Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          y9rDlJHch2XrCeaojXqztx4Q/SPLUfXFVorDJMc/rVc=
Subject key identifier:   E6:7C:F7:DC:24:45:C1:70:55:4E:AB:51:11:D7:67:2B:EC:48:0E:8B
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       6D5ACDC3B6817FE75E647054847FAB0D1FD979FE
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5a:cd:c3:b6:81:7f:e7:5e:64:70:54:84:7f:ab:0d:1f:d9:79:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:3a:dc:54:4c:7f:62:24:d3:3c:3d:97:00:
                    01:bc:d0:6d:b7:bf:f6:d4:af:1e:b7:94:ea:71:12:
                    8f:54:0b:1a:02:4f:4c:c0:61:79:2a:8d:b8:6a:58:
                    3a:14:11:cb:7b:19:a4:64:be:64:16:0c:e8:92:e7:
                    0b:0c:cf:01:ed:b1:11:a5:2b:30:33:23:c9:7c:68:
                    f6:f3:0b:1b:5b:db:9c:11:55:4a:56:a7:24:9e:a0:
                    82:3c:e5:24:fd:2e:21:86:89:24:1e:ab:f3:ce:cd:
                    ac:f8:42:68:07:90:64:3e:9e:ff:c9:8f:97:15:ae:
                    f6:62:2f:eb:b3:23:35:f9:8e:df:14:8a:c1:35:b2:
                    5a:96:a7:aa:5b:2c:14:71:bf:c5:7e:f1:13:0a:87:
                    54:8d:cb:76:1e:a7:2d:c1:6d:d5:23:b4:e7:2a:47:
                    16:07:1b:37:50:09:01:6b:20:4e:dd:1a:23:e7:06:
                    59:fc:2f:09:de:9d:92:f5:56:83:20:36:ff:31:33:
                    cf:76:6d:34:43:83:50:84:5d:e9:67:8d:fb:57:4b:
                    37:71:c7:2d:51:20:9e:ff:70:c8:74:b0:53:9f:ee:
                    a3:d5:1b:37:a6:f7:d7:64:7f:0c:db:b2:8e:1d:cd:
                    6a:10:66:e0:69:45:2c:38:4c:b5:08:b7:69:c1:86:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:F7:DC:24:45:C1:70:55:4E:AB:51:11:D7:67:2B:EC:48:0E:8B
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a363030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:a0:81:6e:25:85:f8:6d:6a:6e:1e:fb:41:92:ec:3f:45:
         65:45:ab:0e:40:1c:87:9a:df:22:78:59:83:21:65:78:35:fa:
         51:4e:93:d9:e8:3c:71:b4:86:5f:90:97:4f:65:43:dd:3d:2e:
         a4:ff:92:b5:63:aa:76:1f:a6:d7:3f:65:69:3d:be:90:c4:b3:
         2c:8b:c9:8b:ed:c2:a9:ee:28:d5:8c:a4:52:49:f1:56:b5:b1:
         05:6b:1b:27:d7:9c:0b:0a:cd:51:b4:27:2d:58:39:43:12:97:
         80:92:70:9f:97:0d:9d:e8:41:60:40:6b:7c:fc:c8:7b:86:4e:
         9e:75:2c:d5:2f:f1:74:e8:66:33:0a:a4:b6:1a:fa:5e:85:d7:
         65:10:99:13:15:85:95:5a:9c:e1:ef:d5:27:1b:a5:7d:e9:7a:
         3d:69:06:6e:75:5f:fe:da:b8:6f:b4:fb:fc:90:43:d7:d5:a9:
         3b:2c:47:0f:7a:db:96:1c:84:7e:75:79:ea:5b:d5:b5:b3:5b:
         81:57:12:eb:64:57:e5:db:fc:0b:f4:6d:75:6a:0a:e4:d0:e0:
         bb:6a:6b:06:fe:ad:94:41:0c:50:5f:d4:34:6f:02:fd:e1:5b:
         0a:d4:8b:07:b8:51:7a:95:fc:d0:36:94:dd:8b:ee:5d:6e:76:
         46:49:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:14 2024 by rpki-client on console-ams.rpki-client.org