Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa
File:                     323830343a333437633a3a2f33322d3438203d3e20323635343631.roa (raw, json)
Hash identifier:          DkPMKoyhapqrrjUOX/YhKeFfy4L9q+YO9o9LIIOa+/E=
Subject key identifier:   81:D6:15:DE:55:74:15:15:8B:CD:4F:AF:4C:24:DF:85:16:27:F4:35
Certificate issuer:       /CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
Certificate serial:       26578487792ADC30E9893F4E18E260C1DB59AD3E
Authority key identifier: 08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa
Signing time:             Thu 04 Apr 2024 17:52:23 +0000
ROA not before:           Thu 04 Apr 2024 17:47:23 +0000
ROA not after:            Thu 03 Apr 2025 17:52:23 +0000
asID:                     265461
IP address blocks:        2804:347c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:57:84:87:79:2a:dc:30:e9:89:3f:4e:18:e2:60:c1:db:59:ad:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B
        Validity
            Not Before: Apr  4 17:47:23 2024 GMT
            Not After : Apr  3 17:52:23 2025 GMT
        Subject: CN=81D615DE557415158BCD4FAF4C24DF851627F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:12:f0:18:1d:25:20:3d:9c:eb:3a:c8:fb:
                    87:cc:9a:dc:db:fe:1e:fd:7f:8e:c6:bb:07:7b:fa:
                    8a:52:9a:84:5b:40:ed:04:09:0f:32:8c:ae:a5:c8:
                    9c:2d:1e:b3:6d:dd:b7:a9:a2:fd:39:e3:d9:8e:b1:
                    01:2e:62:eb:1d:9d:70:90:a6:b0:dd:5c:7d:2a:b2:
                    78:c7:99:38:7f:a7:66:e7:d6:f7:4f:7e:55:42:fb:
                    9f:d8:f0:2c:97:d5:21:0e:6e:1e:03:fe:cd:33:bf:
                    02:41:fc:48:74:cb:b9:ee:e8:ea:97:a9:c0:4a:f6:
                    ee:fd:93:c3:17:34:56:b4:d3:8e:7b:25:fb:01:7b:
                    d5:8b:34:e3:54:cc:bf:b0:d8:af:7f:d4:d8:f9:08:
                    ef:3d:61:f3:0e:f5:72:e2:a8:f3:22:88:3f:41:a0:
                    8d:60:ad:06:43:83:de:89:9f:7f:99:40:34:16:be:
                    1f:e6:0c:29:6b:64:0d:ad:92:66:4f:94:5b:0b:aa:
                    a6:a2:10:ab:cf:67:aa:12:b1:00:d5:6a:94:d2:17:
                    d7:f7:7a:44:44:94:4b:1c:d1:b8:46:d6:18:59:71:
                    31:14:f8:5c:7f:b1:35:aa:41:c2:78:30:5a:a6:dd:
                    6a:61:3e:17:2e:24:1a:24:3e:33:69:7c:3b:18:74:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D6:15:DE:55:74:15:15:8B:CD:4F:AF:4C:24:DF:85:16:27:F4:35
            X509v3 Authority Key Identifier:
                keyid:08:37:B5:32:3E:CC:A5:9A:C2:E4:D7:DC:C6:83:A9:59:2A:5E:CB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0837B5323ECCA59AC2E4D7DCC683A9592A5ECB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/1/323830343a333437633a3a2f33322d3438203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:347c::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:bc:95:df:4e:c9:03:13:63:07:19:e1:f9:84:74:74:47:3b:
         95:64:90:e3:5d:5f:eb:06:e6:17:cf:f9:b4:a0:38:ff:74:5f:
         9d:0f:a1:c9:40:56:41:e7:8c:0f:79:52:71:81:34:de:6d:af:
         bf:e4:ae:e3:e0:78:b9:e2:48:08:79:b0:70:d5:0d:17:bd:5f:
         b2:06:03:5b:30:4e:e6:ee:5f:5c:1e:7a:1c:88:29:ee:fb:ab:
         f3:4c:62:c8:84:37:05:25:2e:04:21:fe:9b:9f:5c:83:e7:15:
         c2:e1:7a:f0:fc:8e:9d:06:62:10:8e:c6:7a:c0:85:eb:45:94:
         3e:2c:d5:8e:72:d5:04:20:96:8b:da:ec:1b:0c:d9:33:98:72:
         c4:81:e7:a2:e7:8f:f7:7d:f3:9e:9d:33:c5:c5:ed:69:6d:fa:
         ac:c2:d6:a5:dc:93:5d:c6:32:f6:6c:9d:e8:59:dd:73:26:be:
         0d:e1:b0:14:85:fc:64:7f:8b:2a:28:e2:d9:24:94:0c:d7:b4:
         d9:1c:1c:8c:6b:b5:cf:0b:0b:de:b3:33:77:f5:47:28:ed:cd:
         1b:98:89:12:bf:74:4d:41:c3:37:68:92:cf:be:98:5b:88:a3:
         fe:89:e4:ac:2c:c5:b1:b4:63:ee:9c:d6:9e:0d:26:e7:9e:23:
         36:d1:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org