Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          LiOtf8w4bgrmKa0EcZ0xIddoNezm/33yS32760HWb0w=
Subject key identifier:   65:6C:E5:A1:2B:AB:D0:EB:76:BF:C3:C6:CE:E8:DA:30:B8:45:39:80
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       26619FE002596E1C3FC541C2DDE066E634F491C3
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:61:9f:e0:02:59:6e:1c:3f:c5:41:c2:dd:e0:66:e6:34:f4:91:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:d9:c0:7d:37:ea:36:18:c4:54:99:37:f1:
                    8b:87:45:0f:41:41:e2:90:09:b4:d6:e3:c7:a3:e7:
                    95:5b:4a:0f:68:74:88:57:ca:81:19:5d:b6:21:ed:
                    39:0f:a2:b7:24:64:bf:7e:6b:0d:20:b5:71:5d:41:
                    59:09:d9:24:6c:e6:7e:1c:06:33:ea:64:08:7d:08:
                    98:98:93:cd:b3:2d:18:b2:c7:d6:20:99:23:da:d6:
                    54:84:0c:c7:88:76:ce:af:eb:3a:bc:b0:d7:30:1d:
                    bd:b1:d1:a0:57:b4:77:93:95:1f:de:66:86:10:25:
                    7a:e7:39:15:c5:6f:5b:35:26:ee:ef:4d:3c:b0:19:
                    9b:d0:d9:dc:21:63:5e:f6:0d:b2:12:8f:69:a7:6a:
                    ff:37:ea:17:eb:b7:61:68:ba:22:2e:28:f5:40:26:
                    4c:f4:35:d3:61:cb:1f:80:a8:3e:3d:15:89:a9:b0:
                    2e:d1:e9:d6:ca:8a:b2:1f:92:fd:94:5c:2f:bb:35:
                    05:fc:5f:9b:98:c0:76:64:ec:db:76:e1:c1:73:60:
                    d1:40:98:3a:2b:48:e9:e5:9a:67:92:f4:9a:12:2d:
                    ab:da:03:c4:11:7d:99:14:ca:73:65:14:f3:a6:90:
                    b5:48:4c:ee:92:0a:37:0e:8a:e1:a8:ab:5a:0f:44:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:E5:A1:2B:AB:D0:EB:76:BF:C3:C6:CE:E8:DA:30:B8:45:39:80
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a343030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:fb:cd:0a:0e:1c:af:b5:e9:1c:21:8e:c8:ae:d1:d0:7c:17:
         80:8f:05:a2:ec:dd:ac:1d:1d:b0:c8:55:42:66:52:36:c3:5a:
         c0:cd:6e:d2:ef:d9:56:c6:35:14:d3:a7:c1:2a:36:b4:7c:c5:
         08:3f:d1:0b:5c:a9:9d:5a:39:47:32:e5:d1:f9:18:ab:c8:ab:
         5e:97:14:e5:27:b1:7e:61:de:f9:c9:78:34:d8:c4:4f:20:06:
         82:59:f6:7e:c7:e6:b7:8f:eb:29:3f:56:a9:d1:84:f6:47:24:
         72:97:93:49:2d:4c:be:60:54:fe:e0:c3:55:55:a8:a2:f0:40:
         9e:78:93:07:4d:05:dd:2a:48:ef:04:a6:e4:41:e4:99:2a:c5:
         82:e8:95:18:ee:80:a8:4a:eb:17:eb:06:6e:b2:c7:32:77:c6:
         66:34:72:d8:9c:43:ec:bd:66:bc:5d:16:a8:b1:a5:69:b7:96:
         6c:0c:37:20:0e:4f:10:c8:cb:43:8d:26:14:9f:46:a2:79:2e:
         c5:36:da:29:13:87:45:d9:34:6e:a0:63:c0:f1:67:54:8c:17:
         c2:36:c8:76:18:da:53:a0:12:85:ba:49:12:b4:6b:86:f7:cf:
         72:32:05:d7:6e:0f:4a:f9:9f:4a:ad:fc:2b:72:39:08:0b:03:
         a9:1e:5f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org