Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          66K3G1TY+eatgkoV3JmbYjHeaQh3MC5VrNEo/ghLmgE=
Subject key identifier:   FC:E9:E2:51:03:AA:F2:E8:E2:CF:4F:70:3F:D9:D5:32:26:BA:B1:2F
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       2ED2E869F4BB8996FB097484D4870921AC4F5A74
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:45 +0000
ROA not before:           Thu 04 Apr 2024 00:45:45 +0000
ROA not after:            Thu 03 Apr 2025 00:50:45 +0000
asID:                     61637
IP address blocks:        2804:1c18:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d2:e8:69:f4:bb:89:96:fb:09:74:84:d4:87:09:21:ac:4f:5a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:45 2024 GMT
            Not After : Apr  3 00:50:45 2025 GMT
        Subject: CN=FCE9E25103AAF2E8E2CF4F703FD9D53226BAB12F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:90:d4:4f:9e:f8:b8:86:f0:8f:14:5e:7b:56:
                    22:74:ec:39:12:33:af:03:e7:62:20:97:d4:a4:5d:
                    cc:66:b0:91:4b:8c:5b:07:34:b5:c4:b1:39:c3:04:
                    43:02:de:14:75:db:c8:72:12:84:bc:c6:a0:94:50:
                    75:88:00:de:4a:53:c4:2d:1e:93:1b:86:06:c0:69:
                    bd:cd:f8:3e:c6:ef:2e:e4:c8:d3:45:14:ee:0d:c0:
                    f9:1e:36:c4:46:c7:de:04:5c:9e:06:78:6c:77:19:
                    82:ce:fa:c4:1a:a3:9e:a4:7b:28:0f:14:ba:1a:3c:
                    03:55:f5:65:65:7f:10:87:4f:64:14:a6:21:21:59:
                    46:c2:b5:89:ad:29:b9:cb:2b:c7:6a:d5:b1:cd:ca:
                    be:61:b7:dd:54:00:a2:b5:29:68:82:a4:24:c8:0d:
                    c1:86:b8:34:0f:00:ab:f0:de:22:87:36:8c:96:51:
                    a5:25:a0:cf:84:23:87:b9:00:9f:1c:27:a5:58:94:
                    b2:5b:24:d2:ef:ac:8a:23:c5:19:62:9c:62:31:03:
                    48:a0:ca:f8:cd:54:d5:50:60:b1:0e:11:af:d3:6c:
                    9a:1b:fe:7f:3a:b1:99:f2:ef:4a:d3:14:5a:92:d6:
                    0e:fe:7a:2f:01:89:ca:e0:79:e1:c3:2e:93:df:a7:
                    f1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:E2:51:03:AA:F2:E8:E2:CF:4F:70:3F:D9:D5:32:26:BA:B1:2F
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a343030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c9:50:cf:fe:fa:9d:9a:f9:9d:d7:99:72:f9:d0:cd:53:8f:cc:
         f6:34:59:ef:2a:d5:be:40:97:05:bd:ad:9a:ff:84:8c:01:a9:
         9f:11:ba:64:70:7a:d0:ea:e2:43:75:2e:a4:6f:e1:fa:6d:ec:
         c8:06:13:b0:cc:3d:b1:9a:9f:23:e7:e7:87:cd:16:b1:95:08:
         18:cd:bd:71:7a:2f:3f:0c:ba:11:42:64:89:4b:84:fc:18:d2:
         af:3d:1c:22:90:37:cb:26:ff:e6:86:95:75:4b:99:a2:86:37:
         51:54:dd:e1:4e:3e:41:cd:54:d6:70:74:82:6d:2f:7d:11:c6:
         8d:00:5d:d4:e3:45:20:34:5a:21:1a:49:a2:d5:83:06:8d:4a:
         7a:8b:2b:f3:1a:6d:59:11:72:3c:94:76:00:68:9d:d0:94:41:
         50:a1:fc:a7:4b:28:9a:b8:75:80:99:cb:50:8f:6c:06:d9:9f:
         c7:1a:0f:b5:29:f3:af:1f:70:fc:44:98:ea:79:1b:31:16:7b:
         d8:5f:ed:58:e0:83:c5:4a:a1:d6:20:50:e8:12:42:f9:a3:db:
         29:64:8f:1e:08:c8:04:8a:03:d8:dd:d0:82:57:29:fc:d9:57:
         b9:ae:2f:0f:d4:67:06:43:13:e2:58:57:9e:5b:d8:76:39:af:
         d1:f1:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org