Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33332d3333203d3e20323639313735.roa (raw, json)
Hash identifier:          92rAgKGyB82YXG+BbGsX61h0T+f7B1KJQ0Xx3x2ovrc=
Subject key identifier:   91:78:23:EA:7B:3C:9E:66:5D:AB:46:DA:C3:D3:BA:7D:8C:0C:B0:2D
Certificate issuer:       /CN=870F31E28EB6835FE94CC62D908989A74790CB3E
Certificate serial:       3A6403A3B76C6D5CFA914B27D822776BF19DA07D
Authority key identifier: 87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa
Signing time:             Fri 04 Oct 2024 10:52:07 +0000
ROA not before:           Fri 04 Oct 2024 10:47:07 +0000
ROA not after:            Fri 03 Oct 2025 10:52:07 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl
                          rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:64:03:a3:b7:6c:6d:5c:fa:91:4b:27:d8:22:77:6b:f1:9d:a0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Validity
            Not Before: Oct  4 10:47:07 2024 GMT
            Not After : Oct  3 10:52:07 2025 GMT
        Subject: CN=917823EA7B3C9E665DAB46DAC3D3BA7D8C0CB02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:98:d4:84:6c:eb:05:a8:34:b8:7b:70:34:
                    22:fc:0f:63:4e:1a:97:fd:39:dc:55:8a:21:cc:67:
                    1e:b0:e3:1b:09:6e:74:60:8c:b8:72:b4:25:9c:86:
                    a0:2d:71:9f:04:de:f5:d3:7a:f8:b5:32:f0:0e:18:
                    61:a7:a9:00:27:c2:a8:19:95:05:38:d0:d2:de:3e:
                    b0:14:f0:53:48:95:69:37:99:ae:e6:8d:fb:9b:98:
                    22:2c:83:10:2b:8e:80:90:52:f3:02:9a:2a:6a:81:
                    90:cb:9d:0e:40:52:b8:84:7d:79:fd:4f:6c:c7:04:
                    0b:48:77:83:49:03:55:8b:59:c4:cc:ad:ff:a0:ef:
                    32:25:c8:d1:56:6d:23:d4:52:3e:45:a5:8b:16:c6:
                    84:93:f1:98:2a:33:e8:e0:7b:fe:fd:ed:73:9d:43:
                    3d:6b:39:3e:6e:7b:ae:48:60:78:bf:42:34:61:80:
                    86:f8:a8:8a:6e:b8:45:3e:e9:c8:86:e3:30:ff:f7:
                    b5:90:da:48:f5:77:f8:fa:f0:35:0c:b1:30:ea:2f:
                    d9:6e:a7:2a:73:80:32:70:09:b6:2b:62:8b:91:44:
                    46:61:02:b3:fe:f4:eb:9c:b7:66:b0:35:bd:0b:d0:
                    8e:74:f4:34:35:54:ff:7d:1a:3d:83:5a:eb:be:9f:
                    02:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:23:EA:7B:3C:9E:66:5D:AB:46:DA:C3:D3:BA:7D:8C:0C:B0:2D
            X509v3 Authority Key Identifier:
                keyid:87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33332d3333203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/33

    Signature Algorithm: sha256WithRSAEncryption
         3a:5d:24:ef:58:af:1c:15:61:d3:e7:7d:b1:68:57:25:45:57:
         cb:7e:28:d5:36:4f:63:74:8e:2c:e6:7b:cf:41:a9:7c:08:2a:
         bd:26:a2:84:12:09:a0:8d:c4:5c:00:48:3c:c5:76:7e:ad:9a:
         e9:d6:55:35:68:51:e5:9b:e0:05:f1:96:fc:f6:20:2c:2d:df:
         69:e5:4f:9a:7c:3a:ac:eb:75:a4:c0:30:2e:65:bf:c1:16:93:
         43:c9:c8:50:fb:f7:d7:8f:16:39:86:13:49:70:90:0c:b3:16:
         bf:cb:8f:5d:ce:84:8c:d5:d7:fe:ba:4c:ef:60:a6:19:06:6b:
         e4:18:03:27:27:b6:33:68:40:45:26:65:66:92:8b:7e:9e:e3:
         4f:70:86:6d:41:de:ae:1f:59:80:49:a3:55:7b:20:f4:0d:a4:
         0a:a5:9e:b0:b1:80:08:c7:84:10:d5:58:98:33:5c:63:2b:8c:
         09:28:46:68:04:81:ae:21:53:22:1d:7c:93:f3:be:d7:c3:f6:
         e3:7f:9e:ff:1a:94:0a:40:ac:ea:65:3d:02:8e:ed:d3:33:de:
         2b:8e:8a:2e:e2:ca:78:60:44:43:6f:da:87:b2:12:00:38:5a:
         5a:2f:54:b3:7a:51:44:53:f9:4f:c5:17:33:4f:1d:f6:e1:c5:
         18:c5:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:41 2024 by rpki-client on console-ams.rpki-client.org