Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa
File:                     323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa (raw, json)
Hash identifier:          4vQU1ml2q/Js4aUYgpAKQSix/yfVtS8PIpfcjwCx+Ig=
Subject key identifier:   FA:97:F4:90:52:6A:66:E3:2B:62:60:EE:15:2E:9E:A6:ED:BE:8A:9C
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6F5E8B3C10356A6D331C986CFCBB1638DEB00C46
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa
Signing time:             Thu 04 Apr 2024 04:37:45 +0000
ROA not before:           Thu 04 Apr 2024 04:32:45 +0000
ROA not after:            Thu 03 Apr 2025 04:37:45 +0000
asID:                     28210
IP address blocks:        2804:56c:b800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:5e:8b:3c:10:35:6a:6d:33:1c:98:6c:fc:bb:16:38:de:b0:0c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Apr  4 04:32:45 2024 GMT
            Not After : Apr  3 04:37:45 2025 GMT
        Subject: CN=FA97F490526A66E32B6260EE152E9EA6EDBE8A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:00:cc:fc:62:dd:5f:e5:80:74:e8:95:2f:
                    d9:3f:a8:d9:9b:aa:f8:5d:a4:52:cc:7d:9e:60:eb:
                    32:fc:95:4b:d7:14:ce:a6:b3:09:a0:57:62:68:ac:
                    ff:13:7a:46:c6:84:e0:6d:51:a9:1b:33:45:d2:a7:
                    a6:f4:6b:30:1a:1f:f3:96:0a:cc:e9:61:53:30:8e:
                    ef:fc:32:a6:76:bd:3c:7a:c8:da:91:d6:f7:55:d1:
                    77:62:24:6e:68:17:76:2d:90:ae:14:76:3c:aa:bd:
                    df:7f:bd:99:fc:5e:88:d5:e8:74:73:0d:6f:cd:02:
                    81:12:af:7d:26:0e:72:a8:2e:74:37:34:57:83:0f:
                    40:d6:9b:6b:8c:40:d4:44:85:b1:b0:6b:9e:18:15:
                    04:21:77:c2:d1:e2:37:6b:14:3c:79:bb:e8:27:a7:
                    4c:1d:0f:49:59:e5:2a:b2:ac:10:18:92:3a:7e:f6:
                    24:05:a5:af:64:50:fa:6f:e2:14:86:79:a6:2e:c3:
                    85:23:74:6f:f8:53:6b:c9:92:5f:d7:97:63:d5:ce:
                    09:30:53:86:de:c8:96:52:00:93:b7:5f:8c:79:e0:
                    54:60:73:ab:ec:3a:3c:1e:a3:1a:b2:ab:d1:24:5d:
                    be:99:54:bb:95:ac:e6:72:33:68:0b:3b:03:2b:9d:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:F4:90:52:6A:66:E3:2B:62:60:EE:15:2E:9E:A6:ED:BE:8A:9C
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623830303a3a2f33372d3337203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c:b800::/37

    Signature Algorithm: sha256WithRSAEncryption
         75:17:7a:33:eb:f8:03:e9:d2:0b:0d:b4:04:8c:a6:e2:9a:e4:
         4e:90:e2:c8:f6:8c:42:5b:3a:8c:9d:fe:0a:c1:27:54:51:c1:
         20:c9:7b:a9:4b:d9:91:e2:8d:21:48:31:03:c7:2f:9c:71:c8:
         00:fa:39:ce:9b:a1:5b:0f:5c:16:6e:49:af:dd:f0:af:8f:c0:
         79:8e:0f:f3:96:3e:08:de:9e:5c:8f:a2:8f:f9:9e:ab:e9:da:
         87:8f:a1:0e:a2:1d:04:cf:f6:e1:99:f9:8e:c3:30:0e:1a:5a:
         10:9e:7f:af:e4:3a:7e:5d:1b:ee:82:a8:56:a3:c9:3f:be:b5:
         e8:46:30:55:19:2a:27:11:d5:69:28:56:4a:39:30:5d:08:73:
         5c:a9:35:f5:29:27:9e:9a:2c:3a:28:5b:17:57:f3:a4:4a:69:
         e8:38:ad:21:e6:3e:8a:37:20:9e:db:ce:0f:de:69:7c:9a:59:
         41:ec:22:2f:24:c5:e1:69:b0:9b:d1:6b:48:c3:3d:8c:1c:a2:
         65:9c:7c:41:79:8e:38:85:ae:c5:72:ca:f8:75:c7:92:2e:b0:
         71:6d:af:05:79:db:78:ad:9a:c3:95:74:c2:1a:f0:32:06:08:
         52:5c:14:5d:76:de:2e:27:36:be:ff:c2:28:ef:d1:bc:e4:58:
         bc:8d:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org