Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          MdMCceHGJYbhOoiFGurHQbOKGX6dNWGx70e77TWs67c=
Subject key identifier:   CA:F5:4D:22:18:7A:19:D0:2B:D9:47:A7:D5:99:B9:F5:7E:BA:BF:6E
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       2444ED1B9DDA1DC375056CB3E9BA7F22863AE59F
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:46 +0000
ROA not before:           Thu 04 Apr 2024 04:32:46 +0000
ROA not after:            Thu 03 Apr 2025 04:37:46 +0000
asID:                     28210
IP address blocks:        2804:56c:2120::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:44:ed:1b:9d:da:1d:c3:75:05:6c:b3:e9:ba:7f:22:86:3a:e5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:46 2024 GMT
            Not After : Apr  3 04:37:46 2025 GMT
        Subject: CN=CAF54D22187A19D02BD947A7D599B9F57EBABF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:84:b5:3c:e7:a0:27:bc:72:b8:36:bd:b0:
                    ad:b5:17:0b:0c:e8:eb:3f:3c:1a:ed:d2:9b:50:bf:
                    0b:0d:92:2a:06:bd:21:38:47:dd:46:18:a1:01:54:
                    86:ac:41:0c:c5:e2:9c:23:a3:52:dd:65:cf:4f:14:
                    5c:dc:83:df:da:b2:6c:55:6d:03:2b:92:27:d6:e9:
                    9d:6e:01:27:86:57:05:e1:d9:ae:32:70:2b:cd:5f:
                    76:09:7d:e2:42:0e:0e:ce:5b:ad:b7:71:8b:31:27:
                    24:20:1b:bd:86:fe:23:94:41:b8:9c:2d:6f:66:a2:
                    57:07:ac:cd:55:aa:07:11:a6:d8:e0:6b:a5:9a:4c:
                    4c:8a:42:da:ad:53:ce:4f:6b:90:31:02:75:98:b8:
                    d8:6e:2e:5f:f8:ba:8f:18:d8:c4:5e:9c:50:4b:4c:
                    2e:7e:e8:92:c3:9f:d1:fb:94:9b:9d:e8:c7:6e:65:
                    cc:97:09:d7:88:48:a4:1b:4c:25:95:77:a8:c6:8a:
                    2e:34:fa:98:20:55:55:4a:e5:72:15:d8:1f:81:88:
                    d7:af:82:1f:6c:53:dd:0c:c3:10:6f:94:b5:b0:ee:
                    9c:0d:43:26:04:a3:22:05:24:7e:56:4b:1f:e9:3c:
                    14:0b:07:14:94:a9:9f:f9:76:58:c8:e1:20:30:6f:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F5:4D:22:18:7A:19:D0:2B:D9:47:A7:D5:99:B9:F5:7E:BA:BF:6E
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:2120::/43

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:14:fc:f5:ee:71:09:a4:43:fc:be:11:d2:24:8d:fd:9c:
         da:4d:6a:c9:33:2b:0d:04:ba:ad:b6:1d:58:b4:6e:dc:37:6e:
         d8:e0:9c:e0:f1:4b:c2:fd:19:4a:7a:9a:5f:69:da:6e:8d:f6:
         32:57:b7:63:d0:90:41:76:a0:13:f7:f2:15:6a:8e:d3:c0:29:
         4a:67:a3:c3:22:1e:c2:b5:92:4c:62:b8:b5:a6:a2:5f:21:cb:
         4e:8c:2f:9a:9f:f7:c4:19:d2:e6:fe:44:74:b5:a3:a5:4e:51:
         d9:80:27:fe:0e:07:b8:fc:21:b8:82:dd:78:4d:f7:47:83:1c:
         e8:ce:12:f3:45:8a:da:8c:cc:e4:be:bd:19:3a:a7:94:bb:45:
         7c:c8:15:6e:eb:0d:b7:96:09:7c:fd:89:d6:30:6d:cb:31:f2:
         9b:e6:4d:0f:1c:b5:23:dd:7f:d8:46:58:b2:e4:2a:8d:a9:1c:
         b8:fa:f0:8e:b7:0d:46:05:9d:67:43:c7:e7:b6:f6:f8:ac:2f:
         6d:1a:07:c2:32:d7:bc:95:07:fe:de:ef:ce:8c:ad:98:ed:97:
         bf:df:d4:55:9c:d0:62:fb:6a:4a:8f:41:2e:65:90:4a:1a:1a:
         48:96:c4:a7:e9:c5:be:e2:5f:df:7e:58:a2:aa:88:c3:be:ed:
         18:96:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org