Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa
File:                     323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier:          uluxV+1tCmwYB2DWyGWHTTIDw/1+cLhr+dK66GUj8KA=
Subject key identifier:   32:DA:B9:21:31:67:07:C4:45:D0:90:C5:C9:F0:B4:E4:EE:4B:59:85
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       1E1C21BF638361E1A4B99800096E0146C53FE8A2
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:50 +0000
ROA not before:           Thu 04 Apr 2024 04:32:50 +0000
ROA not after:            Thu 03 Apr 2025 04:37:50 +0000
asID:                     28210
IP address blocks:        2804:56c:21c0::/43 maxlen: 43

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1c:21:bf:63:83:61:e1:a4:b9:98:00:09:6e:01:46:c5:3f:e8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:50 2024 GMT
            Not After : Apr  3 04:37:50 2025 GMT
        Subject: CN=32DAB921316707C445D090C5C9F0B4E4EE4B5985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:31:e5:cb:45:47:87:96:5a:96:7f:4d:a5:70:
                    77:8d:6e:26:52:23:cc:d2:54:3b:95:47:f1:03:6d:
                    e0:ce:58:bb:4d:c0:d2:06:31:af:7c:aa:f5:cc:b1:
                    2b:6e:64:6a:2d:c6:4e:c4:ac:11:69:51:13:2d:a3:
                    c6:41:d5:7c:1d:52:43:22:c2:15:55:e0:bc:da:06:
                    95:1c:98:23:38:ee:e7:e6:61:44:72:6c:da:15:98:
                    fe:c3:d1:4d:c2:27:8a:92:1c:d9:8a:94:fc:12:68:
                    19:9c:3e:1f:c1:fc:89:b9:39:8a:50:5d:c4:2b:f9:
                    7a:cf:a4:c9:2e:3f:61:22:50:28:c3:86:c2:cc:6b:
                    da:e8:09:15:77:5a:21:fe:57:45:d6:81:b2:48:e4:
                    a9:60:85:63:4b:d9:92:1a:de:39:1a:04:46:24:46:
                    c0:cf:56:ce:8b:f0:fb:ed:d5:d7:d0:f6:c1:56:74:
                    d0:46:cc:58:a2:25:c0:25:9b:a6:ed:c5:2c:d1:73:
                    65:74:ea:ad:19:5b:ec:ce:03:77:0f:94:ff:11:40:
                    f7:e9:b9:8b:e7:6a:97:85:d6:1f:a0:63:24:6b:03:
                    0a:e3:21:5f:da:4e:ae:10:51:7b:aa:53:d4:c3:b0:
                    54:cb:ef:f6:86:4a:40:d1:14:17:5a:e1:be:09:24:
                    9f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DA:B9:21:31:67:07:C4:45:D0:90:C5:C9:F0:B4:E4:EE:4B:59:85
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323163303a3a2f34332d3433203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:21c0::/43

    Signature Algorithm: sha256WithRSAEncryption
         75:11:51:71:28:a5:3e:23:59:1a:7e:76:90:a8:a5:81:bd:b0:
         53:49:f9:40:54:7a:dd:ec:af:2c:3b:77:a4:52:b1:73:96:be:
         ed:2f:49:82:6c:86:3b:79:59:f1:72:e5:77:48:64:42:41:b5:
         ef:84:16:90:e1:85:b8:6f:6b:2b:71:97:67:57:88:e8:86:1e:
         d7:58:37:30:f4:89:e7:e6:2c:b2:cb:27:da:27:9a:3f:9d:96:
         4c:6a:fb:aa:71:33:dc:26:bb:91:ef:82:52:a8:b0:51:46:1b:
         bc:42:ec:64:b2:15:34:8f:96:8f:df:13:65:ec:30:bb:bf:28:
         1e:bd:4e:28:3b:aa:53:38:8b:04:65:74:e3:06:44:e0:1a:91:
         0e:0a:61:20:2b:0f:7f:6e:0c:90:32:4c:39:18:84:f0:40:16:
         2e:42:eb:11:b1:64:dd:6d:a0:b5:91:0e:8f:83:ed:85:7b:22:
         ba:07:10:f1:37:c0:fa:86:2a:a6:93:74:3e:7e:99:09:eb:23:
         0d:33:65:c4:8f:2b:a8:bb:ce:a4:d9:1d:06:ec:5a:6c:f8:81:
         f9:71:1f:bd:08:67:07:8d:09:6c:85:2e:6f:59:93:d5:64:b4:
         66:21:8f:9b:8d:e8:85:e6:c9:fe:23:b7:45:47:44:02:a7:2f:
         c0:a9:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org