Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
File:                     323830343a376661303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier:          ObaJmReTie2u+54lXAaG0wNTLbX7ZayCl/3NTbcY6RI=
Subject key identifier:   AE:02:F3:AD:D6:57:1A:9B:F0:3D:F3:83:9B:CB:56:D9:86:A2:EF:50
Certificate issuer:       /CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
Certificate serial:       1051B45A504037643772F14D361926FEF9404AF0
Authority key identifier: 1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa
Signing time:             Thu 31 Oct 2024 19:08:08 +0000
ROA not before:           Thu 31 Oct 2024 19:03:08 +0000
ROA not after:            Thu 30 Oct 2025 19:08:08 +0000
asID:                     271699
IP address blocks:        2804:7fa0::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl
                          rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:51:b4:5a:50:40:37:64:37:72:f1:4d:36:19:26:fe:f9:40:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904
        Validity
            Not Before: Oct 31 19:03:08 2024 GMT
            Not After : Oct 30 19:08:08 2025 GMT
        Subject: CN=AE02F3ADD6571A9BF03DF3839BCB56D986A2EF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:61:c7:b1:ce:a0:d6:7b:21:95:1a:ce:72:88:
                    54:cb:31:95:f2:c2:bb:61:5f:3d:cd:4d:2f:4c:8b:
                    29:b8:09:d9:8f:a7:3e:e7:03:85:ee:6f:43:a8:cd:
                    27:c0:b3:05:8e:3a:c5:02:2e:e9:c1:18:f2:d9:e8:
                    43:4e:5a:f5:5e:9a:df:88:a6:53:08:18:cb:17:67:
                    54:24:29:24:f5:4b:28:d3:04:e8:9e:d0:38:d5:3c:
                    fb:9d:d3:e1:53:d0:f6:c6:4a:eb:82:a8:37:63:cd:
                    8e:80:99:65:ce:cf:27:32:3e:d0:d8:19:15:51:dc:
                    e7:b4:0b:13:f5:ac:50:8c:62:84:a1:31:d1:a2:33:
                    aa:7d:50:5e:66:e0:12:a8:35:94:fb:97:b9:d1:bb:
                    19:ba:89:fe:4d:ef:f9:c6:0d:61:ed:a8:a6:88:bb:
                    4a:81:68:c8:9e:b1:65:85:04:ac:ca:ff:fb:37:70:
                    f5:1c:82:a8:0b:fb:9e:90:09:c0:5d:78:0f:ff:ed:
                    dd:99:cf:4f:7f:ec:5e:06:a9:13:90:d1:1c:8f:f5:
                    da:10:02:2f:3c:b4:4e:28:5c:8f:e6:9e:9b:86:20:
                    6b:2b:f5:d6:c3:d2:09:a8:1d:f9:2c:7e:8c:15:79:
                    94:55:0e:05:20:15:34:ae:ac:7c:5c:85:f3:44:0a:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:F3:AD:D6:57:1A:9B:F0:3D:F3:83:9B:CB:56:D9:86:A2:EF:50
            X509v3 Authority Key Identifier:
                keyid:1C:96:AC:4B:FA:7D:CA:99:F0:77:B9:FC:C1:2E:E7:0E:72:C8:69:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C96AC4BFA7DCA99F077B9FCC12EE70E72C86904.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a3a2f33342d3334203d3e20323731363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa0::/34

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:3a:83:0f:8d:ff:a5:13:98:97:66:33:cf:11:8c:95:32:
         a4:05:9e:32:a5:46:e7:d6:4e:12:0b:85:93:8b:89:97:8f:19:
         72:6a:49:03:c1:db:64:65:0f:65:f9:83:a2:ab:34:2b:a2:c0:
         1f:ca:09:10:fd:b2:9b:d5:f3:be:29:c1:f3:b9:ef:11:93:e9:
         4f:62:9f:76:23:c2:39:98:90:61:f2:af:0e:58:20:f5:e8:57:
         da:69:a8:2b:87:b6:72:66:52:38:72:fb:36:a1:eb:5e:e8:6e:
         33:a1:08:0b:9a:39:bd:49:37:47:60:cc:0a:71:d3:25:2d:8c:
         65:44:b2:80:ae:98:64:2b:cc:4e:bd:4a:25:5c:06:3b:03:17:
         f1:ec:bb:b5:df:d6:e5:13:d9:84:95:33:38:d4:29:a1:23:7b:
         fb:42:60:3a:c9:1e:4a:01:d7:74:4f:64:00:45:42:48:b0:4f:
         19:28:26:c4:fb:df:7f:ed:b8:d9:be:cf:83:6a:32:87:2e:25:
         b0:53:20:3e:35:f3:ad:c1:58:bb:49:03:3b:c0:d8:0d:5f:fe:
         9f:db:ba:04:9b:f3:b4:6b:f8:a5:0c:15:db:aa:a4:23:f8:82:
         8f:48:83:74:d3:6b:e9:d7:1d:27:57:e4:83:8e:b8:59:8f:a8:
         f3:10:1d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:04 2024 by rpki-client on console-fra.rpki-client.org