Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
File:                     323830343a313866633a3a2f33322d3332203d3e203631373637.roa (raw, json)
Hash identifier:          818eK7NS5Tw+yNdvGT015E2dad/e55DFmZmTLQJiZkw=
Subject key identifier:   C1:2F:6E:84:32:9E:4E:D0:0D:59:1B:8B:A3:DD:20:56:C7:66:60:15
Certificate issuer:       /CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
Certificate serial:       4FB713581F4350195560F56A52F6440858031D43
Authority key identifier: 2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa
Signing time:             Thu 04 Apr 2024 02:47:44 +0000
ROA not before:           Thu 04 Apr 2024 02:42:44 +0000
ROA not after:            Thu 03 Apr 2025 02:47:44 +0000
asID:                     61767
IP address blocks:        2804:18fc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl
                          rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b7:13:58:1f:43:50:19:55:60:f5:6a:52:f6:44:08:58:03:1d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4
        Validity
            Not Before: Apr  4 02:42:44 2024 GMT
            Not After : Apr  3 02:47:44 2025 GMT
        Subject: CN=C12F6E84329E4ED00D591B8BA3DD2056C7666015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3e:c2:af:24:43:84:98:b7:c2:ea:7e:03:59:
                    27:0a:56:59:25:46:f6:72:d8:38:5c:2b:f0:bb:d8:
                    8b:cc:f8:4f:1e:61:38:73:93:27:a1:ba:b6:22:90:
                    7a:a6:bb:56:53:3c:30:92:8b:ef:c7:ba:bd:50:fa:
                    e2:4f:34:e6:ee:a0:cb:e4:36:2f:5f:ff:79:4c:9c:
                    cb:cf:24:b9:be:7b:ed:00:ee:45:dc:f8:e3:f6:90:
                    ce:01:26:32:8e:95:d2:9f:21:67:62:de:2c:c2:af:
                    4b:fe:00:b4:e8:3b:88:51:ce:03:4a:3c:55:aa:51:
                    16:36:ed:72:f9:e3:17:7f:88:c5:76:56:b5:76:72:
                    f3:53:4d:c5:90:15:4b:a8:d2:9d:f5:bf:b2:b9:21:
                    27:7a:f3:60:de:70:cd:04:e3:1d:fc:ac:d9:37:1f:
                    f2:97:26:21:f4:b2:9d:7c:3c:bd:b8:01:a8:9f:cb:
                    07:7d:29:fb:f3:a8:d2:d3:11:a0:70:dd:2c:33:85:
                    f1:c5:92:87:0b:07:ff:e3:40:82:88:81:dd:04:35:
                    6f:45:8b:0a:20:f4:2e:46:1b:55:7b:a7:53:d8:9b:
                    dc:44:e2:19:1f:58:c9:e4:94:de:58:b3:bd:e1:35:
                    86:f5:78:a4:3e:a8:02:e8:ed:52:51:90:82:20:b8:
                    f2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2F:6E:84:32:9E:4E:D0:0D:59:1B:8B:A3:DD:20:56:C7:66:60:15
            X509v3 Authority Key Identifier:
                keyid:2F:FA:D1:83:60:1C:6C:AE:4C:D1:E5:BA:12:B0:19:00:5F:FC:2E:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FFAD183601C6CAE4CD1E5BA12B019005FFC2EE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/1/323830343a313866633a3a2f33322d3332203d3e203631373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:53:06:19:b3:ef:25:fe:5f:c3:8d:aa:c2:a4:1e:cb:39:76:
         6b:06:32:ff:8b:05:ed:19:84:1c:54:20:e2:bc:c1:7d:7c:fc:
         db:f6:99:47:3d:39:30:00:73:58:be:ec:85:38:2c:17:e4:43:
         f7:43:c2:3e:d5:8c:fb:0b:2b:28:99:4b:30:37:af:a6:f3:02:
         c1:f3:11:bf:4d:64:02:19:29:9d:16:78:07:a1:4c:50:30:28:
         17:0f:47:07:e0:cb:13:4f:c4:98:bd:2d:0b:fa:e6:4b:4c:db:
         3c:e4:ae:cb:4d:cd:f1:fe:ed:15:83:e2:68:f2:e5:83:91:18:
         a7:af:64:43:f9:4d:4a:17:bb:99:fc:92:1b:30:6e:a1:49:50:
         a9:7b:1c:c5:a8:b9:2f:1e:f0:f1:c5:99:07:14:18:0e:c4:7e:
         dc:16:17:72:51:25:d7:81:18:1d:ef:02:fd:52:18:8f:55:fe:
         c9:fc:c0:6b:f3:70:c9:a6:76:6c:7f:58:aa:41:e0:ed:2b:be:
         a9:87:8f:e9:9b:a8:9e:b1:4a:e8:99:41:c1:68:30:20:4d:6f:
         79:97:35:12:b2:a6:63:3c:3f:48:62:eb:f1:22:56:c7:e2:cb:
         7f:37:17:31:5d:6f:20:0c:08:d2:b1:c7:26:cb:8e:9e:7c:44:
         87:68:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org