Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa
File:                     323830343a336232303a3a2f33322d3438203d3e20323636313331.roa (raw, json)
Hash identifier:          aotSUuUhkkqdAKKY0yXQmcHNkA1SU1d5UCcJ60p+Pp4=
Subject key identifier:   B6:77:9C:84:E8:6F:E2:DC:1C:72:0E:2C:B0:F1:15:4A:D6:AC:1F:FB
Certificate issuer:       /CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
Certificate serial:       0ECF013222BFB3BC3E2DF2E3A9DC7083792D834B
Authority key identifier: 93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa
Signing time:             Thu 04 Apr 2024 18:03:02 +0000
ROA not before:           Thu 04 Apr 2024 17:58:02 +0000
ROA not after:            Thu 03 Apr 2025 18:03:02 +0000
asID:                     266131
IP address blocks:        2804:3b20::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl
                          rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:01:32:22:bf:b3:bc:3e:2d:f2:e3:a9:dc:70:83:79:2d:83:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9339F720CFD0D8F91A9A8F916D7932CEBE3010CD
        Validity
            Not Before: Apr  4 17:58:02 2024 GMT
            Not After : Apr  3 18:03:02 2025 GMT
        Subject: CN=B6779C84E86FE2DC1C720E2CB0F1154AD6AC1FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:63:4a:b7:a0:c5:26:76:92:eb:50:ee:fa:
                    af:df:1e:ae:e5:2e:b9:75:9d:c8:1e:30:b5:35:09:
                    fa:f6:6a:79:1a:c6:d2:0e:92:8b:ac:2b:6a:92:cc:
                    53:cc:2f:df:3d:51:58:c7:3b:25:c3:cd:a6:a6:de:
                    1b:39:10:0e:00:83:4d:17:63:25:b8:d9:82:07:27:
                    20:ac:af:64:70:a6:84:c8:ad:43:84:ea:1d:1f:55:
                    5e:66:08:2c:9a:25:fb:07:c8:e3:6d:c3:60:1c:09:
                    f9:36:c1:3c:20:3e:aa:89:fd:a1:c5:73:21:22:a5:
                    03:fc:6a:86:6b:48:e2:9d:6e:ef:8e:89:ba:dc:be:
                    e9:5a:8e:1e:42:be:19:be:15:8b:5d:bc:b6:fc:5a:
                    99:27:a3:62:16:08:5e:5c:3f:98:1b:80:9d:de:27:
                    1f:8f:d5:d0:99:28:c9:7d:58:ef:27:23:dd:98:3e:
                    e9:02:20:ac:12:bb:d3:eb:e0:65:32:3f:df:76:43:
                    c1:fd:66:3a:f7:07:ee:06:eb:17:e9:8d:65:01:8a:
                    77:e3:31:17:22:31:26:b7:b8:7e:9e:db:4c:2c:2b:
                    fc:88:41:ad:59:bd:d5:10:fd:d3:ce:9b:75:31:15:
                    73:f8:47:bd:ea:01:b1:d1:d0:c0:38:4f:2e:fc:06:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:77:9C:84:E8:6F:E2:DC:1C:72:0E:2C:B0:F1:15:4A:D6:AC:1F:FB
            X509v3 Authority Key Identifier:
                keyid:93:39:F7:20:CF:D0:D8:F9:1A:9A:8F:91:6D:79:32:CE:BE:30:10:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9339F720CFD0D8F91A9A8F916D7932CEBE3010CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Ai4LXrxiPEcD1TGzp3YHDCRaD3ZDHpcrZH9LGSC1taZ/1/323830343a336232303a3a2f33322d3438203d3e20323636313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:70:39:22:e1:61:93:7b:00:55:96:88:ed:bb:d5:55:52:70:
         4f:8a:ff:32:ff:e2:cf:cb:1d:e1:20:64:37:ce:3c:fc:45:a3:
         18:7d:70:59:6d:26:64:8a:38:3c:ea:1a:ac:43:22:82:ba:dc:
         e5:ed:9a:38:6e:f1:43:39:6b:40:08:00:23:b8:3d:70:d4:db:
         73:ee:f1:67:2c:47:59:13:c4:9a:92:79:29:ea:fd:a0:11:be:
         a6:d5:4a:b8:c8:8a:35:5e:a1:f0:a0:a7:26:75:a0:65:ab:a9:
         28:1f:df:25:fe:ec:a2:70:35:24:92:67:84:3d:c3:d9:40:45:
         b6:5b:37:68:65:20:61:18:62:d1:3d:74:90:d1:2a:69:4e:bf:
         98:10:c7:61:a2:28:72:35:1a:d9:4b:15:4e:1e:5c:62:ad:71:
         1c:e8:bd:a9:75:01:ad:f5:f2:bc:3a:31:c7:88:58:3d:b4:bd:
         b1:d7:8f:e6:a5:18:ac:38:0c:fa:0b:2c:11:a8:c9:d4:fd:d1:
         10:ec:51:6f:b4:5f:2e:1d:1f:be:63:37:7b:9f:0d:b3:30:95:
         fd:51:82:1f:f2:11:79:ff:43:77:14:0d:c6:d6:28:c1:86:33:
         ec:94:7a:a6:2b:cd:bb:db:7c:3a:9b:aa:c3:a7:c0:53:59:1d:
         f4:4e:f3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:00 2024 by rpki-client on console-ams.rpki-client.org