Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa
File:                     323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa (raw, json)
Hash identifier:          so+jgcr6FHESdmn8umOXPbqzyBEpyAS13ioObVTwfaE=
Subject key identifier:   11:ED:14:D2:13:D0:98:6D:6B:68:C8:5C:1B:72:69:BA:A5:78:22:96
Certificate issuer:       /CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
Certificate serial:       3CB964F043DCA75A0ED10195EA15097990CEC8C3
Authority key identifier: 23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa
Signing time:             Tue 01 Oct 2024 14:05:50 +0000
ROA not before:           Tue 01 Oct 2024 14:00:50 +0000
ROA not after:            Tue 30 Sep 2025 14:05:50 +0000
asID:                     265175
IP address blocks:        2804:2bc8:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl
                          rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b9:64:f0:43:dc:a7:5a:0e:d1:01:95:ea:15:09:79:90:ce:c8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231D8C79603E96D1309DFB9BA88AEB6A62C7C642
        Validity
            Not Before: Oct  1 14:00:50 2024 GMT
            Not After : Sep 30 14:05:50 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:5c:9a:12:78:4b:51:ef:8f:f4:13:84:6b:
                    2c:61:be:aa:61:28:cc:a2:77:ff:d9:da:1f:e7:cf:
                    ff:a5:99:8c:35:2a:4a:e1:e1:8b:ed:ee:a6:6a:8f:
                    01:7d:f4:0a:95:4a:72:fb:90:e8:89:d0:d6:88:17:
                    61:0a:c8:8b:d7:a1:a1:81:b0:5d:1c:63:97:46:73:
                    e4:a4:13:3f:e3:33:dd:be:ae:ff:66:98:d7:7a:95:
                    85:a0:f7:0f:bd:6c:b6:08:31:61:df:6c:2e:6a:fe:
                    3f:7b:6c:dd:15:46:b8:a8:25:d3:31:90:c5:2f:94:
                    7a:31:44:7f:fa:c7:e8:51:f5:22:21:6f:cc:77:11:
                    4b:ba:1c:6a:e6:c6:58:b0:bf:67:3f:df:76:f2:f2:
                    ee:a6:83:53:ad:9f:d3:29:ba:46:d5:22:7c:03:35:
                    61:7d:20:5f:64:2f:b3:96:36:ae:02:29:e0:b3:64:
                    80:cf:06:83:33:0b:d0:dd:ae:6e:d2:cf:cd:f2:bc:
                    28:52:32:9c:be:ea:b1:20:ea:af:70:e3:02:99:94:
                    68:1d:00:4c:cb:95:19:b0:6b:3b:c5:9a:f3:6f:77:
                    1f:6d:04:96:1f:94:3e:b7:62:b2:93:6d:1f:70:16:
                    9d:4b:2c:ab:a5:03:73:53:56:9d:5b:9e:02:7a:2d:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:14:D2:13:D0:98:6D:6B:68:C8:5C:1B:72:69:BA:A5:78:22:96
            X509v3 Authority Key Identifier:
                keyid:23:1D:8C:79:60:3E:96:D1:30:9D:FB:9B:A8:8A:EB:6A:62:C7:C6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/231D8C79603E96D1309DFB9BA88AEB6A62C7C642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9n4JRKjCmy64a9yYx5JnRm8UP831k3uVgrzzbHBR6g7d/1/323830343a326263383a663030303a3a2f33362d3336203d3e20323635313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bc8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4b:cd:e7:bc:d7:b6:ce:aa:8e:b2:4b:02:7b:c7:73:36:5c:7f:
         42:19:bb:97:a9:e7:b7:a8:0d:2e:3f:3c:7f:a3:c2:a9:e4:6b:
         28:f6:9e:25:1f:f8:b5:4e:a7:10:68:f4:d1:63:9f:63:0c:66:
         b1:57:b9:e0:ae:d9:9a:e6:4a:48:e8:d0:1f:db:cb:df:d7:4a:
         79:93:d5:59:d4:df:3c:3a:15:bb:b9:be:8f:af:d2:3a:77:58:
         86:18:ec:63:4e:72:0b:8d:ef:28:eb:e1:07:b0:2f:db:db:bb:
         7d:ab:f8:d9:b6:dd:ff:d8:07:16:0c:90:ec:f9:d5:39:fd:c0:
         f0:36:10:34:93:c5:1c:80:71:82:9f:3a:1d:fd:ed:e7:93:fe:
         51:95:06:63:e1:a6:d3:36:97:b0:29:aa:ad:72:39:13:f4:0f:
         61:fa:fc:c1:b9:cb:a4:27:7f:e7:3e:d8:86:09:ea:60:05:6b:
         a0:7b:7d:aa:10:d4:2d:1b:4d:7d:56:d2:f0:6d:88:3a:d0:33:
         a6:f1:43:59:1b:37:31:24:d8:94:2e:66:52:cd:03:c9:92:6f:
         17:d1:a0:d3:0d:a2:5c:aa:48:37:26:96:be:bb:33:48:3e:5f:
         ee:83:21:99:25:f8:a2:00:ae:7c:9d:8b:5d:0a:72:8c:9c:9c:
         d5:7d:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:34 2024 by rpki-client on console-fra.rpki-client.org