Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
File:                     323830343a316331383a3a2f33332d3333203d3e203631363337.roa (raw, json)
Hash identifier:          nwLq2yrbSIBk08slEWBKaYK2iUPltUNEh6JyEP0abtk=
Subject key identifier:   6E:0F:AC:51:14:C9:A2:45:AA:70:C5:34:09:55:64:82:5F:AA:2C:F7
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       2BFA459D051E690E894BA58E99A90749F036B3C2
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:46 +0000
ROA not before:           Thu 04 Apr 2024 00:45:46 +0000
ROA not after:            Thu 03 Apr 2025 00:50:46 +0000
asID:                     61637
IP address blocks:        2804:1c18::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 10:12:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fa:45:9d:05:1e:69:0e:89:4b:a5:8e:99:a9:07:49:f0:36:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:46 2024 GMT
            Not After : Apr  3 00:50:46 2025 GMT
        Subject: CN=6E0FAC5114C9A245AA70C534095564825FAA2CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b9:46:bd:83:dd:21:01:a6:b8:fa:06:21:b5:
                    8b:7c:99:73:2c:3a:e5:4f:07:28:3f:86:b9:27:02:
                    80:03:d7:e0:a9:97:b8:1f:8a:29:91:93:92:fb:d6:
                    03:7c:89:5f:8b:c0:bd:bd:40:2b:e8:ff:c0:7a:18:
                    aa:6a:74:21:5e:67:49:a1:16:9f:9d:97:3c:2a:8b:
                    f9:d4:11:1f:ff:7c:89:95:bd:9a:6b:4b:0a:7e:b7:
                    d4:9f:04:b4:45:96:8f:40:95:3d:5f:44:dd:a7:a7:
                    d8:4f:57:07:4a:a4:88:70:d2:24:58:1b:d9:87:66:
                    a4:c8:ef:d5:24:27:65:3a:24:db:f6:eb:f9:e8:79:
                    0e:e2:7e:6a:6a:93:07:58:fe:da:23:7f:c1:80:44:
                    37:1c:da:3c:46:c6:36:a4:52:19:90:c6:89:71:8e:
                    cf:46:a9:f1:82:87:0f:eb:70:d1:f2:29:68:36:37:
                    61:38:8f:d9:e1:db:3f:09:d2:8f:e8:19:41:b8:df:
                    30:15:be:0e:f3:8f:c7:cd:b0:89:82:8b:36:bf:7b:
                    c2:d9:c9:19:5d:4d:35:a3:88:4f:87:66:3b:73:ed:
                    b9:d6:30:22:44:03:9b:5c:0c:7b:8d:3d:c8:a1:04:
                    f2:25:20:0a:01:3e:a3:2f:6f:58:07:81:66:42:16:
                    e1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:AC:51:14:C9:A2:45:AA:70:C5:34:09:55:64:82:5F:AA:2C:F7
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/33

    Signature Algorithm: sha256WithRSAEncryption
         07:76:5f:ba:1a:06:c6:50:29:5e:b4:cb:1d:23:f5:08:c5:48:
         7e:03:0b:32:69:d4:f6:44:16:e8:63:aa:4a:07:a3:2a:90:80:
         73:96:02:28:1a:a6:d0:26:0a:28:34:c7:f9:26:1b:2d:36:92:
         90:d6:fb:f2:58:29:5f:55:5b:cf:09:52:95:bd:d6:76:89:19:
         1c:19:6a:c2:03:51:04:b9:3f:3e:8b:c6:00:74:01:7a:69:dc:
         2a:ea:30:b4:1b:fb:b7:ce:19:59:8d:b6:ec:18:b3:0e:97:44:
         3a:c5:7a:a1:c5:96:96:0b:13:ce:88:82:9e:27:16:89:c8:8a:
         14:e2:07:bb:9d:b8:25:23:c3:7b:a6:a9:af:25:83:86:53:13:
         10:d9:af:90:76:37:8b:85:b1:07:c6:c6:6d:df:0a:c9:e5:20:
         42:2a:53:d3:e1:2e:6e:56:e2:50:bc:6b:20:33:10:31:9e:89:
         8e:f5:db:5b:00:76:43:a7:24:d4:e2:80:97:ff:da:c1:aa:d1:
         ef:06:08:90:57:7f:9c:95:9a:13:57:dd:2e:da:26:45:be:e8:
         12:37:fe:ea:62:e3:0d:7a:3d:72:21:69:2f:fd:75:63:83:04:
         40:63:ff:35:0d:b2:fc:64:a1:de:66:8d:6f:ee:a0:c2:15:2a:
         e2:2f:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:27:32 2024 by rpki-client on console-ams.rpki-client.org