Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
File:                     323830343a313861303a3a2f33322d3334203d3e203631393434.roa (raw, json)
Hash identifier:          IP9yOiGpw+cOJ/+eW2xIIItUrfYSOEUolmr3uVnE2Cc=
Subject key identifier:   43:2A:03:F0:EF:66:2D:FE:1A:9E:AD:1B:97:28:5A:39:8C:C3:16:10
Certificate issuer:       /CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
Certificate serial:       1E9A68EA957B73F6E618FB2216E72E5E06327BD3
Authority key identifier: 17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa
Signing time:             Thu 04 Apr 2024 10:48:21 +0000
ROA not before:           Thu 04 Apr 2024 10:43:21 +0000
ROA not after:            Thu 03 Apr 2025 10:48:21 +0000
asID:                     61944
IP address blocks:        2804:18a0::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl
                          rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 18:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9a:68:ea:95:7b:73:f6:e6:18:fb:22:16:e7:2e:5e:06:32:7b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1798EFBE5D1BCAD0E943F8010C795C1294AC2647
        Validity
            Not Before: Apr  4 10:43:21 2024 GMT
            Not After : Apr  3 10:48:21 2025 GMT
        Subject: CN=432A03F0EF662DFE1A9EAD1B97285A398CC31610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:2f:32:13:1e:38:36:0f:2a:d3:f8:12:c8:
                    e9:2b:a8:16:33:de:30:9b:16:f8:36:df:8d:0e:b6:
                    3d:25:af:e9:ac:13:33:e2:3f:7b:16:a5:17:a1:fc:
                    6a:e6:70:a9:8b:a7:e8:87:7a:cc:6d:a8:d7:26:ff:
                    af:27:b1:ba:c3:29:ac:f7:4f:eb:70:f3:b2:83:65:
                    9b:7e:64:5b:ec:3d:e9:80:62:85:21:63:f6:7e:3b:
                    c8:2d:9b:fc:24:93:78:a6:c2:6d:10:1d:95:9d:0e:
                    04:fe:dd:2d:48:4e:12:fd:90:e6:14:0b:44:63:f6:
                    14:1e:6f:e4:fe:19:0e:e4:00:92:05:32:ee:2e:24:
                    3f:37:92:da:c6:e1:c0:52:c3:61:44:59:b8:62:06:
                    fb:3c:6b:9d:55:ae:04:14:71:4d:f6:5b:e5:51:ca:
                    fc:ac:99:30:75:ba:30:03:3b:82:a2:e8:1b:2c:dc:
                    68:1b:cf:07:de:6f:2a:a5:75:02:a8:a5:5e:41:4a:
                    8b:61:b2:bd:1b:6a:5e:ca:4a:1c:d3:fc:81:6c:31:
                    6f:b7:5d:88:e1:33:19:ad:c7:96:ab:cc:6d:38:f7:
                    f4:38:6c:95:48:76:7d:95:fb:12:8f:e8:56:b5:6e:
                    ab:e6:3f:64:26:20:4a:12:05:b4:35:61:c9:d9:fe:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2A:03:F0:EF:66:2D:FE:1A:9E:AD:1B:97:28:5A:39:8C:C3:16:10
            X509v3 Authority Key Identifier:
                keyid:17:98:EF:BE:5D:1B:CA:D0:E9:43:F8:01:0C:79:5C:12:94:AC:26:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1798EFBE5D1BCAD0E943F8010C795C1294AC2647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7RHZhR3jv8TF9jD95qhzkr1RuWt42vZDr9jeEY5TdG/1/323830343a313861303a3a2f33322d3334203d3e203631393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:2a:32:a6:61:fa:25:85:ca:8e:e5:4b:cb:72:2a:ef:3e:5f:
         73:98:61:26:eb:35:3d:8a:bb:e6:ec:07:0a:04:a6:e8:ac:c7:
         ec:2d:25:10:3d:4c:57:b7:d7:06:4c:36:68:77:aa:99:0a:eb:
         2e:14:50:c4:05:cd:9c:90:b5:4e:b5:15:d9:c4:62:00:5f:54:
         f0:62:b3:57:5f:09:19:8f:2d:87:be:80:55:18:8e:e6:9a:01:
         c6:f5:a2:f6:9c:ba:8e:80:92:ab:31:79:5e:6a:01:22:ff:2d:
         f7:62:ec:1d:d3:45:47:d8:76:3f:66:8a:5d:d0:13:7f:b9:20:
         40:09:38:ae:09:5d:ee:b9:e2:62:8b:05:cc:c1:84:68:3c:10:
         3d:c2:ef:dd:7b:0e:c3:5d:46:37:4f:62:4b:f0:29:e7:d2:39:
         dd:38:04:8d:5c:a5:4c:f2:b0:ff:55:d4:a3:38:e4:eb:2a:d9:
         bf:9b:ff:b5:2d:b5:c6:11:6e:a8:cf:c7:2c:6f:6c:f8:42:42:
         e5:bb:51:cc:b0:4a:87:76:1e:62:f8:54:8f:dc:96:e3:f8:ab:
         a7:a2:0b:bc:fe:f4:52:60:7b:96:8f:a4:9e:f2:c1:f9:47:43:
         34:40:28:b9:dd:26:4a:bf:69:57:88:e6:44:ae:6d:ac:b3:3c:
         09:51:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:43:17 2024 by rpki-client on console-ams.rpki-client.org