2f:3f:
         24:7b:6e:53:5b:f1:f2:2d:f6:a4:aa:51:b3:ae:d5:cc:b7:d5:
         28:8d:43:c7:a5:ba:fe:24:dd:6b:b7:b2:02:e6:33:c3:f7:3d:
         72:a9:00:6f:48:25:90:4d:63:c2:3a:34:8a:e6:7f:e1:c6:11:
         f3:0d:a1:11:f3:ee:bf:22:77:9d:12:fc:5d:b9:58:21:62:39:
         bf:f7:36:06:13:51:15:53:3d:c3:7d:a5:32:44:85:8e:fc:3e:
         42:c0:db:4c:94:dd:2f:76:ed:df:5e:46:c5:63:28:35:81:76:
         69:7a:59:ee:e2:7e:61:fe:0c:21:42:f2:a8:fa:47:44:05:66:
         e6:94:a9:6b:73:b0:00:76:56:5b:84:30:51:9b:e4:e7:0c:1c:
         2d:71:ab:c7:f7:4f:1a:8c:2a:58:4a:b2:a6:8e:d4:53:a8:c0:
         f2:d4:12:dc:16:eb:91:80:b0:c4:33:d7:96:4f:83:43:45:80:
         d2:2c:f6:3f:0d:ab:91:73:d4:0d:ba:27:3b:c4:2f:81:e2:86:
         9c:91:f3:6e:11:2b:f4:60:82:3b:9a:56:63:ff:0b:c2:bf:90:
         61:a0:ca:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:09 2024 by rpki-client on console-ams.rpki-client.org