Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          f9cAvZYGk4y9BNFzfCy3D7vN1hhVfYynKa10r5P2QcA=
Subject key identifier:   2B:31:FD:9E:DC:96:45:74:45:19:B1:F4:88:14:E4:DB:3B:E6:EF:32
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       29A5B6159DB302C60F88C53823710B5E637E853C
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:41 +0000
ROA not before:           Thu 04 Apr 2024 00:45:41 +0000
ROA not after:            Thu 03 Apr 2025 00:50:41 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a5:b6:15:9d:b3:02:c6:0f:88:c5:38:23:71:0b:5e:63:7e:85:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:41 2024 GMT
            Not After : Apr  3 00:50:41 2025 GMT
        Subject: CN=2B31FD9EDC9645744519B1F48814E4DB3BE6EF32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:ef:c3:db:3e:46:6f:60:e5:5a:2d:f3:6c:
                    1a:86:33:64:38:2f:c8:c9:a3:1f:93:e9:4c:75:01:
                    70:01:7b:ac:19:cd:48:2d:b8:57:63:80:d7:24:6b:
                    f6:a5:e8:e0:40:61:c6:b0:e6:a8:9d:1c:20:b6:1b:
                    73:bf:ac:ac:bc:0d:d7:6c:81:4d:2c:ab:05:0a:47:
                    3c:96:8d:e7:ea:f5:fc:27:08:e9:c3:f4:11:04:38:
                    65:ea:06:1f:95:1d:4d:b9:08:3c:aa:ef:ad:4a:3b:
                    69:de:1e:df:91:69:91:20:b9:37:57:3e:f9:55:33:
                    48:52:b0:60:b2:6a:0e:e0:5e:49:63:1f:6b:db:ce:
                    80:06:35:9c:8f:c6:7e:64:4c:19:7c:ab:e4:fb:9f:
                    73:0e:76:0d:36:a8:f0:1d:35:35:0e:4c:25:b8:08:
                    a5:2d:c2:25:36:43:7c:8e:28:f8:19:a7:0f:a1:cd:
                    6c:3f:df:da:56:22:db:d7:96:b9:12:04:d8:14:dc:
                    ee:42:aa:b8:5d:51:32:5b:be:78:a3:ce:26:4b:4f:
                    27:73:33:14:d0:60:ec:11:3c:bf:ce:a0:16:02:01:
                    b9:1d:62:76:70:03:65:96:3c:85:e8:19:05:82:00:
                    40:b7:8f:9a:f0:23:53:0e:6c:73:a2:5c:3f:e3:26:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:31:FD:9E:DC:96:45:74:45:19:B1:F4:88:14:E4:DB:3B:E6:EF:32
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         30:aa:69:7f:dc:61:55:2f:c8:6b:b9:30:40:8a:7f:f8:24:55:
         10:5d:be:c3:74:1b:59:06:6a:7a:f6:df:fc:17:86:e7:af:31:
         d1:56:de:7e:21:f1:55:eb:de:87:1c:37:5a:8e:e5:0a:cf:b0:
         15:31:50:aa:5e:ce:75:a8:18:f2:51:47:e3:e4:65:0f:9d:69:
         e6:56:d6:2f:ed:90:82:d7:df:b0:78:72:c1:c2:fa:8e:0a:89:
         f8:40:67:ad:6f:73:3e:df:16:97:86:d9:0a:d9:01:5b:7a:d0:
         5b:97:aa:6a:ad:00:cc:21:e2:cf:4f:75:4c:ff:71:f7:b9:97:
         c3:6a:ab:8e:0e:3f:ce:bf:1a:ba:eb:be:8a:bb:a9:fd:e5:12:
         a7:a0:d5:1d:f7:5d:32:4d:48:c4:0a:c2:44:35:be:7d:c5:04:
         29:8f:bd:ff:5f:b9:0d:f2:3d:ac:87:ea:87:e8:c3:9e:6e:d0:
         b3:d9:11:e4:b6:e1:33:57:37:44:d7:48:12:cb:bb:d4:1a:51:
         10:5c:51:9a:76:7d:4d:2c:f0:eb:ba:da:da:67:7c:2f:b3:f4:
         bc:2c:25:27:53:af:94:9f:0a:1d:71:d9:cd:78:91:8c:64:20:
         4a:a0:e8:32:e6:2b:cd:60:9f:97:4c:89:47:f3:9c:c1:10:6f:
         07:36:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org