Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          AsQ56LsOVsXeG8mTCZZn8aeU4B8orJJ+MRbcPEpXiGk=
Subject key identifier:   16:AB:E2:49:28:7F:5F:9A:B8:71:F1:18:CF:79:90:6B:AA:48:01:2B
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       0B00D9F5AEB79A7A6D3E895C9AAAF704E6BE3DC6
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 23 Apr 2024 19:13:40 +0000
ROA not before:           Tue 23 Apr 2024 19:08:40 +0000
ROA not after:            Tue 22 Apr 2025 19:13:40 +0000
asID:                     263627
IP address blocks:        2804:1044:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:00:d9:f5:ae:b7:9a:7a:6d:3e:89:5c:9a:aa:f7:04:e6:be:3d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Apr 23 19:08:40 2024 GMT
            Not After : Apr 22 19:13:40 2025 GMT
        Subject: CN=16ABE249287F5F9AB871F118CF79906BAA48012B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:15:97:14:ca:7c:30:0b:79:52:aa:c2:8b:
                    49:73:e0:1a:82:88:4a:b4:a6:63:ff:5a:1c:c8:6b:
                    57:8d:ab:90:2e:41:23:3e:37:af:96:4a:a9:b5:25:
                    d1:f6:21:38:0f:e0:19:60:ab:c8:b6:bb:7e:1d:19:
                    e0:5c:46:01:95:a1:a8:3f:38:aa:d5:b4:3f:78:92:
                    16:88:a9:cd:f5:2f:52:c9:bc:9b:47:e5:05:c4:fd:
                    14:d7:3e:11:58:e9:36:91:73:df:76:41:10:6b:6d:
                    26:59:ca:34:1c:e4:31:4e:3f:ce:bd:a9:95:83:f5:
                    8a:dc:3b:05:11:9d:0b:d4:ad:8c:3c:05:c1:ef:9e:
                    d6:73:4b:65:e8:7c:5c:b6:6e:1a:94:35:29:56:55:
                    aa:ab:12:1c:17:3a:38:5d:db:6a:ca:c3:ff:b5:8d:
                    f5:d5:f8:e3:3c:e9:d3:52:1a:7d:e7:70:61:61:71:
                    64:85:c3:29:23:d4:12:e8:f9:6f:d7:43:53:82:6e:
                    e5:6e:50:0e:2f:a2:4c:56:4a:da:3e:f6:ed:78:ba:
                    c3:36:f4:87:f3:be:c8:d8:9c:aa:29:cd:b1:46:fe:
                    3a:dc:6c:bd:7d:6d:74:d1:fe:b1:ef:49:45:7a:22:
                    d9:52:0c:22:9f:45:b3:35:6a:ee:a6:01:09:b0:5a:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:E2:49:28:7F:5F:9A:B8:71:F1:18:CF:79:90:6B:AA:48:01:2B
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a633030303a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:31:a9:1e:41:d1:54:91:2d:9c:c6:5f:83:92:2e:a6:41:f1:
         2d:86:27:fb:07:46:b5:74:85:45:77:b0:c4:c6:c2:77:04:45:
         73:5e:c3:01:54:91:72:ca:a2:67:81:6e:6f:79:75:0b:31:2b:
         52:ab:42:b1:73:d1:ed:e2:a0:f6:cd:92:e1:85:c8:17:28:a6:
         e5:82:a1:3e:6d:93:ae:bf:84:2d:d6:e1:c8:be:29:21:c2:cd:
         0e:ab:cc:00:e8:30:f2:75:7a:4d:0c:6f:6e:62:38:9b:de:ab:
         58:88:e8:e1:2a:93:8d:55:05:54:6b:5d:8a:20:0c:3b:5d:61:
         11:f7:85:54:38:9b:e0:cd:56:c1:de:63:f1:d4:9a:8e:9d:eb:
         f3:6b:81:05:3e:66:3c:5e:26:c9:90:47:ff:4e:b1:ed:a9:c8:
         c0:c6:d9:95:31:0c:1b:79:07:c4:0d:97:3d:e6:38:5f:5f:5f:
         81:92:e5:08:07:d1:c1:77:c3:d5:ae:f3:ac:f6:31:16:3a:cd:
         62:b9:41:ab:6d:8e:47:30:5d:89:cd:49:27:99:6a:b5:7f:63:
         8e:83:0b:84:4b:31:24:0b:68:93:cb:52:c4:1e:3c:bb:6d:a6:
         5b:16:e7:a8:d4:0c:22:bc:8c:ae:8d:df:24:e9:9c:87:f7:9a:
         27:a6:9e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-ams.rpki-client.org