Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
File:                     323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa (raw, json)
Hash identifier:          aIe8l/ONPYOQc13DPerEH8HE1MKA6yIWAORrpoTzhao=
Subject key identifier:   3B:F1:E0:77:75:C8:30:BA:C4:6B:FB:C3:8D:6E:97:D2:62:0B:4C:1A
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       70EBDE9B2B80F802EBA3E564A8F8995AA4F25426
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:46 +0000
ROA not before:           Thu 04 Apr 2024 04:32:46 +0000
ROA not after:            Thu 03 Apr 2025 04:37:46 +0000
asID:                     28210
IP address blocks:        2804:56c:b000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:eb:de:9b:2b:80:f8:02:eb:a3:e5:64:a8:f8:99:5a:a4:f2:54:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:46 2024 GMT
            Not After : Apr  3 04:37:46 2025 GMT
        Subject: CN=3BF1E07775C830BAC46BFBC38D6E97D2620B4C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:67:22:b2:ea:c8:5d:72:9e:da:c2:3b:b5:
                    e9:c9:b9:fc:d6:dc:43:79:0b:ea:ed:20:e4:fc:50:
                    cd:5f:ab:3e:0a:60:25:3e:63:fb:fb:b7:ec:1c:c5:
                    d5:90:5a:00:d0:4d:23:37:9b:9c:39:c5:21:5c:75:
                    d4:20:34:c7:e7:27:c4:d5:74:d4:4e:09:d2:e6:d0:
                    eb:e8:ef:72:ed:5a:af:26:8f:41:73:cc:11:e6:65:
                    47:6a:90:ea:06:74:1a:7e:c2:62:4c:0c:ef:98:4d:
                    97:86:73:e5:89:dc:6e:b8:c6:c3:57:66:fd:c2:2f:
                    b2:7b:80:67:fc:b2:a5:54:fb:3a:c9:1f:a5:64:42:
                    c7:67:49:68:3e:87:54:68:48:81:a3:93:2c:68:43:
                    06:8d:aa:f2:da:6a:e6:b5:cd:59:2b:fb:97:66:2f:
                    01:e1:37:d7:60:b0:a0:d0:07:81:4e:fe:d6:68:a9:
                    65:14:6b:33:ee:ba:bd:67:5b:cf:7b:66:21:85:1a:
                    10:48:e3:58:5c:39:11:b7:b2:60:50:cf:17:c2:51:
                    d7:bc:7d:82:6d:1a:a5:e2:23:84:9a:b6:83:ac:10:
                    a1:a4:18:5b:96:fb:4b:c3:5b:a1:56:20:00:9d:4c:
                    69:94:cb:f7:fb:f2:b6:e4:7f:ca:63:fb:2c:db:f0:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:E0:77:75:C8:30:BA:C4:6B:FB:C3:8D:6E:97:D2:62:0B:4C:1A
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:b000::/37

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:68:65:f7:75:15:8c:43:fb:c4:f6:e8:4e:34:be:03:af:
         29:a6:c2:cb:72:45:19:0a:37:a8:dc:f7:3f:56:6f:e0:aa:b5:
         0c:4c:70:aa:12:19:af:5c:f2:e3:e4:dd:f0:be:f6:b1:6e:3f:
         d4:f3:2c:b2:b8:8b:0e:af:46:52:8e:f3:ef:eb:f4:16:51:d0:
         c7:f3:d5:a9:93:3b:22:e3:46:a9:9b:bb:14:e3:fe:2b:28:5b:
         ce:eb:19:53:fa:04:15:24:65:7a:01:50:ca:61:5b:55:9e:1b:
         46:97:56:ea:f6:04:06:3c:35:79:94:8b:89:ff:d9:1b:e7:33:
         04:87:86:84:14:e6:67:d0:3b:af:3e:ce:26:09:72:b1:b9:d6:
         7b:3f:15:ef:d2:13:89:1e:5c:b5:91:d8:13:60:70:39:96:80:
         c8:96:ed:da:fb:c3:e2:da:e6:64:81:36:85:f7:59:d5:4d:ed:
         e4:48:9e:a4:d3:97:cc:c4:9c:c7:00:1c:15:cd:1c:c1:29:ea:
         05:90:e7:36:72:c9:24:75:21:a3:37:9e:db:13:0c:06:aa:3d:
         43:d3:50:e8:df:2c:f3:30:69:de:b0:49:51:63:72:d2:50:7a:
         45:6f:bd:07:b6:91:a6:21:0e:8d:28:c8:59:ab:47:77:d7:62:
         cb:79:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org