Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa
File:                     323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa (raw, json)
Hash identifier:          yydnsJZvsKWC14MZHm+Wds8kTody2OrdAhnNrfSWBPA=
Subject key identifier:   7F:4F:C1:F0:64:D1:D6:9D:26:1C:04:6D:49:86:2D:B7:B1:FC:E4:8A
Certificate issuer:       /CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
Certificate serial:       36B20B9D15521599AA4486B16C698E9A7B74CBF6
Authority key identifier: A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa
Signing time:             Tue 19 Nov 2024 15:52:31 +0000
ROA not before:           Tue 19 Nov 2024 15:47:31 +0000
ROA not after:            Tue 18 Nov 2025 15:52:31 +0000
asID:                     266368
IP address blocks:        2804:36bc:ff00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl
                          rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b2:0b:9d:15:52:15:99:aa:44:86:b1:6c:69:8e:9a:7b:74:cb:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A19A48627F9E16209BBEA3245228A659E3EBF9D6
        Validity
            Not Before: Nov 19 15:47:31 2024 GMT
            Not After : Nov 18 15:52:31 2025 GMT
        Subject: CN=7F4FC1F064D1D69D261C046D49862DB7B1FCE48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:12:72:6a:2c:cc:66:e9:11:97:d5:3a:6b:
                    da:c9:c1:76:41:ba:55:67:3b:65:0c:24:e4:45:e9:
                    7f:a7:74:ab:16:f8:08:3d:b3:3e:03:bc:4f:72:eb:
                    58:19:3e:eb:db:93:f3:ee:db:ac:db:2d:14:ce:09:
                    a3:f1:f7:6e:dc:1a:63:cd:b8:fd:28:d9:ff:3a:7d:
                    b2:fa:64:41:de:20:95:c1:e7:88:43:81:48:50:4c:
                    26:d8:d5:36:2b:f2:05:ea:82:3c:8c:7b:9f:2c:c9:
                    e0:28:2b:21:9c:b3:d9:28:1e:56:79:58:92:de:b8:
                    2d:20:ac:d1:1a:5b:0e:9b:28:34:1d:8b:e8:99:13:
                    88:c1:c7:27:e3:d3:22:eb:ed:98:0d:15:99:91:f8:
                    b0:25:80:a8:fc:11:25:bd:2d:79:0f:4e:6b:dd:ae:
                    38:70:e2:20:9a:24:39:32:00:8b:74:f4:eb:0b:7a:
                    09:4c:66:ca:33:24:fb:68:2b:a8:23:fb:a8:d8:2c:
                    a0:37:9c:95:ed:e5:aa:e3:36:f2:06:8a:22:bc:49:
                    50:cc:50:c2:3b:da:4e:14:3d:df:c3:e7:f2:02:ac:
                    a6:69:58:b7:1e:c5:6f:c8:9f:25:2e:5d:c5:ca:d7:
                    49:da:18:3e:45:d2:69:1a:9b:ce:65:1c:cb:57:0b:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4F:C1:F0:64:D1:D6:9D:26:1C:04:6D:49:86:2D:B7:B1:FC:E4:8A
            X509v3 Authority Key Identifier:
                keyid:A1:9A:48:62:7F:9E:16:20:9B:BE:A3:24:52:28:A6:59:E3:EB:F9:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/A19A48627F9E16209BBEA3245228A659E3EBF9D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A19A48627F9E16209BBEA3245228A659E3EBF9D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666630303a3a2f34302d3430203d3e20323636333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36bc:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:07:02:b1:53:0a:75:74:b4:71:26:ad:31:e7:2b:34:6a:
         3d:69:1b:63:e7:03:a1:eb:cc:07:92:36:f9:46:df:e5:0d:f7:
         0c:e0:79:09:40:63:f3:b1:2a:6c:7b:09:b6:c7:29:ac:e3:53:
         7f:b8:4e:30:66:b3:5c:c0:f8:09:ab:20:57:c8:62:ea:05:25:
         f0:c9:6f:7c:2c:67:4b:a7:81:fe:6c:76:b1:93:42:91:99:92:
         d6:8e:ed:19:53:db:d9:40:c1:a8:a7:03:82:d1:b4:e2:da:16:
         ed:39:4e:c0:d5:c9:ba:56:22:ed:e8:6a:d3:bf:fa:6e:26:7d:
         d8:54:f0:1f:fd:18:f8:79:33:fa:c3:19:11:b4:f7:d6:45:51:
         72:08:34:3c:e3:95:ef:cd:23:6f:32:91:f2:76:5d:a2:d1:2e:
         d8:fe:38:88:26:a8:ef:82:26:17:df:ed:ef:0d:ef:10:65:17:
         74:ab:67:a7:fd:a1:24:5f:7a:a2:ce:26:6a:82:13:7c:22:8b:
         3d:e7:f0:66:f7:73:81:2b:97:65:3d:fc:20:6a:31:a0:d2:bc:
         ab:30:62:6e:86:7d:3b:d2:39:3b:06:62:81:b0:fd:7a:d8:ea:
         37:3b:e8:fe:dc:da:27:58:40:d2:f0:99:b9:84:f2:87:34:6a:
         64:47:73:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:59 2024 by rpki-client on console-fra.rpki-client.org