Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3333203d3e20323633353135.roa
File:                     323830343a313331383a3a2f33322d3333203d3e20323633353135.roa (raw, json)
Hash identifier:          e+oXJBqOvzmMX9sr9AlYViwAqanW4OG8g9sSbTZAfDA=
Subject key identifier:   31:4D:1A:9A:13:16:AE:C3:A8:2F:9E:0C:4A:92:EA:7E:4E:3B:42:90
Certificate issuer:       /CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
Certificate serial:       781E76DB9758279D9B8F767DB5A8FBD5E73DAB21
Authority key identifier: C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3333203d3e20323633353135.roa
Signing time:             Wed 19 Jun 2024 21:26:13 +0000
ROA not before:           Wed 19 Jun 2024 21:21:13 +0000
ROA not after:            Wed 18 Jun 2025 21:26:13 +0000
asID:                     263515
IP address blocks:        2804:1318::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl
                          rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 15:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1e:76:db:97:58:27:9d:9b:8f:76:7d:b5:a8:fb:d5:e7:3d:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C947EC19DD5216E11734983E3D954D61BC79E7C6
        Validity
            Not Before: Jun 19 21:21:13 2024 GMT
            Not After : Jun 18 21:26:13 2025 GMT
        Subject: CN=314D1A9A1316AEC3A82F9E0C4A92EA7E4E3B4290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:f1:d8:d9:3c:74:bb:15:bb:c7:54:3d:60:
                    18:4e:aa:b3:2b:70:3c:23:bc:ed:1c:93:ba:54:ef:
                    60:34:92:b6:76:24:1f:59:42:a6:94:a9:1b:78:99:
                    94:72:39:09:6c:a1:8e:dd:e2:8c:73:b3:a6:01:0c:
                    99:40:16:41:29:6a:b3:dd:72:8e:5e:b1:eb:f4:f4:
                    0e:57:f4:b7:91:b7:2c:05:d5:ad:69:69:62:d4:37:
                    32:a2:95:44:4e:1e:84:d6:4d:b1:42:7f:1b:fd:fc:
                    dc:88:36:89:4d:35:0e:97:76:97:60:98:4e:12:ad:
                    22:2f:b2:62:6f:6d:80:fd:bf:98:e5:0b:d2:d8:47:
                    c8:4e:b0:9d:33:42:fa:59:10:86:8d:ed:b3:3b:f7:
                    f3:59:4b:c3:4b:34:e6:6a:00:34:2f:df:f4:e6:45:
                    10:fc:e9:c8:6e:d8:0d:e4:c0:48:12:ba:9d:e4:ba:
                    35:e1:8a:61:3f:93:5e:46:11:dd:5f:44:3e:aa:6d:
                    6a:f9:9b:12:bf:bb:e8:33:8e:5a:04:5d:c3:db:13:
                    76:9c:e3:d0:22:bd:31:99:98:ac:f0:e8:21:61:ef:
                    46:4d:e6:40:df:17:f9:03:6a:2a:ec:78:a9:81:67:
                    da:43:74:9d:b0:60:3f:a3:82:3a:f4:29:75:e3:dc:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4D:1A:9A:13:16:AE:C3:A8:2F:9E:0C:4A:92:EA:7E:4E:3B:42:90
            X509v3 Authority Key Identifier:
                keyid:C9:47:EC:19:DD:52:16:E1:17:34:98:3E:3D:95:4D:61:BC:79:E7:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/C947EC19DD5216E11734983E3D954D61BC79E7C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C947EC19DD5216E11734983E3D954D61BC79E7C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3W9fE2tDvMrCDyW7QxXsEPqfyKcrZVYfzKQYcfga9NSg/0/323830343a313331383a3a2f33322d3333203d3e20323633353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:17:47:c2:65:2a:ef:e9:12:3f:cf:95:fd:26:43:5d:72:15:
         59:31:69:c5:ea:b2:1a:8f:d9:51:0e:00:64:ad:ef:6c:e6:80:
         38:1a:f9:d0:84:56:99:30:ba:5d:bc:a8:a1:21:ad:10:58:d5:
         eb:47:06:e4:d3:80:22:eb:cb:10:bb:d7:69:ea:8c:8a:4e:bd:
         00:cf:df:2c:d9:33:6b:3b:fe:8f:11:27:08:21:a9:8a:fc:f3:
         51:67:1f:79:b8:76:31:60:df:7e:b0:43:31:56:21:23:18:52:
         a8:91:a0:1d:27:07:b3:59:92:70:47:14:7a:72:ff:7d:bf:36:
         25:58:62:dc:df:f8:91:78:4c:5e:ec:c5:c2:12:8a:c9:56:8b:
         41:59:64:e4:d0:7e:fc:c4:af:d6:60:bb:b9:1e:87:fd:cf:51:
         4d:92:d1:e4:54:45:4a:5f:71:e4:b4:5a:a7:23:13:2b:e6:d2:
         36:2d:a1:56:8e:55:48:07:67:82:ed:d8:85:c1:a5:88:8e:e9:
         8e:17:ca:00:f9:f3:4f:87:bf:1a:45:3e:9e:37:87:c0:87:ea:
         66:92:b9:94:7c:08:ee:51:53:e0:ec:f0:ed:48:5a:0f:08:34:
         59:ed:90:b0:23:5f:7b:96:cd:20:a9:c8:00:d8:0b:5a:42:48:
         1d:1d:39:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:41:17 2025 by rpki-client