Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
File:                     323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa (raw, json)
Hash identifier:          o/LcFgNaOyjnGRr5YEnsK7AoAWenQLk956DtJzj0RsY=
Subject key identifier:   98:0A:11:03:20:6B:4A:B8:69:16:01:B6:35:06:D2:B1:99:5C:2E:7D
Certificate issuer:       /CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
Certificate serial:       1A1E60B4E6454A0832EB49E19904CDE37CD8FC49
Authority key identifier: F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa
Signing time:             Wed 03 Apr 2024 20:24:13 +0000
ROA not before:           Wed 03 Apr 2024 20:19:13 +0000
ROA not after:            Wed 02 Apr 2025 20:24:13 +0000
asID:                     269320
IP address blocks:        2804:62d0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl
                          rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Sep 2024 20:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:60:b4:e6:45:4a:08:32:eb:49:e1:99:04:cd:e3:7c:d8:fc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F196A9AF2ABCCD8F3406AD535AF560447E07E6E7
        Validity
            Not Before: Apr  3 20:19:13 2024 GMT
            Not After : Apr  2 20:24:13 2025 GMT
        Subject: CN=980A1103206B4AB8691601B63506D2B1995C2E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:99:6c:12:de:98:cf:7c:3a:b1:d1:dd:8b:
                    94:f6:c9:11:8e:96:aa:5f:b4:04:b0:99:2c:70:a8:
                    c6:77:e1:86:02:56:1b:f8:c2:6f:92:9d:1c:ed:19:
                    bd:ec:9d:31:11:4d:3c:49:12:56:6a:e5:ec:d4:35:
                    7a:62:2d:47:fb:53:04:14:27:26:c3:7c:6c:14:e3:
                    ea:5d:6c:2b:dd:bd:dc:fe:89:a6:11:63:c4:bc:af:
                    f4:bc:f3:44:62:11:8c:20:85:3d:f1:44:e0:ef:1c:
                    8a:16:67:f8:ef:f3:64:5f:0a:a7:e0:d5:fe:25:13:
                    ac:ed:98:4b:4e:28:89:a6:59:24:a9:18:fb:94:a6:
                    32:99:b7:68:b9:55:34:8f:29:9f:b2:cd:50:d4:79:
                    c0:02:41:5b:e2:01:96:c8:fc:75:9a:08:52:d1:18:
                    e0:9c:a5:69:0a:8a:2e:a0:6d:2f:07:8d:10:ca:5d:
                    5b:17:6b:ab:b1:fe:80:fb:85:f0:fe:cc:8d:77:67:
                    f6:da:af:12:af:1f:e2:2e:40:ae:d7:b1:73:36:8d:
                    22:c4:2c:49:2d:b9:69:f3:80:df:3f:5a:b4:94:7c:
                    32:75:e2:84:b1:71:12:ae:a3:b4:76:33:e5:d5:0d:
                    bb:a6:03:df:62:35:36:89:51:ad:5b:38:2e:ca:10:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0A:11:03:20:6B:4A:B8:69:16:01:B6:35:06:D2:B1:99:5C:2E:7D
            X509v3 Authority Key Identifier:
                keyid:F1:96:A9:AF:2A:BC:CD:8F:34:06:AD:53:5A:F5:60:44:7E:07:E6:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F196A9AF2ABCCD8F3406AD535AF560447E07E6E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/1/323830343a363264303a383030303a3a2f33342d3334203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:62d0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:de:e6:34:f9:0a:91:b9:a7:a3:d3:93:88:6c:43:97:89:f8:
         20:47:4d:d5:f2:61:6c:19:56:76:4a:80:ec:91:a6:30:c1:fe:
         99:97:2e:8c:e6:1b:14:dc:fb:04:ed:2f:a2:39:6d:f3:6e:2b:
         90:aa:68:22:38:96:45:da:6d:24:ad:be:44:67:ad:b3:e3:f3:
         de:27:64:30:26:8e:d6:ce:db:c4:fd:26:e2:fa:be:3f:2f:f7:
         81:f2:29:24:c5:32:cb:b5:33:d0:06:40:80:10:23:1e:88:df:
         ba:bf:cc:83:e3:8a:c9:57:df:c5:0a:05:86:7f:77:fd:e9:21:
         a3:7e:09:5c:20:d1:93:58:57:c7:19:13:e6:77:cf:f9:c5:73:
         72:be:cb:14:4c:2e:a4:5b:63:91:97:d1:f2:c3:0d:6d:ab:db:
         bc:90:37:5e:46:50:8d:4b:ce:31:6a:c7:a1:b0:fc:69:d2:9e:
         2c:63:f6:43:70:a3:7d:d6:a1:39:0e:d1:30:64:15:30:d2:83:
         ed:26:22:fd:b5:b4:af:96:f3:87:dd:03:03:66:97:d0:30:7c:
         56:33:c6:2b:5b:bc:fd:a3:d9:3a:22:34:83:f3:6f:30:0a:91:
         d5:c6:93:4b:30:92:76:43:78:e5:3c:09:0a:20:48:ad:21:5f:
         07:69:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 20:56:26 2024 by rpki-client on console-ams.rpki-client.org