Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa
File:                     323830343a326263383a3a2f33322d3332203d3e20323635313735.roa (raw, json)
Hash identifier:          Tno4rQD+9AqVmIoqKheSGRly8EXRFbbGzcFQKni1QOo=
Subject key identifier:   D7:EE:4E:F8:BE:AD:BE:37:F9:A0:8C:A7:66:2B:BE:9C:51:50:84:8C
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       134DD8E9B775910FAA949BE1CCA414F86FE5913F
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:51 +0000
ROA not before:           Tue 01 Oct 2024 14:00:51 +0000
ROA not after:            Tue 30 Sep 2025 14:05:51 +0000
asID:                     265175
IP address blocks:        2804:2bc8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4d:d8:e9:b7:75:91:0f:aa:94:9b:e1:cc:a4:14:f8:6f:e5:91:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:51 2024 GMT
            Not After : Sep 30 14:05:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:92:e0:fe:19:fe:81:3a:69:3d:17:a1:34:70:
                    b2:52:88:1a:fc:d9:84:b1:c6:92:09:1c:c9:ae:ac:
                    8a:1f:69:ca:a6:15:39:93:59:2d:44:47:aa:82:d9:
                    5a:7a:42:a9:d5:a2:07:ef:0c:a3:ce:cf:4b:4c:a5:
                    69:5f:66:66:10:51:40:2c:c8:4f:95:ab:60:bb:23:
                    aa:b7:83:b8:03:25:f0:18:e8:38:65:39:12:5e:5a:
                    17:f1:fa:d8:4e:e7:4e:90:dd:76:26:08:36:48:98:
                    e3:fe:a4:11:20:0a:c7:77:0c:df:9c:23:47:33:21:
                    c2:52:42:bf:a2:e6:97:3a:74:3f:ec:40:b0:1f:c5:
                    02:4e:61:ee:a5:06:fe:90:36:ba:ed:04:a4:22:ef:
                    07:ac:75:82:9a:ae:61:db:f3:26:55:37:95:34:d5:
                    62:f9:38:ae:b9:6d:dd:67:7c:05:03:c2:02:01:39:
                    4b:64:38:73:2b:97:7f:3f:65:1f:a6:5a:72:81:79:
                    c7:9d:30:ac:79:82:36:0f:8c:e0:0e:40:33:d5:e5:
                    f4:85:8e:b6:bc:07:29:e5:b2:5a:7a:e3:58:bd:06:
                    d3:7d:a7:0b:86:1f:8d:ee:97:c9:7e:1f:7d:35:74:
                    02:b3:51:01:cd:5f:6e:79:9b:40:87:dc:3e:08:97:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EE:4E:F8:BE:AD:BE:37:F9:A0:8C:A7:66:2B:BE:9C:51:50:84:8C
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a3a2f33322d3332203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:81:81:6c:27:77:91:d0:43:78:bd:15:8c:74:57:7a:4c:0d:
         f0:bc:94:12:ed:2d:8f:46:27:f9:c9:ad:a8:43:97:c6:89:52:
         92:d6:95:0f:86:32:59:03:96:fb:58:be:24:13:b5:57:04:77:
         a2:1a:a3:ce:ae:63:f2:c4:69:ac:ab:55:86:24:bf:11:89:73:
         65:ba:56:df:0f:75:79:5b:bc:93:3b:b2:b0:47:04:79:a3:50:
         2d:78:e6:84:17:fe:7b:52:73:de:44:68:13:00:77:00:fe:f9:
         36:79:f4:35:c0:9c:34:c4:34:b4:83:51:8e:6e:f0:42:26:37:
         53:2a:5d:bf:03:6b:be:32:93:91:b9:84:7d:9b:03:09:71:4a:
         b8:87:72:5e:43:6e:be:33:ae:98:ad:de:e8:34:19:29:8e:40:
         b7:11:29:d4:c7:28:af:aa:89:6d:87:fb:d4:8c:3d:e4:66:3e:
         43:f2:29:f7:ee:62:07:b1:4a:b7:51:c7:b6:90:57:d2:3b:35:
         11:0d:3b:69:c1:82:4b:e3:25:72:67:7b:ed:36:62:55:a9:8f:
         9c:55:5a:9d:3c:57:5a:ed:9b:88:d4:ed:da:b3:99:4c:0d:2b:
         b7:c5:b2:90:34:43:d0:70:da:a2:d1:67:5e:dd:07:f0:6d:d5:
         63:9d:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org