Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa
File:                     323830343a333662633a3a2f33342d3334203d3e20323636333638.roa (raw, json)
Hash identifier:          1tbQkwD28lY2RTb2DvNjm3LnSaWDGEc6Yqtm1d/LUyw=
Subject key identifier:   1A:AC:50:2B:92:DE:D4:CD:B7:6F:E5:4E:C3:B1:4D:AF:FF:79:51:BF
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       4511F2E6320566535417195143E372ABC19B6806
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:30 +0000
ROA not before:           Tue 19 Nov 2024 15:47:30 +0000
ROA not after:            Tue 18 Nov 2025 15:52:30 +0000
asID:                     266368
IP address blocks:        2804:36bc::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:f2:e6:32:05:66:53:54:17:19:51:43:e3:72:ab:c1:9b:68:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:30 2024 GMT
            Not After : Nov 18 15:52:30 2025 GMT
        Subject: CN=1AAC502B92DED4CDB76FE54EC3B14DAFFF7951BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:6a:6d:8c:eb:a8:77:0d:2f:2e:95:94:f3:
                    75:d3:a1:f9:f4:72:91:08:f3:4b:12:8a:2c:a4:4f:
                    1d:79:59:4f:e2:f0:74:c9:d8:67:c8:1e:ce:fe:e0:
                    32:33:81:f4:27:16:34:19:49:39:f7:77:5c:06:06:
                    57:e2:cc:8c:ba:54:18:64:03:58:52:a9:b5:cb:85:
                    30:6a:40:9a:58:71:8a:a2:0e:26:a6:5a:42:93:b0:
                    f7:0f:a0:9d:22:fb:de:4c:cc:e1:e0:79:46:ec:40:
                    67:fc:77:a5:a7:2b:7d:de:24:24:cf:69:36:1a:61:
                    1f:14:1a:93:b3:b6:98:12:de:ab:83:08:69:00:47:
                    f5:d3:9e:ab:8a:ad:58:73:cd:ba:8e:c0:b8:42:8c:
                    33:04:ab:1a:1b:51:b4:67:8f:d4:5d:c4:c5:e6:3c:
                    69:8c:d5:17:5b:3e:d9:18:dd:72:b5:1f:5b:65:da:
                    5d:8f:e0:f3:32:1d:36:a6:65:3b:27:91:56:67:2d:
                    40:ce:80:e7:ce:bc:f9:be:78:61:d1:4c:f4:b1:7d:
                    30:b7:2d:b0:ee:a4:d8:eb:2f:6f:4e:12:a8:d1:60:
                    03:d2:ca:b9:8d:75:3f:4c:dd:61:d5:0b:30:6f:4d:
                    e8:d7:60:93:e7:32:a0:89:1f:42:c2:42:cf:a8:fc:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AC:50:2B:92:DE:D4:CD:B7:6F:E5:4E:C3:B1:4D:AF:FF:79:51:BF
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a3a2f33342d3334203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc::/34

    Signature Algorithm: sha256WithRSAEncryption
         72:07:04:bb:18:48:2c:a0:e6:14:90:31:af:46:89:29:14:9a:
         c2:7c:f8:00:8c:75:81:31:65:e3:28:20:ce:47:3c:ce:97:17:
         14:2d:4a:b4:f7:bf:5b:f9:70:32:16:dc:49:6e:64:67:b0:f6:
         b6:80:40:9b:df:12:cf:ee:bd:6d:ce:d5:62:d0:f4:50:f8:22:
         a8:87:62:2d:85:fc:c8:57:ae:e7:3a:a4:ef:bd:05:b8:07:f7:
         5c:da:52:d3:8a:c5:a1:01:cc:6f:a3:50:f0:3a:91:40:f1:ff:
         78:d7:47:2e:6f:db:72:34:5d:d4:98:c4:04:37:2e:7b:e9:d6:
         4a:73:1f:cf:3c:59:e3:d8:fd:74:b2:45:7f:a6:09:c1:20:fd:
         f0:26:f4:e6:bc:d1:39:0c:21:d5:3e:07:1d:85:2e:55:1d:dc:
         4c:4c:ff:66:b1:fa:92:f6:53:46:35:81:d8:a8:1e:27:d4:f8:
         05:45:41:8b:e7:90:a8:77:a1:57:9f:7c:ad:d0:6b:03:5d:e0:
         64:4e:78:b2:ed:ae:10:2a:92:b3:78:4e:54:1f:c3:e8:01:dd:
         33:dd:9b:76:b1:b6:95:c2:43:5f:cd:82:a0:c3:d1:f8:3f:fc:
         b0:38:aa:d3:6d:52:82:76:73:12:57:5c:98:3a:cc:44:9c:8c:
         0e:48:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org