Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          STXja5V2a93SRGrFdFyQI2UmqXc5C+G94j5h/P12S9M=
Subject key identifier:   69:AC:00:93:34:1B:B5:1F:F7:7D:C1:C0:37:67:47:11:62:4B:FD:1A
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       069FBA7C894EA683D91F0DEA75AEE541B6C8508B
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:47 +0000
ROA not before:           Thu 04 Apr 2024 00:45:47 +0000
ROA not after:            Thu 03 Apr 2025 00:50:47 +0000
asID:                     61637
IP address blocks:        2804:1c18:3000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9f:ba:7c:89:4e:a6:83:d9:1f:0d:ea:75:ae:e5:41:b6:c8:50:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:47 2024 GMT
            Not After : Apr  3 00:50:47 2025 GMT
        Subject: CN=69AC0093341BB51FF77DC1C037674711624BFD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:3f:16:e0:8a:c0:0f:7a:64:b5:78:06:0b:
                    c2:be:ea:04:b7:23:78:56:4a:c7:3a:df:00:c7:c2:
                    3a:1a:78:28:1b:8f:09:8f:83:ed:f5:1b:42:28:1e:
                    d7:74:03:5e:b5:9f:6d:51:90:5c:1d:9f:d1:8f:b3:
                    8a:2e:bb:de:1c:0d:5d:fa:b4:c6:70:1a:62:ff:11:
                    31:74:52:99:13:d3:61:06:b7:d6:30:25:24:86:e5:
                    24:9b:3b:3c:00:72:f1:0b:f0:63:f7:49:d4:f3:e0:
                    14:79:11:51:74:58:74:9c:88:16:a0:95:0b:c2:55:
                    6e:dd:88:ad:c6:d6:c4:77:17:c7:7b:06:fb:46:57:
                    1a:3c:0f:91:fd:c7:1e:0e:9a:ed:4d:38:14:58:4f:
                    1e:6d:ff:68:2b:0a:25:97:3a:0f:7d:97:20:22:d7:
                    ad:1f:0f:aa:b6:46:2e:2f:dc:24:92:8b:7c:c2:68:
                    2e:6d:b2:a5:ea:5f:92:c5:02:be:3f:dd:3e:3e:6a:
                    34:da:48:5e:18:59:c0:6b:e4:cd:7c:5f:45:94:9c:
                    65:86:a4:25:ce:d7:d2:27:e3:de:7a:02:66:8c:90:
                    d5:01:66:23:86:3c:09:e1:c4:a2:c7:5c:96:b7:01:
                    17:f5:21:04:87:01:e8:dc:d8:8f:08:2a:81:d1:4d:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:00:93:34:1B:B5:1F:F7:7D:C1:C0:37:67:47:11:62:4B:FD:1A
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a333030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:65:1c:5d:98:c4:d9:d2:c3:f0:4e:e7:b6:8e:9d:fe:8b:
         c2:5d:84:f5:11:bd:23:1e:23:47:a8:0f:73:42:9c:94:69:09:
         b9:8e:1d:d3:ab:95:38:6a:9a:f5:f6:c4:25:2b:60:7a:0a:27:
         95:e4:e8:a0:97:cb:bc:e1:4e:f9:a7:a8:59:62:1f:43:28:c4:
         38:c5:93:d8:2e:9a:a6:a3:23:ef:4a:93:40:e7:67:2a:f6:7c:
         00:26:95:6d:37:57:50:36:15:7d:0a:ae:a8:63:ec:78:95:08:
         2b:09:66:7d:6e:8c:6b:36:28:d4:75:15:a1:69:4a:0e:85:c5:
         a2:e0:b2:fa:30:8d:68:35:79:60:1f:f5:cb:74:ae:12:40:63:
         29:7c:6a:72:c5:cb:3d:93:12:93:6d:61:15:14:e0:49:6d:3b:
         b4:c0:3b:4b:49:ad:a8:fa:4b:9a:a9:cc:8e:13:3d:43:ec:5d:
         c8:b1:26:d5:7d:8e:4d:87:39:54:77:a5:44:18:c5:03:54:e7:
         7b:32:05:04:5b:44:da:24:db:0d:d0:01:99:94:fe:38:17:c9:
         37:43:62:7e:23:d7:c7:75:3c:43:1b:c4:51:7c:6f:7c:51:c0:
         bb:f1:58:51:07:20:98:c0:94:b2:aa:d2:55:38:69:a3:ab:b1:
         61:ec:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org