Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa
File:                     323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier:          ROdZwa9LLiODgSyJa4W7Q7DjO5q6Jlav9D0BygUVjDk=
Subject key identifier:   B7:D0:63:41:B5:AD:7E:6F:A6:91:58:05:1D:7A:C3:34:A6:A9:A0:1C
Certificate issuer:       /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial:       61A11DB82A73C877068FBA85CB5545778AF55017
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa
Signing time:             Thu 04 Apr 2024 18:22:40 +0000
ROA not before:           Thu 04 Apr 2024 18:17:40 +0000
ROA not after:            Thu 03 Apr 2025 18:22:40 +0000
asID:                     61672
IP address blocks:        2804:1cbc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
                          rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a1:1d:b8:2a:73:c8:77:06:8f:ba:85:cb:55:45:77:8a:f5:50:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
        Validity
            Not Before: Apr  4 18:17:40 2024 GMT
            Not After : Apr  3 18:22:40 2025 GMT
        Subject: CN=B7D06341B5AD7E6FA69158051D7AC334A6A9A01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:3b:fb:fd:a8:17:d2:93:78:4b:ea:9a:7c:
                    9c:e9:8d:b1:c0:ec:8b:72:2c:c2:eb:64:49:14:70:
                    92:70:3f:6f:50:0f:11:9a:e2:1c:2d:90:2c:3f:04:
                    1e:e1:7b:3a:10:de:29:da:8f:9f:27:61:df:34:7a:
                    42:5f:35:9f:f2:b5:96:10:86:df:99:c4:9f:e2:f7:
                    60:9f:63:60:e8:4e:28:78:07:47:c3:99:77:ff:36:
                    92:c3:b2:60:3e:4f:20:8b:2c:52:5a:04:f0:b3:82:
                    db:b4:65:55:7f:21:40:c9:4a:60:81:0c:f2:6f:ea:
                    be:00:11:16:76:1d:89:2a:7a:e3:56:54:11:31:b6:
                    ee:75:4f:12:43:a7:21:76:63:09:a0:4e:b7:a3:99:
                    01:b6:a9:37:c9:9a:15:df:5d:7a:d4:9b:0d:78:e6:
                    ef:0c:2c:57:8f:c8:5f:8d:55:f2:09:13:62:98:8a:
                    b6:b0:d5:07:3f:57:f3:64:c7:85:b9:8e:12:48:09:
                    f9:30:6a:02:a1:e5:40:81:f3:33:43:7d:0c:53:2e:
                    8e:4c:25:0f:13:b8:de:62:ec:31:22:91:0f:39:a0:
                    7c:ea:7f:64:b8:93:c1:98:cc:4a:25:59:ab:59:72:
                    6b:7e:cd:a8:99:d4:1b:83:d7:86:76:2b:18:2a:7f:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D0:63:41:B5:AD:7E:6F:A6:91:58:05:1D:7A:C3:34:A6:A9:A0:1C
            X509v3 Authority Key Identifier:
                keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a343030303a3a2f33342d3334203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:63:5e:d6:2c:c1:07:cb:85:2e:c6:e7:00:10:fc:24:03:
         d4:29:0b:5d:b4:f4:07:f9:d4:2c:30:f2:84:69:cd:af:6b:a3:
         ce:fd:c0:a7:42:1a:b2:7d:c4:45:7a:d3:a3:3e:d8:35:eb:cc:
         f3:3c:81:19:eb:ea:e6:76:f5:75:8f:ff:d2:32:88:a5:5e:d1:
         79:77:4d:e1:09:bb:e6:bb:1b:e0:8b:b9:53:0d:be:e6:d8:09:
         e1:5e:8b:a2:62:50:56:91:31:49:dd:d5:35:7b:e8:e8:11:a6:
         9b:83:0c:89:30:c6:f5:77:c8:c0:6b:88:01:f5:a1:6e:d4:0f:
         81:ec:b9:19:59:4a:5d:ca:06:8e:d8:bf:96:9a:b8:5a:b9:0b:
         7b:28:d4:41:c4:bc:9b:4e:be:1c:1c:2f:09:7a:bf:9b:88:67:
         e0:11:4d:67:f1:8c:7b:78:69:f7:0f:dc:5b:22:aa:e7:36:81:
         d1:d5:12:cf:9d:98:e2:6d:97:fa:2a:5a:9f:d0:29:28:9f:73:
         93:0a:31:7f:79:bb:cf:33:18:3d:7d:24:ec:ad:b6:88:ff:70:
         54:a5:55:aa:90:06:c9:06:53:9f:60:cb:5f:da:25:17:c9:25:
         d6:7f:b4:19:f4:cb:0a:1e:94:fc:e6:1f:da:ca:ca:10:b4:fc:
         ab:93:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:36 2024 by rpki-client on console-fra.rpki-client.org