Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          rKEC7TUnYSBvzIo040mVWsgnz/nitZGTyn1W5EGkHC4=
Subject key identifier:   51:09:23:A2:94:86:7D:CD:5B:05:CA:53:E2:DD:31:D1:AA:46:35:77
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       43C657208BB824E292F6622687B0B91BC82DB849
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:43 +0000
ROA not before:           Thu 04 Apr 2024 00:45:43 +0000
ROA not after:            Thu 03 Apr 2025 00:50:43 +0000
asID:                     61637
IP address blocks:        2804:1c18:8000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c6:57:20:8b:b8:24:e2:92:f6:62:26:87:b0:b9:1b:c8:2d:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:43 2024 GMT
            Not After : Apr  3 00:50:43 2025 GMT
        Subject: CN=510923A294867DCD5B05CA53E2DD31D1AA463577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f3:c5:96:8b:2a:9e:3c:d6:83:2e:23:70:51:
                    54:8a:c4:69:a0:a3:c8:3d:97:68:6a:3f:0a:89:a8:
                    f1:a2:46:b6:10:41:5b:a4:a3:7c:69:fb:a0:08:48:
                    3c:23:e3:f9:e0:43:8a:e3:73:db:bf:92:e3:08:4a:
                    f3:29:cf:eb:be:5e:29:a4:c3:3e:47:fe:80:7c:19:
                    bb:b7:4a:b4:86:81:b6:52:c9:66:f2:e0:95:d7:65:
                    b2:52:c1:44:d7:b4:01:a9:3c:9a:43:45:1e:ef:66:
                    7e:cf:6a:63:70:b9:5a:13:f3:f2:1a:cf:5d:d6:3e:
                    09:e2:c6:00:bd:f1:c6:9b:9b:23:8c:20:19:17:65:
                    05:e0:57:a3:f7:ab:44:06:7d:73:1f:6c:c6:8d:c7:
                    be:00:d7:bf:cf:bb:16:d4:a5:35:ae:b1:a8:14:f0:
                    02:9b:64:c5:b6:11:74:8f:4c:4e:b7:b8:96:5e:57:
                    76:4e:9c:22:f7:ee:2d:98:6a:6d:f4:24:c2:c1:57:
                    a3:b2:69:cc:05:c1:de:e7:af:59:29:f5:8e:c5:77:
                    f0:0e:43:f3:fe:4d:2b:90:4d:1a:91:94:b7:b3:3f:
                    1f:fc:b0:bd:bc:4a:63:6f:0a:9c:02:ce:b9:9a:5d:
                    0a:a3:91:9b:0d:01:04:4b:ce:6e:2f:b5:97:d1:34:
                    43:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:23:A2:94:86:7D:CD:5B:05:CA:53:E2:DD:31:D1:AA:46:35:77
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a383030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:34:04:c0:1a:52:d1:4d:49:38:7c:1b:c7:43:61:7f:07:26:
         8a:27:8e:2b:d4:7b:a2:6a:c4:34:dd:1a:24:70:2c:1f:d7:d2:
         17:ba:0f:53:5d:43:85:08:3c:c9:52:37:e5:32:84:18:d1:c4:
         8a:07:5e:30:a1:a1:73:98:48:e6:eb:4f:3a:c3:c1:56:98:4f:
         9a:4d:a0:3b:3c:00:6d:33:aa:52:24:01:5b:a5:18:84:41:90:
         39:48:0d:ab:78:dd:ec:d5:f9:61:43:45:66:00:29:1b:f1:d1:
         e8:40:38:68:74:4d:19:81:f6:27:7b:eb:c1:69:2f:ee:3f:a0:
         9c:6c:f2:d2:98:a5:95:7a:3d:3e:56:8f:56:80:3e:c3:4e:99:
         fa:f4:a0:fa:57:50:af:b6:da:26:23:e9:29:29:d9:d8:4f:b3:
         25:28:9c:46:6a:27:ab:59:0b:17:db:ec:df:0f:5f:6b:00:56:
         b9:78:7c:04:51:92:4f:fc:37:20:2f:ba:9c:ff:e6:3d:bd:a9:
         41:9e:e9:f8:9e:01:79:66:68:db:53:cc:9c:52:e1:ce:0f:8a:
         ac:38:0c:01:a3:21:1e:6b:fd:bf:fa:c4:13:63:b9:0b:6d:ca:
         48:4a:ac:cf:ee:3b:ec:2e:4b:d2:e9:ab:95:37:46:83:00:24:
         e9:76:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:39 2024 by rpki-client on console-ams.rpki-client.org