Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          gFyE4DCnWpy+QNbZXMRgjEGErie5I/1dof0EjkgpvIA=
Subject key identifier:   85:F3:52:70:AD:69:B2:43:4B:B5:AD:C5:6E:75:FE:3B:18:DF:2F:F1
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       352E665905452FB57BF05017120FD73ED61E0374
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:16 +0000
ROA not before:           Fri 23 Aug 2024 19:45:16 +0000
ROA not after:            Fri 22 Aug 2025 19:50:16 +0000
asID:                     61689
IP address blocks:        2804:1d04:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:66:59:05:45:2f:b5:7b:f0:50:17:12:0f:d7:3e:d6:1e:03:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:16 2024 GMT
            Not After : Aug 22 19:50:16 2025 GMT
        Subject: CN=85F35270AD69B2434BB5ADC56E75FE3B18DF2FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:a9:e4:82:e0:39:7f:6a:c0:c8:74:27:2f:
                    33:14:6a:1e:6a:1c:43:00:63:5f:e8:50:d4:23:49:
                    3d:4f:d6:b9:69:3f:1b:d8:94:1f:86:57:c6:18:07:
                    a4:cf:f1:3d:7d:f6:32:e4:e6:44:38:06:13:30:7f:
                    33:83:4b:4e:63:e8:58:5e:16:5d:5d:29:c0:39:4e:
                    e4:d3:36:05:51:cd:9f:45:2d:6d:5f:7d:5c:5b:e1:
                    8e:4d:6a:b4:db:62:8f:4d:21:2b:13:8e:46:d5:de:
                    05:3d:23:b6:8d:a9:f8:e9:f6:84:a4:9a:16:bc:fe:
                    04:7d:39:63:c5:1b:6b:18:ae:08:f2:94:c1:2d:f2:
                    49:f9:60:f8:2f:7e:b2:00:ba:8f:73:3f:af:a4:1e:
                    d2:fb:23:e7:b6:f9:bf:6f:ac:07:9f:d1:93:d3:3f:
                    2f:5c:46:3c:ad:f9:6e:b0:60:1d:d7:bd:30:a3:ea:
                    a5:62:1a:7f:44:87:81:97:b3:e0:85:e3:55:48:e5:
                    e3:6e:fd:d3:b2:68:f6:f1:dd:07:c7:16:86:f7:94:
                    bb:3f:12:94:31:a6:af:95:f3:f8:83:31:6e:43:ac:
                    b1:f2:37:5d:ce:42:f5:1f:50:3e:cc:56:0b:13:ae:
                    18:93:63:0a:b3:56:a2:13:e3:58:27:20:f6:7f:fc:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F3:52:70:AD:69:B2:43:4B:B5:AD:C5:6E:75:FE:3B:18:DF:2F:F1
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a623030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:04:00:20:14:dd:df:06:15:dc:01:8a:1a:07:72:e1:96:
         90:89:d0:65:1b:05:ef:6f:e8:2a:ba:44:cb:e2:5e:8e:08:0f:
         82:f4:ef:68:13:94:f3:9d:96:c9:fe:9f:d7:f5:f4:95:04:a6:
         27:b5:5d:96:2c:b8:e5:c2:5a:75:b9:69:4c:14:6f:42:98:f0:
         c1:6a:96:f5:9f:d6:56:18:2b:eb:e4:29:2d:60:48:1e:4a:4f:
         f4:e5:9a:26:8c:6c:63:ab:22:c6:67:ab:b8:5b:7b:06:c4:6f:
         82:ec:b1:9c:dc:07:9d:09:ce:d6:25:66:d6:2c:87:f2:28:c1:
         bc:b0:41:3f:f5:ff:91:45:ff:2e:34:90:d9:6f:29:2b:71:21:
         bc:05:4f:7c:b3:4f:5e:92:f4:0b:d3:3d:c3:e9:ad:8c:e0:c7:
         a8:b0:e1:d2:d2:c6:5c:21:4e:75:67:4a:95:a9:06:53:1c:76:
         f1:37:b2:02:c0:54:b7:38:e1:74:f5:5d:78:44:16:0a:b6:f3:
         c2:25:93:e3:c2:53:24:a8:7d:df:f3:18:c6:0a:51:2a:93:e3:
         7d:78:1c:41:13:11:e5:c2:d4:f6:85:1f:4e:b4:75:9b:18:b6:
         ee:a4:c8:48:1f:bb:95:e2:c5:b8:b8:b9:99:57:79:75:f6:8e:
         31:af:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org