Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa
File:                     323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa (raw, json)
Hash identifier:          6z5GPGoVztHFVJVDsYJouw2fegdDT5z+IIW+4Y29QQ0=
Subject key identifier:   38:B6:1F:76:98:53:39:3F:C9:9A:EA:A0:41:A1:CC:32:AE:A0:B8:5C
Certificate issuer:       /CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
Certificate serial:       22530F47D7E80B457F29AB0B4B864FEF61F66869
Authority key identifier: 10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa
Signing time:             Fri 23 Aug 2024 19:50:44 +0000
ROA not before:           Fri 23 Aug 2024 19:45:44 +0000
ROA not after:            Fri 22 Aug 2025 19:50:44 +0000
asID:                     61689
IP address blocks:        2804:1d04:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl
                          rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:53:0f:47:d7:e8:0b:45:7f:29:ab:0b:4b:86:4f:ef:61:f6:68:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8
        Validity
            Not Before: Aug 23 19:45:44 2024 GMT
            Not After : Aug 22 19:50:44 2025 GMT
        Subject: CN=38B61F769853393FC99AEAA041A1CC32AEA0B85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:d9:37:60:fa:a4:53:1e:68:86:02:8c:27:
                    e1:f4:ef:5f:5c:d1:4b:ea:58:8f:64:7a:9f:58:dd:
                    01:b7:04:2b:4d:63:52:6f:70:02:a8:c9:de:e8:11:
                    4e:b7:13:d3:3a:d4:0c:d3:4f:1b:87:7c:75:cd:62:
                    f5:0f:2f:ed:d3:dc:b5:28:84:dc:eb:05:38:da:fd:
                    95:9a:51:dd:0d:1e:bb:9c:95:0c:bd:da:64:09:37:
                    4b:5c:5d:01:b6:ae:80:b5:01:e2:ec:0f:8d:0c:f0:
                    a9:dd:ae:01:1e:28:12:36:32:3f:36:bb:ae:3a:a6:
                    29:5b:0f:0c:7d:f9:29:b1:24:cb:e0:17:dd:e4:98:
                    16:04:95:cf:18:4f:cc:95:35:f3:a4:8e:3d:bf:d6:
                    86:c3:76:a4:88:c7:ff:d2:a7:99:70:66:ad:da:17:
                    4a:46:bc:27:5f:bf:62:f1:55:6c:d3:b7:5e:28:f9:
                    b6:90:30:a3:2f:f0:be:c0:9a:7e:9c:be:18:7a:81:
                    fb:b0:55:25:e0:12:7b:ab:cc:01:4f:3b:17:83:15:
                    3b:d6:1a:a1:1a:f1:9e:98:b5:b9:23:a1:bd:6e:42:
                    d5:c4:68:37:00:58:f9:c8:7e:3d:53:42:7a:45:00:
                    da:65:45:60:7f:d2:04:d3:62:55:86:85:0e:9f:a4:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B6:1F:76:98:53:39:3F:C9:9A:EA:A0:41:A1:CC:32:AE:A0:B8:5C
            X509v3 Authority Key Identifier:
                keyid:10:AE:8C:BC:A0:92:BB:DA:E3:C0:6D:F9:94:1E:4C:00:AB:06:56:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10AE8CBCA092BBDAE3C06DF9941E4C00AB0656F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/0/323830343a316430343a633030303a3a2f33362d3336203d3e203631363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d04:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:fe:9f:3e:bf:fc:51:a2:bc:45:cd:0c:a5:03:76:be:b8:
         15:2a:b6:8a:28:30:b3:3d:8f:3b:7c:bc:c7:c4:c3:11:ef:60:
         a9:06:e1:f8:0b:14:7d:44:e4:d9:39:2c:fe:f5:ce:78:bd:39:
         40:89:f5:73:e8:bb:ce:da:b3:b3:07:d4:f0:67:8b:5c:d1:44:
         30:43:e7:89:97:3f:c4:89:47:8c:24:f2:e6:f4:d9:48:d3:a8:
         fb:30:e7:7b:4e:b2:a5:69:01:92:e9:b7:10:14:fb:e0:fa:57:
         09:c3:27:e5:1e:92:5c:31:be:93:97:44:13:c2:cc:1e:d3:34:
         6b:b9:c7:f8:b7:03:6b:e7:e2:9d:45:9d:8d:30:ae:a4:20:3d:
         84:d4:96:17:4e:fd:e9:fe:b3:32:f8:b1:c3:fc:0f:ae:38:c8:
         46:dd:32:dd:24:f4:2d:88:b5:23:a4:f1:de:7f:a4:41:32:01:
         3a:b8:13:71:0e:c4:6d:be:27:cd:9c:10:b7:b1:22:d3:fa:f1:
         c2:91:ae:a9:28:f6:24:dc:b7:4f:52:b4:dd:50:ec:7a:72:cc:
         e6:44:61:bf:ab:b9:30:10:e4:07:ad:94:01:15:96:48:37:e4:
         3c:69:3c:5b:69:cc:20:90:d3:54:86:a6:cc:4b:82:66:e6:91:
         7f:e9:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:34:02 2024 by rpki-client on console-ams.rpki-client.org