Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          yQ3FtUr1sqqwqXgBZ99phB7DP4/M+ppiXMuK9GD5De0=
Subject key identifier:   FE:2D:0F:9F:3E:16:70:8C:1A:74:4D:23:06:D8:84:F5:4C:93:AA:B9
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       414C44FDE3D989673BDD23DBE08BC8242FD31F2A
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:44:fd:e3:d9:89:67:3b:dd:23:db:e0:8b:c8:24:2f:d3:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:0b:51:b1:39:6f:df:73:ee:0b:f9:ec:90:
                    42:2b:d4:5e:34:1a:e6:94:58:6f:51:0a:16:39:0a:
                    c6:4f:12:a3:eb:8f:f3:15:92:3e:f5:05:29:d8:e2:
                    72:6c:60:95:96:5f:d3:36:b9:55:ac:c1:b8:64:46:
                    95:50:f3:4c:27:20:e9:77:3d:5e:84:5a:72:b5:44:
                    19:8e:37:27:a8:96:40:ec:2e:e3:c3:c3:3a:a5:97:
                    55:f1:c5:0c:2d:10:23:52:74:93:6a:11:67:cc:cd:
                    ea:f5:4e:5a:5e:6f:a1:45:a8:64:da:6e:e0:fb:51:
                    bf:a7:3a:8e:8d:39:33:27:01:ba:8a:6d:0f:e6:1d:
                    c5:9b:8b:2b:d3:b4:13:f5:a5:15:dd:61:46:5c:d3:
                    4a:92:03:ea:00:42:5e:f3:06:88:21:7b:c2:5a:8d:
                    83:40:7b:2d:32:02:27:5f:1a:ce:f1:80:6a:20:de:
                    5b:18:9f:9c:9f:36:6c:a8:14:4b:6c:8c:76:74:bf:
                    78:cb:c1:d6:e5:4c:4c:b9:f6:fa:b8:2c:85:67:3a:
                    2a:99:f2:36:ca:7f:ff:03:1f:5e:49:7f:a9:45:c1:
                    ce:20:cc:49:53:87:e6:c4:88:8b:45:91:c6:33:df:
                    86:3b:b4:b2:7b:65:36:ee:11:b7:a8:3e:59:1c:6a:
                    dd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:0F:9F:3E:16:70:8C:1A:74:4D:23:06:D8:84:F5:4C:93:AA:B9
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a393030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:af:ef:52:b1:53:6f:ea:8e:7a:38:e2:e7:a8:5a:80:32:
         ed:3c:b1:39:66:c7:b8:17:5c:73:05:41:1e:ac:a3:9e:6d:8f:
         cc:10:83:1b:9e:c3:25:02:3d:af:b9:3a:4e:c6:7f:08:17:ea:
         08:5d:4c:f2:b1:28:6e:93:f3:b2:1e:8c:87:40:68:e2:a7:92:
         db:28:59:16:78:0a:75:c1:c1:af:54:5f:3e:26:53:f4:a2:75:
         d2:46:1e:cb:fd:8c:a2:9c:f3:00:63:d0:de:f7:a9:00:bf:86:
         93:bb:db:fa:b7:c6:7b:c5:69:89:d1:65:0c:43:83:da:ab:7b:
         72:52:84:08:51:39:51:1b:d3:f2:08:ab:d4:46:45:0e:6e:76:
         05:bf:4e:5b:b3:36:4c:98:8c:e5:5c:9e:40:6e:fa:a5:b0:01:
         23:cf:59:71:f5:57:4c:52:bf:02:ed:1a:fb:b7:08:a9:1e:70:
         10:75:a3:1a:69:2d:d8:e9:98:21:68:54:df:e5:a5:8d:e6:b1:
         a0:cd:75:80:10:4d:b6:26:e2:f4:23:cf:17:b4:8d:bb:d4:8c:
         45:00:f7:08:85:47:1d:dd:3a:02:6b:00:ac:0f:5d:38:c0:ca:
         38:ed:57:48:65:99:1d:fb:50:c4:0b:5f:79:ca:53:b4:56:2a:
         11:3b:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org