Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33342d3334203d3e203631363337.roa
File:                     323830343a316331383a3a2f33342d3334203d3e203631363337.roa (raw, json)
Hash identifier:          gs8MGA2/4bRzea6ppcrC5DBo2DzkPNkn3eDA/6EhrM4=
Subject key identifier:   4F:F4:C1:01:1A:C3:5C:25:95:67:A7:97:01:AB:28:78:9B:88:0A:7C
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       082516E485483DA04BB2F6C42DCB0856FC91D63C
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33342d3334203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:41 +0000
ROA not before:           Thu 04 Apr 2024 00:45:41 +0000
ROA not after:            Thu 03 Apr 2025 00:50:41 +0000
asID:                     61637
IP address blocks:        2804:1c18::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:16:e4:85:48:3d:a0:4b:b2:f6:c4:2d:cb:08:56:fc:91:d6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:41 2024 GMT
            Not After : Apr  3 00:50:41 2025 GMT
        Subject: CN=4FF4C1011AC35C259567A79701AB28789B880A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:80:12:24:a8:05:ae:8c:3e:aa:8d:69:7f:
                    dd:b8:8f:59:5f:53:82:b0:83:50:21:ab:17:b6:a4:
                    43:52:80:06:80:c5:40:3c:76:f6:07:a9:c2:9e:09:
                    6d:fb:cc:97:32:51:37:6c:c9:06:55:14:6d:89:16:
                    3a:87:fb:1e:f7:ed:3a:ac:0a:cc:c1:62:10:20:f0:
                    73:1e:35:82:18:6d:04:52:87:22:4f:67:a9:bd:f2:
                    16:b8:02:ae:45:b4:fb:2e:53:31:6a:6e:0c:e3:b6:
                    0b:27:09:df:40:e7:35:26:55:9d:29:d9:4c:8f:3e:
                    f8:7c:1f:81:20:47:f2:ff:2b:f1:14:18:ef:b9:09:
                    ee:f2:6b:0f:8e:21:a5:0d:cd:58:00:a8:ee:59:79:
                    24:f0:4a:49:b2:2e:97:74:29:54:dc:dc:5b:8a:f9:
                    a6:8d:e8:9f:d5:a5:09:21:45:e8:34:dd:9e:17:b4:
                    72:62:86:4e:17:7b:01:90:ac:a4:9a:1b:d8:09:c2:
                    57:fd:54:57:41:5e:40:53:65:34:42:62:11:9b:41:
                    bd:ce:ea:2a:37:46:ff:20:11:6d:2c:a2:9d:10:e7:
                    f3:2b:15:f0:4c:e0:f7:3f:23:b9:dd:52:d2:c3:e8:
                    e3:31:bf:1b:86:34:fa:e5:cf:fd:2e:a1:2c:e2:d1:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F4:C1:01:1A:C3:5C:25:95:67:A7:97:01:AB:28:78:9B:88:0A:7C
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33342d3334203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/34

    Signature Algorithm: sha256WithRSAEncryption
         af:9a:ae:66:7e:25:be:03:84:c4:36:de:4b:31:e8:48:d5:e3:
         59:b5:bb:aa:e4:c0:8f:f7:d5:d1:a6:d1:4b:64:bb:62:42:cf:
         5c:5e:5b:cd:aa:64:d7:e0:0e:2f:61:b7:a0:01:51:f0:f9:ad:
         dd:15:78:60:77:fb:77:40:36:98:ca:59:84:df:6d:ea:4b:ad:
         c2:a4:0d:eb:ef:b0:99:b5:5c:9c:cf:c0:18:12:0c:4b:35:2a:
         2a:a5:ba:69:fa:c2:39:6d:b2:b2:0e:d9:f4:b9:cf:73:9c:ab:
         10:97:b0:16:d8:7b:be:f1:f3:da:b4:24:5c:53:d5:f3:df:71:
         56:f3:9a:db:f2:ab:80:1c:a0:ff:06:36:56:f9:51:b5:ee:41:
         cb:ae:e3:10:34:d6:63:d9:e6:13:02:50:56:1f:1b:cb:b4:3a:
         b9:7a:0f:90:4f:cc:a0:c4:78:06:d3:6c:f6:0f:fe:fa:d1:c0:
         f1:0c:44:8b:ad:0b:47:68:9b:61:1c:82:7e:3a:02:86:e1:f4:
         5f:1a:8d:38:e1:93:67:aa:44:37:77:9f:3d:99:41:6b:19:14:
         a8:23:19:ed:76:b9:57:ea:e0:18:40:b3:5a:47:47:70:49:49:
         fd:4a:5b:00:25:7e:1c:35:58:a8:ea:b0:be:45:0d:6f:82:de:
         e0:4b:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org