Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa
File:                     323830343a336331633a3a2f33322d3332203d3e20323636313931.roa (raw, json)
Hash identifier:          4p6xXFnw0szlWG4dMXCkCbZLNZ2fCQYpBtCaPrFWyww=
Subject key identifier:   85:9A:F4:1E:72:DB:34:AE:01:35:6F:DB:63:70:4B:24:84:7A:98:80
Certificate issuer:       /CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
Certificate serial:       1F16B4972E6BB7E2ADF1399A9A33D9CFB7DB3B28
Authority key identifier: 22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa
Signing time:             Wed 03 Apr 2024 18:30:54 +0000
ROA not before:           Wed 03 Apr 2024 18:25:54 +0000
ROA not after:            Wed 02 Apr 2025 18:30:54 +0000
asID:                     266191
IP address blocks:        2804:3c1c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl
                          rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:16:b4:97:2e:6b:b7:e2:ad:f1:39:9a:9a:33:d9:cf:b7:db:3b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA
        Validity
            Not Before: Apr  3 18:25:54 2024 GMT
            Not After : Apr  2 18:30:54 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:86:8c:47:63:02:e0:ee:d6:85:66:e2:6a:
                    bb:f9:a6:a2:e5:6f:10:c7:b3:8a:26:bc:a1:57:20:
                    5f:a0:44:e3:ad:e0:96:5c:34:a4:b3:d8:b9:0e:83:
                    2d:38:0c:62:b6:97:4a:ca:a0:96:67:7e:55:09:1e:
                    22:48:bd:95:06:14:46:c9:bf:c7:ed:4d:27:fd:54:
                    54:46:13:bc:9f:65:64:d9:1c:89:32:1d:e7:df:77:
                    41:38:4f:b3:51:0b:29:a9:e8:ad:1c:fc:1e:46:84:
                    4c:a0:45:6e:36:12:b7:33:91:a8:d6:08:85:70:cf:
                    3b:67:b2:ab:4e:91:7b:b5:0e:4a:87:ed:7a:99:6c:
                    eb:e8:57:80:ea:dd:d7:54:da:96:ea:39:9c:e5:1a:
                    7b:41:42:b2:12:3a:ba:de:ba:f8:2b:45:23:13:ed:
                    6f:e1:21:c6:ca:3a:c0:3e:d4:00:4b:27:b5:29:55:
                    ae:0b:d1:d6:f5:18:48:6d:ee:ce:c8:92:49:03:31:
                    e3:50:3e:65:22:99:2b:54:da:2f:fb:91:25:4a:ab:
                    e7:68:65:6e:8d:ae:02:05:91:cc:c0:75:73:a3:ba:
                    f2:6e:32:51:d9:a6:1f:c8:55:1b:25:46:1c:35:57:
                    43:81:77:e8:f5:e5:71:cf:9a:5a:62:6e:9b:04:28:
                    60:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9A:F4:1E:72:DB:34:AE:01:35:6F:DB:63:70:4B:24:84:7A:98:80
            X509v3 Authority Key Identifier:
                keyid:22:13:38:E9:0C:9C:D3:7D:ED:85:B4:40:9F:CA:B7:BF:4F:5F:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/221338E90C9CD37DED85B4409FCAB7BF4F5FE3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NxH6nSBHGMJzYzd1kNeX71oe3GHwtM8Z8fJJVQ6AVWB/1/323830343a336331633a3a2f33322d3332203d3e20323636313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:ea:34:49:d6:9e:8f:39:18:e9:44:88:01:e3:cf:f1:c2:05:
         4d:75:a1:5e:f8:91:94:26:5b:00:5b:3e:85:4a:70:bc:01:12:
         86:52:c1:35:e7:47:99:43:e4:e0:dd:ac:aa:e0:a5:cb:76:bc:
         1e:a2:ce:af:17:bc:94:3f:ba:7d:f3:8d:7e:de:00:ab:17:7d:
         d0:df:29:70:82:b3:a9:f9:df:1b:6b:1f:2d:d4:81:ff:dc:74:
         b6:64:ae:b6:b6:4e:c5:e7:ad:61:30:51:8f:74:b3:95:ab:15:
         a6:7d:f9:5a:8e:3b:93:a1:a0:6b:dd:f0:6d:06:f5:c0:d1:fd:
         b3:b5:0b:1f:1c:84:df:ef:2c:9c:bc:00:b7:e2:fe:04:6c:ba:
         f8:db:a0:a2:40:17:40:28:27:0f:77:fc:bf:38:2c:8a:e9:1f:
         46:4c:bd:57:fc:4c:f9:a3:9a:b0:4d:2d:d9:f1:93:59:bc:42:
         1b:3c:37:4b:e1:c4:24:4e:18:ca:7c:2b:3e:2d:5a:3e:6b:ff:
         91:cc:0d:21:ce:88:91:8a:ab:42:7c:9d:27:4b:ff:13:56:b5:
         6d:db:48:26:12:32:4c:96:b6:78:1c:f0:20:a0:c0:cf:95:28:
         66:8e:e9:bd:13:8b:b4:47:11:f4:c7:d0:d2:d2:bf:87:c1:e0:
         f4:51:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:34 2024 by rpki-client on console-fra.rpki-client.org