Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          1DpwD0XgqK0a3nnEMxqfKB89nrnRblY2BXRv1cKmwt8=
Subject key identifier:   AF:C7:20:5A:26:BF:FB:6A:AC:67:AB:C0:FA:1A:52:BD:AA:32:5E:98
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       7DB3CF9FE5824F24CB09E458472D2F7FBEFAA730
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:46 +0000
ROA not before:           Thu 04 Apr 2024 00:45:46 +0000
ROA not after:            Thu 03 Apr 2025 00:50:46 +0000
asID:                     61637
IP address blocks:        2804:1c18:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b3:cf:9f:e5:82:4f:24:cb:09:e4:58:47:2d:2f:7f:be:fa:a7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:46 2024 GMT
            Not After : Apr  3 00:50:46 2025 GMT
        Subject: CN=AFC7205A26BFFB6AAC67ABC0FA1A52BDAA325E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a7:e4:e9:0b:a0:60:2b:59:c6:57:ad:cd:dc:
                    86:67:4d:00:cd:bf:18:df:ae:48:4f:ac:6b:6f:fe:
                    73:ca:68:1d:ee:ed:a3:0d:bd:90:9f:c1:88:ba:c6:
                    7f:6c:5e:e9:b8:dc:46:6d:76:99:1f:51:43:fe:4c:
                    fe:c2:60:3c:ef:d1:88:ee:0c:8c:77:56:c7:0e:40:
                    1a:f7:a0:32:9f:4c:35:dd:b0:7a:f8:a6:91:b7:e1:
                    92:76:80:33:69:6c:65:f7:1e:da:72:0e:6f:da:48:
                    f2:45:d0:95:1f:77:fd:df:ee:e5:47:98:21:6b:5b:
                    c6:88:b6:4d:1d:c4:5a:93:44:e4:53:b0:0a:23:2a:
                    54:f4:c8:55:11:a6:76:8d:7a:7d:16:80:a0:0d:b7:
                    28:0c:95:38:6d:b1:d0:52:72:b0:d5:ba:db:1f:4a:
                    12:12:15:7c:54:ff:00:62:63:85:24:ab:fe:6d:78:
                    3c:7b:1f:1a:7b:04:8d:c3:b7:bf:13:1d:6e:85:90:
                    4d:7b:8a:d7:38:82:64:29:9d:45:1c:76:cc:aa:f5:
                    1b:d0:19:80:1e:3e:da:0d:95:83:37:59:33:8d:bc:
                    2b:f0:8c:41:e1:99:c7:11:fc:1d:51:37:58:45:3f:
                    9d:18:1c:7a:bc:d8:08:87:2f:48:29:90:02:a7:32:
                    d5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C7:20:5A:26:BF:FB:6A:AC:67:AB:C0:FA:1A:52:BD:AA:32:5E:98
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:72:dc:da:be:34:d9:f8:d7:54:eb:6e:ba:95:bc:fa:35:
         ea:e0:33:04:41:15:b6:34:65:b3:53:1c:04:47:f9:ab:ba:a0:
         8b:0e:a5:a7:d4:5c:65:79:0d:6b:7b:e9:d5:3d:b9:b6:5d:25:
         4a:cb:85:ef:71:48:1c:6c:05:72:eb:a0:95:33:46:99:cc:6d:
         98:16:fc:1c:28:24:6b:ec:c7:0a:d3:1a:b7:e1:78:64:9f:a5:
         79:44:5e:7e:e8:18:9d:64:75:02:bc:7c:e4:93:d3:5a:0b:71:
         c2:2a:1c:8e:89:b4:db:88:76:29:46:67:2b:cf:8c:a3:9a:24:
         a1:0e:da:18:27:41:ff:68:67:b0:68:86:76:8b:b9:7c:bc:91:
         0c:5f:5e:cf:ca:fb:08:c9:28:bf:ca:e2:b1:46:72:09:29:94:
         22:d9:cf:b8:60:62:f5:ed:bd:f2:92:c6:93:ce:2d:61:62:65:
         1e:83:5e:2f:e4:df:25:11:8c:2f:5d:42:2d:ff:00:22:91:84:
         2b:f5:c2:70:c8:94:41:1f:d4:e4:47:23:0c:03:ad:84:1c:87:
         c1:9d:74:fb:00:26:cd:f4:27:2b:1b:aa:b9:02:04:74:e2:70:
         0a:b5:5d:7f:ed:fd:7b:77:0c:e9:67:12:ec:0b:23:9b:13:3f:
         f8:bb:46:de
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUfbPPn+WCTyTLCeRYRy0vf776pzAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5RkJBRTVCRjYyMDBGNjBFRjA5Q0RCQzFCOTAwNTBB
N0MwNUUwQTAeFw0yNDA0MDQwMDQ1NDZaFw0yNTA0MDMwMDUwNDZaMDMxMTAvBgNV
BAMTKEFGQzcyMDVBMjZCRkZCNkFBQzY3QUJDMEZBMUE1MkJEQUEzMjVFOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYp+TpC6BgK1nGV63N3IZnTQDN
vxjfrkhPrGtv/nPKaB3u7aMNvZCfwYi6xn9sXum43EZtdpkfUUP+TP7CYDzv0Yju
DIx3VscOQBr3oDKfTDXdsHr4ppG34ZJ2gDNpbGX3HtpyDm/aSPJF0JUfd/3f7uVH
mCFrW8aItk0dxFqTRORTsAojKlT0yFURpnaNen0WgKANtygMlThtsdBScrDVutsf
ShISFXxU/wBiY4Ukq/5teDx7Hxp7BI3Dt78THW6FkE17itc4gmQpnUUcdsyq9RvQ
GYAePtoNlYM3WTONvCvwjEHhmccR/B1RN1hFP50YHHq82AiHL0gpkAKnMtXBAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUr8cgWia/+2qsZ6vA+hpSvaoyXpgwHwYDVR0j
BBgwFoAUMZ+65b9iAPYO8JzbwbkAUKfAXgowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXNTcmY3cGZYTVA3c0Z6M3FSYzY2Y2FkUFp0SFVWd014RGlQazR2eGFk
ckYvMS8zMTlGQkFFNUJGNjIwMEY2MEVGMDlDREJDMUI5MDA1MEE3QzA1RTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOUZCQUU1QkY2MjAwRjYw
RUYwOUNEQkMxQjkwMDUwQTdDMDVFMEEuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlzU3JmN3BmWE1QN3NGejNxUmM2NmNhZFBadEhVVndNeERpUGs0dnhhZHJGLzEv
MzIzODMwMzQzYTMxNjMzMTM4M2EzNDMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDM2MzEzNjMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBBwYQDANBgkqhkiG9w0BAQsFAAOC
AQEAm/ly3Nq+NNn411TrbrqVvPo16uAzBEEVtjRls1McBEf5q7qgiw6lp9RcZXkN
a3vp1T25tl0lSsuF73FIHGwFcuuglTNGmcxtmBb8HCgka+zHCtMat+F4ZJ+leURe
fugYnWR1Arx85JPTWgtxwiocjom024h2KUZnK8+Mo5okoQ7aGCdB/2hnsGiGdou5
fLyRDF9ez8r7CMkov8risUZyCSmUItnPuGBi9e298pLGk84tYWJlHoNeL+TfJRGM
L11CLf8AIpGEK/XCcMiUQR/U5EcjDAOthByHwZ10+wAmzfQnKxuquQIEdOJwCrVd
f+39e3cM6WcS7AsjmxM/+LtG3g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org