Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa
File:                     323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa (raw, json)
Hash identifier:          LMMMaU9QJeH83fHcjEIg/lYH2yl3Tohvnp6tIJD1g3w=
Subject key identifier:   17:AE:35:F2:AD:74:5B:A5:F0:E7:39:6A:4E:70:6F:64:41:27:0A:6D
Certificate issuer:       /CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
Certificate serial:       5561A39E4B9DDFF62F7C0DA11D5A428B00120DBE
Authority key identifier: 9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa
Signing time:             Thu 04 Apr 2024 10:16:47 +0000
ROA not before:           Thu 04 Apr 2024 10:11:47 +0000
ROA not after:            Thu 03 Apr 2025 10:16:47 +0000
asID:                     28352
IP address blocks:        2804:ae0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:61:a3:9e:4b:9d:df:f6:2f:7c:0d:a1:1d:5a:42:8b:00:12:0d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB
        Validity
            Not Before: Apr  4 10:11:47 2024 GMT
            Not After : Apr  3 10:16:47 2025 GMT
        Subject: CN=17AE35F2AD745BA5F0E7396A4E706F6441270A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:e5:64:13:ac:73:dc:e1:78:d9:81:45:96:
                    50:dc:36:3a:4f:7f:e0:0b:d8:f0:d4:93:80:98:ef:
                    64:08:32:d7:74:47:7d:e3:f8:9a:38:63:cd:e6:08:
                    a2:66:95:92:b4:2c:af:93:2b:aa:69:90:6a:d4:bb:
                    04:36:06:7c:0b:a4:ee:79:2e:10:19:88:1c:17:6e:
                    45:78:53:5e:d7:01:3e:c9:7c:b3:65:a3:e6:8d:22:
                    ed:d1:aa:40:41:b1:a8:38:cb:4e:61:fd:73:12:ca:
                    4c:c3:8b:48:9e:e4:bd:c1:6b:d6:6a:48:eb:5d:42:
                    9c:b2:41:d8:65:5a:76:a3:04:89:82:68:0a:26:de:
                    56:b2:0b:e0:ea:68:8b:f9:7c:dd:3f:5a:0e:e9:1d:
                    ca:fb:ea:b3:08:78:d9:ca:cf:01:0c:d1:39:f0:af:
                    a4:1f:26:1b:15:ca:fd:b1:68:d9:51:1b:0d:b5:29:
                    a0:ae:7a:3b:3b:ea:62:5e:c9:9d:c5:c6:7e:9a:f5:
                    9d:7c:b7:08:fb:8b:ef:3c:7b:e0:74:b7:a0:6d:3e:
                    78:bb:24:c4:00:3d:c1:2f:88:36:8e:b5:14:b5:2a:
                    95:59:2f:2b:d9:3a:c9:db:b0:b4:21:4b:61:9d:03:
                    d6:99:77:15:ec:b5:fa:64:6c:57:fd:44:e4:fd:5d:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:35:F2:AD:74:5B:A5:F0:E7:39:6A:4E:70:6F:64:41:27:0A:6D
            X509v3 Authority Key Identifier:
                keyid:9F:C4:12:6E:0F:35:1E:67:FE:F9:B1:4E:CD:4C:30:C4:53:C6:3F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FC4126E0F351E67FEF9B14ECD4C30C453C63FFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/1/323830343a6165303a383030303a3a2f33332d3333203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:17:60:73:d1:56:b6:6d:17:10:ad:5d:33:73:ba:f2:2f:78:
         1f:18:0e:73:36:86:b8:32:0f:a1:ce:94:97:23:24:fe:80:25:
         0f:28:f8:7b:a6:96:65:ee:74:d7:8b:91:fa:f5:bd:04:e4:5f:
         3f:b0:43:b9:4d:7b:1d:12:bc:96:ec:5c:2c:25:24:35:57:ee:
         d6:4f:e2:49:79:31:98:21:35:dd:c1:35:54:6e:e4:2e:2c:57:
         a3:7e:3c:fa:1d:69:53:5a:35:89:a1:a2:b9:7e:4b:b3:8e:a3:
         3d:bf:d9:5b:23:3b:98:09:f5:84:b2:db:3d:48:0b:d7:d5:53:
         2f:bd:ad:d4:01:38:11:6e:e7:13:81:b0:e7:85:e4:99:aa:e4:
         76:3b:b3:ea:8b:bf:a9:98:56:a0:5d:57:9f:42:68:80:e9:87:
         f9:8c:9a:03:12:de:32:04:70:34:ea:e9:1c:8f:89:77:e7:76:
         0b:b3:78:29:0f:26:81:23:8e:7d:fd:1c:77:30:34:6e:dd:f0:
         97:c7:fb:3a:a4:e2:1a:f2:55:38:a4:18:24:25:19:64:1e:3b:
         3c:28:c0:5c:5c:fe:32:8b:da:29:4e:51:05:cb:70:0f:24:ea:
         02:d0:12:ad:96:61:e0:f4:cd:72:6d:eb:b3:51:dd:a7:57:f1:
         09:45:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:12 2024 by rpki-client on console-ams.rpki-client.org