Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
File:                     323830343a356538383a3a2f33322d3438203d3e20323639303339.roa (raw, json)
Hash identifier:          N7Y/8tm+umEOsqPpx+NXTxnC1aGbHu2GHzq6zOWddWQ=
Subject key identifier:   F6:33:66:36:DE:E4:EB:39:6C:A5:A0:09:7F:9D:3A:8A:5D:E1:61:EF
Certificate issuer:       /CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
Certificate serial:       0A1B8824D1DD53AD2FD209BE1A28819ED92BC441
Authority key identifier: 42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa
Signing time:             Wed 03 Apr 2024 20:12:58 +0000
ROA not before:           Wed 03 Apr 2024 20:07:58 +0000
ROA not after:            Wed 02 Apr 2025 20:12:58 +0000
asID:                     269039
IP address blocks:        2804:5e88::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl
                          rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 19:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1b:88:24:d1:dd:53:ad:2f:d2:09:be:1a:28:81:9e:d9:2b:c4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424DD3837DD98F89E3F7BC09D7D17B26CB974CE9
        Validity
            Not Before: Apr  3 20:07:58 2024 GMT
            Not After : Apr  2 20:12:58 2025 GMT
        Subject: CN=F6336636DEE4EB396CA5A0097F9D3A8A5DE161EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:ee:5b:2c:b3:35:ee:1a:80:95:84:d9:4f:
                    c8:97:15:53:8a:77:b4:04:36:4f:21:51:4c:1c:ba:
                    6a:a6:e8:ae:11:2b:9a:bf:1e:27:53:be:b4:4d:9b:
                    48:28:a4:08:b9:60:63:71:b7:4f:5a:2d:03:c1:e0:
                    78:93:1d:9c:d2:20:39:97:c5:5a:c9:5f:9e:b5:c1:
                    7c:f6:0e:22:a9:50:a5:10:16:01:8f:2d:66:6b:99:
                    74:36:30:04:8e:11:fe:08:62:99:00:dd:5c:38:5a:
                    1b:15:e4:86:50:9d:07:e5:e2:cf:e4:b7:53:1e:cb:
                    9a:37:7b:d3:08:c7:3c:c0:f5:43:5f:38:9b:0b:f0:
                    b9:5c:8e:c4:15:0f:33:40:74:5a:11:ac:98:9f:f3:
                    1f:98:22:63:7e:32:5b:7e:bd:8a:b6:c5:56:ba:c2:
                    7b:fc:59:fe:23:24:a9:9c:1e:49:6a:8b:d3:5e:2b:
                    8a:fa:4a:58:5d:27:56:cf:a0:60:e1:55:c3:b1:3e:
                    6f:e9:95:d4:1c:7e:ec:33:32:88:c4:ce:a3:0d:f1:
                    56:c8:02:91:25:a8:d2:df:99:5a:a5:28:bc:d6:d8:
                    6f:28:c9:46:0f:26:4b:3d:fd:76:71:ed:c5:a5:0e:
                    81:58:27:75:b9:b5:f8:1a:ab:bb:b9:22:d2:b6:4f:
                    59:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:66:36:DE:E4:EB:39:6C:A5:A0:09:7F:9D:3A:8A:5D:E1:61:EF
            X509v3 Authority Key Identifier:
                keyid:42:4D:D3:83:7D:D9:8F:89:E3:F7:BC:09:D7:D1:7B:26:CB:97:4C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/424DD3837DD98F89E3F7BC09D7D17B26CB974CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9BACTUDQ67ZoFoRdPtpa9uVCKVhTGKNQ8e8rYEb4TuLZ/1/323830343a356538383a3a2f33322d3438203d3e20323639303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:93:3d:e0:02:80:49:5a:22:d7:19:a9:bd:ee:be:27:ca:02:
         19:5f:54:28:b5:64:1d:9e:ef:0b:29:4d:e9:7c:7c:50:6d:a2:
         76:4e:aa:ae:e6:e5:ee:b3:34:d6:60:75:0e:21:f5:c7:db:d3:
         56:35:9b:bc:e3:d2:69:4a:b4:e0:d7:d1:a1:1b:bc:13:11:c6:
         ef:10:c6:6a:bb:04:48:2b:9b:34:10:2b:50:d0:0f:5a:cb:f9:
         ad:16:f5:e6:b6:62:64:d7:93:6c:03:52:60:e5:70:f7:1c:ee:
         c2:a3:e8:7d:f7:03:5c:dd:dc:4b:df:46:20:e3:2b:73:30:6f:
         53:c8:dd:7f:4f:b8:83:d5:54:2f:04:d2:1f:2d:11:2a:03:a5:
         80:4f:56:af:25:bf:f2:64:79:75:8f:27:c7:c1:21:e0:11:33:
         c5:a8:21:e4:9e:55:d3:b0:be:9e:2a:61:d6:b8:60:7d:d1:03:
         35:f9:55:79:b3:e4:25:76:1c:cf:ff:5d:b9:e6:f0:aa:68:e0:
         ce:c5:8d:5a:78:96:a6:da:34:d1:5c:e5:75:78:20:a8:bc:e1:
         49:a2:bf:60:46:c5:3e:98:bd:9e:20:e5:78:ff:df:03:5f:b6:
         56:22:3b:90:43:d7:11:0f:58:75:63:40:63:c3:d2:64:d7:75:
         81:a2:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:35:33 2024 by rpki-client on console-fra.rpki-client.org