Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa
File:                     323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa (raw, json)
Hash identifier:          Dn9O9xmqJ+dJRrObYSAS65R1OxMSP3xt9c2f+4hIQUI=
Subject key identifier:   9D:94:01:6B:8F:41:25:CC:FC:78:97:17:11:49:3D:14:DD:82:8C:5B
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       5DE806ED5A02C5163C0AC8E1203913446DFC0F64
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:52 +0000
ROA not before:           Tue 01 Oct 2024 14:00:52 +0000
ROA not after:            Tue 30 Sep 2025 14:05:52 +0000
asID:                     265175
IP address blocks:        2804:2bc8:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e8:06:ed:5a:02:c5:16:3c:0a:c8:e1:20:39:13:44:6d:fc:0f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:52 2024 GMT
            Not After : Sep 30 14:05:52 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:cb:40:eb:27:e9:50:de:d7:99:52:39:fc:
                    d6:a8:38:b0:af:f7:26:2b:aa:98:e0:24:6f:b2:95:
                    17:15:0b:bb:3a:72:fa:e4:40:7b:ae:79:ed:e8:32:
                    be:ad:01:4c:20:31:d6:7b:b1:06:f4:6b:dd:1c:fb:
                    44:06:0e:c9:4b:d9:65:22:a8:b0:60:03:ad:28:b7:
                    ce:6c:78:a2:66:aa:22:ab:0e:03:a5:45:50:38:5d:
                    3c:79:94:db:3e:4f:e2:4c:17:b4:53:8a:9a:13:af:
                    25:ed:fd:e7:4c:7b:66:a0:b9:fd:93:74:e6:b8:3c:
                    60:0e:b5:20:0a:01:2d:f3:ce:dd:fd:79:86:a0:fa:
                    e7:26:85:38:8f:a4:d0:bc:1f:5f:bb:cd:1e:1e:40:
                    64:93:7e:13:dd:4e:f2:be:3d:4a:61:dd:b9:7f:cf:
                    34:43:1b:00:20:7a:1b:e8:51:0d:e4:95:a3:e6:ba:
                    3a:a5:a1:5c:04:70:56:83:c2:fd:6c:b3:e6:f8:06:
                    8b:67:4e:ab:de:9b:a1:37:98:93:44:9d:43:e0:8f:
                    7d:fd:17:03:24:d9:0e:58:10:1c:d2:3a:fe:97:83:
                    f2:5e:fd:1f:ce:d4:68:df:56:6a:88:bf:77:f9:c4:
                    f6:7c:ac:b2:f4:ef:eb:2e:c8:9c:17:f0:c3:f2:96:
                    69:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:94:01:6B:8F:41:25:CC:FC:78:97:17:11:49:3D:14:DD:82:8C:5B
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a633030303a3a2f33342d3334203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:f4:8b:af:c6:8a:dd:63:3c:8c:08:ce:6d:a5:e3:97:69:7a:
         fe:0d:c7:03:a5:e7:36:c1:0d:c5:39:24:2b:1e:e1:7e:ee:51:
         8d:69:d0:07:1d:88:79:7f:11:02:e5:c8:1a:38:f7:5a:b4:61:
         70:07:84:50:dd:62:55:db:fe:2a:f3:67:14:ec:23:e8:9f:86:
         26:5a:34:ea:b8:21:a0:a8:c6:ec:10:bb:74:75:cc:25:98:e7:
         60:5b:b3:5a:f2:1b:24:a8:6a:cb:fd:45:c2:b9:1e:b6:86:de:
         9b:0c:3b:81:86:01:fa:91:17:82:fb:69:d4:c5:1f:3f:2f:70:
         ac:51:0a:eb:6c:d2:4b:b9:22:dc:1b:b2:5a:2c:96:32:38:ca:
         5e:f1:84:56:37:7c:9e:a3:41:dc:3c:33:55:6a:f3:43:fc:34:
         98:e4:9f:91:17:e1:ac:d1:3a:21:84:b0:9d:ad:b9:05:47:73:
         60:5c:cb:dd:6e:13:e9:8b:1d:92:b0:1c:02:76:69:c0:af:5f:
         46:49:d7:c6:78:b7:26:31:40:ad:bc:8a:d7:ac:64:72:b0:9e:
         59:03:a2:07:40:7e:9c:3b:bb:0f:5f:36:8a:fd:42:71:ee:5b:
         56:ad:a4:72:ee:92:d7:a4:10:29:78:cd:ee:56:41:ba:0d:5c:
         c6:55:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org