Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
File:                     323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa (raw, json)
Hash identifier:          /RaOtEzRfOIktZiSx+qkE1FthFXrUsj0r+NcEZmdnak=
Subject key identifier:   3A:49:5F:B5:DB:03:25:9C:E5:50:56:80:9A:FC:3F:A5:49:FF:4B:2A
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       76C90EEC8AECE100418DDC2285E6B96B3B371FFB
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:29 +0000
ROA not before:           Tue 19 Nov 2024 15:47:29 +0000
ROA not after:            Tue 18 Nov 2025 15:52:29 +0000
asID:                     266368
IP address blocks:        2804:36bc:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c9:0e:ec:8a:ec:e1:00:41:8d:dc:22:85:e6:b9:6b:3b:37:1f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:29 2024 GMT
            Not After : Nov 18 15:52:29 2025 GMT
        Subject: CN=3A495FB5DB03259CE55056809AFC3FA549FF4B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:1d:8a:f9:c2:ec:99:93:84:1a:88:5f:b7:
                    83:ab:e2:54:ed:3e:0b:2f:8e:dd:6d:91:67:ef:71:
                    e3:4b:f7:c4:1e:29:95:e1:10:d7:5d:6d:b5:c3:80:
                    fa:d1:02:79:2c:77:c7:dd:72:fc:e1:54:3a:0a:4c:
                    19:28:1e:3c:32:8d:be:62:a5:df:3e:c3:d5:a9:0d:
                    46:75:7e:13:72:c2:c9:cd:f8:30:a2:1a:db:0a:b0:
                    24:f0:c5:ee:4a:67:53:e7:5e:ce:07:c0:ec:77:4d:
                    d5:15:5f:e0:bf:82:25:da:b8:e9:a7:6b:ad:71:83:
                    e5:4e:ce:0a:5f:dc:71:8b:8c:34:a9:cb:9c:93:6a:
                    01:88:93:47:c2:02:6d:77:02:df:e9:e9:1d:ed:37:
                    f6:47:8e:61:80:07:74:84:65:be:46:b5:61:14:ff:
                    cd:46:7a:29:cb:ea:f2:b5:20:88:bc:e5:02:95:4c:
                    6f:38:20:de:9d:81:da:f7:1d:aa:a3:95:08:1a:bb:
                    c4:01:4c:25:63:36:d7:b1:ff:00:5f:cf:73:11:b8:
                    2a:7b:5d:64:d4:ae:30:0d:81:2b:60:5c:7d:b8:e7:
                    1b:99:fd:2d:f0:b5:9b:c3:d6:21:31:f4:6a:ae:f3:
                    5f:9d:e0:ab:14:05:ad:61:9f:57:16:95:4c:8d:68:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:49:5F:B5:DB:03:25:9C:E5:50:56:80:9A:FC:3F:A5:49:FF:4B:2A
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a343030303a3a2f33342d3334203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         86:92:ad:12:c9:49:02:47:f7:b3:c0:02:2b:cf:3d:bb:6c:5c:
         6c:92:13:f3:cd:be:ce:71:78:cc:bd:5c:f5:df:4e:c1:54:a1:
         24:2a:8d:c1:94:e5:8d:6e:00:f3:80:90:1e:c8:49:ab:2b:73:
         99:21:68:23:3d:56:8e:45:eb:17:0c:48:55:2f:a3:4e:37:36:
         79:fb:24:ad:3c:d7:d1:84:f6:1c:14:89:c1:82:f4:21:79:9f:
         2d:b6:1b:3c:af:89:5a:c9:0c:b3:b8:1e:00:ee:96:e9:e2:db:
         36:78:27:27:6d:7d:0c:23:63:49:3e:fd:7b:83:3d:d1:03:36:
         7a:be:1d:2e:f4:a6:77:0b:a5:8c:87:7b:be:07:ba:c1:3e:f2:
         76:bf:3e:1d:3c:4b:23:75:8e:3a:05:2b:68:69:2c:55:3c:54:
         f2:b2:19:6a:da:f6:12:e5:00:ba:64:74:f9:e1:1c:29:97:c3:
         68:42:87:57:64:67:70:29:b4:0d:97:15:f1:d9:cf:dd:74:cb:
         4c:c3:6c:51:ed:47:3a:b3:7c:dd:d3:7d:7e:7d:27:65:25:cd:
         da:41:28:ff:84:ce:33:8f:d9:eb:d5:3e:b5:06:90:7d:37:3d:
         da:bc:d5:b7:eb:ad:45:3e:30:7b:12:88:55:9b:a0:00:f4:28:
         f2:a5:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org