Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa
File:                     323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa (raw, json)
Hash identifier:          iLXiz//SOCf4YdMgQHf77iMwgjy+hSyEm0xp1tA3PV8=
Subject key identifier:   A5:94:7C:6E:A4:77:70:6E:C2:15:58:7E:1F:2F:96:47:85:E9:05:BD
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       4ECEACDF74272CB40F9F8BBD2463D63403C2E2C2
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:53 +0000
ROA not before:           Tue 01 Oct 2024 14:00:53 +0000
ROA not after:            Tue 30 Sep 2025 14:05:53 +0000
asID:                     265175
IP address blocks:        2804:2bc8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ce:ac:df:74:27:2c:b4:0f:9f:8b:bd:24:63:d6:34:03:c2:e2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:53 2024 GMT
            Not After : Sep 30 14:05:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:5f:73:e8:8c:32:c1:e7:e9:a1:95:28:de:
                    7f:0f:38:d4:e3:f6:6c:a8:1c:12:c7:e4:88:39:d7:
                    b8:38:fa:ca:a9:68:48:09:1d:3f:a6:5d:85:a8:17:
                    73:32:c3:7d:0b:67:0e:1b:ac:9a:21:6d:1a:31:d3:
                    0e:16:a5:02:29:b3:44:e7:b6:cf:64:34:10:b2:c5:
                    ff:10:ca:52:18:c5:8d:80:50:1a:4b:9e:68:f2:a1:
                    cc:2e:6c:04:d2:f0:87:05:0a:f7:f5:3a:24:bd:54:
                    a0:44:df:3f:a6:c1:3f:6a:c0:42:ca:74:fe:6a:3d:
                    cf:af:d6:5a:cc:de:f7:bd:fc:4a:b5:2f:ca:c6:9b:
                    6c:10:df:44:eb:42:e8:16:60:80:da:7e:31:32:20:
                    5f:03:50:99:d3:42:34:d8:5f:c6:1b:41:b1:4a:9e:
                    56:a1:ba:4e:82:73:cc:d7:37:81:d1:4a:68:a1:19:
                    2d:ab:c2:18:48:8d:13:50:61:a0:42:34:fd:46:f4:
                    29:fc:cb:95:86:7d:db:be:7c:c8:64:aa:2b:79:8e:
                    cf:39:43:80:1e:2b:94:4f:5a:c2:d2:e2:49:43:f8:
                    f0:9f:df:cd:be:78:02:71:5b:48:13:6b:fd:9e:0d:
                    16:1f:29:4d:13:8d:e1:4f:8f:ad:18:f3:79:a3:2c:
                    f1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:7C:6E:A4:77:70:6E:C2:15:58:7E:1F:2F:96:47:85:E9:05:BD
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a383030303a3a2f33332d3333203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:06:f1:71:b5:23:65:f6:68:24:b9:8a:5a:12:76:47:2c:30:
         be:06:57:fc:da:0a:2d:35:2f:97:cf:e6:69:a4:bf:ea:b4:00:
         0c:85:64:e1:5a:34:7d:41:ea:c5:f3:ab:25:47:fe:81:5c:41:
         39:92:d4:a4:40:56:9e:43:8f:b2:04:17:5b:3b:1f:50:e5:62:
         e4:15:c9:20:c6:f2:c1:df:54:ba:27:15:6d:8d:de:b4:9d:60:
         bf:c8:5a:4f:79:2c:df:f3:2b:3d:9f:9c:aa:51:64:67:1f:7d:
         68:b8:85:f3:08:26:35:4a:66:ac:2a:62:c4:b0:48:a1:3d:70:
         e7:69:b0:28:a4:0c:0f:53:33:95:38:34:cd:2f:cb:15:a3:d0:
         b4:d3:22:8b:2a:16:78:78:4a:ac:44:c5:fb:12:ba:6d:d8:f3:
         18:47:33:91:8e:d7:a4:50:2a:b7:01:7a:48:9b:4f:4e:d1:11:
         0b:21:fd:0c:97:8c:0e:bd:13:1c:36:6b:db:fb:bc:ad:ef:9b:
         c2:5d:7e:6c:32:6f:8b:d9:73:ca:fe:3f:23:9f:4e:91:99:c7:
         00:01:72:e4:e8:8d:17:14:85:ae:73:3c:48:6a:61:c7:1c:59:
         c3:6a:9c:32:03:ed:92:4a:8a:23:d8:54:e9:7d:32:c4:d8:85:
         3b:95:cb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org