Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
File:                     323830343a316331383a3a2f33322d3332203d3e203631363337.roa (raw, json)
Hash identifier:          DhBvkFUMayIHsHsYV0n1CHsWD0gg9M0rXN9I80rnnS0=
Subject key identifier:   30:88:BE:CE:57:F3:BC:C1:35:52:DF:C6:23:6A:61:22:E7:DB:85:FC
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       0FDE2A9FA797C527963314DF2B643E3D17D625FE
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa
Signing time:             Fri 04 Oct 2024 22:39:05 +0000
ROA not before:           Fri 04 Oct 2024 22:34:05 +0000
ROA not after:            Fri 03 Oct 2025 22:39:05 +0000
asID:                     61637
IP address blocks:        2804:1c18::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:de:2a:9f:a7:97:c5:27:96:33:14:df:2b:64:3e:3d:17:d6:25:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Oct  4 22:34:05 2024 GMT
            Not After : Oct  3 22:39:05 2025 GMT
        Subject: CN=3088BECE57F3BCC13552DFC6236A6122E7DB85FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:ac:6a:71:4a:b2:e5:74:50:0a:d2:73:86:
                    37:90:0d:cb:4c:5a:b0:3a:ec:c0:70:43:89:db:f2:
                    39:4d:f8:7c:ef:a4:9a:ff:90:57:5c:f1:22:2f:08:
                    ae:0c:74:91:16:6c:bc:b5:f0:14:b7:de:29:3f:0b:
                    48:68:18:1c:99:1d:87:ba:90:23:1b:37:41:37:26:
                    51:c3:47:04:ef:ad:e3:ff:fd:3a:16:34:86:d2:df:
                    8c:b3:bb:5e:21:49:ce:2c:be:2e:ee:17:c0:3c:ea:
                    b6:e2:99:47:98:a2:22:94:43:c9:dd:99:fe:84:6f:
                    02:fe:00:c1:29:ad:81:08:c7:6c:bb:1f:eb:7a:8b:
                    98:76:dd:17:a7:bc:b9:72:74:d1:0d:61:11:89:5e:
                    39:4f:6a:06:cd:e9:ab:3d:13:d1:83:68:67:75:d7:
                    73:26:75:9b:61:97:4d:85:cc:d3:1b:82:40:24:64:
                    8a:fc:07:b6:2b:ba:e4:fb:21:b0:57:61:b1:4b:3f:
                    86:d2:84:73:c2:1e:55:65:6a:75:e4:c1:ac:47:fa:
                    1a:53:7f:56:bc:93:4a:58:87:c3:d8:7f:f7:45:c5:
                    3c:47:cc:d0:35:56:a0:8b:97:be:0f:d4:dd:63:72:
                    63:1a:2e:96:12:21:b0:40:8d:59:59:bc:08:1b:95:
                    d4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:BE:CE:57:F3:BC:C1:35:52:DF:C6:23:6A:61:22:E7:DB:85:FC
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33322d3332203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:8e:44:e1:fa:c3:75:f4:0f:95:13:82:46:5b:d9:85:3a:53:
         68:77:36:0e:57:3f:08:b3:bb:6b:2b:65:8c:6a:ac:1f:90:03:
         85:9f:1d:24:03:6f:9e:a8:00:dc:28:33:9a:4b:be:35:7b:6e:
         03:26:53:25:a6:7c:73:66:4b:f0:83:8a:b9:d3:83:af:77:9e:
         bb:d4:32:01:e7:5e:2c:62:2b:ce:a1:27:5c:9f:2a:44:76:48:
         6a:8c:1f:0e:64:8e:06:72:8f:40:b4:80:7d:25:c2:c8:1a:88:
         50:5b:b2:5c:ec:3d:d6:db:59:73:22:af:db:e1:61:e4:49:94:
         70:86:5e:01:45:d5:1b:15:f4:50:fc:ef:fd:75:df:9e:7e:da:
         90:ad:77:cb:44:e3:dd:b2:51:45:1c:ef:c6:a6:21:0a:92:62:
         7f:dc:28:49:03:5a:97:81:ec:da:83:d3:10:92:47:0b:51:06:
         3c:82:65:8a:32:41:7e:8c:36:06:ae:c9:63:02:fa:d5:63:b1:
         7c:e0:b0:5d:80:39:aa:10:81:1c:0a:42:c2:77:08:bd:2b:d4:
         36:a8:ae:3d:95:a7:bd:bc:b4:ed:fe:ee:b1:75:36:c6:11:28:
         86:06:8a:bf:87:ac:ba:58:87:21:d3:ee:a6:f5:b2:62:de:38:
         87:7c:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org