Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa
File:                     323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa (raw, json)
Hash identifier:          LUwDb23phqpGsb2FaG/LzzqHTHoh1MAU3cv1U0t5k/Y=
Subject key identifier:   78:13:F5:35:FE:28:99:A6:30:2A:77:07:17:1F:BE:65:45:ED:F4:1B
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       4B0C8DB4A413F5B3B89E3E86B7A49CC1DF4BD279
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:41 +0000
ROA not before:           Thu 04 Apr 2024 00:45:41 +0000
ROA not after:            Thu 03 Apr 2025 00:50:41 +0000
asID:                     61637
IP address blocks:        2804:1c18:a000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:8d:b4:a4:13:f5:b3:b8:9e:3e:86:b7:a4:9c:c1:df:4b:d2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:41 2024 GMT
            Not After : Apr  3 00:50:41 2025 GMT
        Subject: CN=7813F535FE2899A6302A7707171FBE6545EDF41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:f6:5a:08:b0:46:87:5e:b4:21:44:23:4e:
                    10:4e:51:cc:e6:2a:3c:54:e4:32:84:e6:bd:24:da:
                    1a:06:a8:a7:db:fb:d4:c9:c4:a8:b1:6c:97:c4:9a:
                    91:c9:01:cb:5a:9b:55:12:be:19:34:6b:db:01:cc:
                    7f:f6:a4:02:90:99:fe:fd:5e:65:09:2c:ef:57:ca:
                    f0:f9:f3:bf:6f:13:1e:c6:95:bd:39:85:08:8f:90:
                    0f:74:fc:32:20:9a:03:97:f1:40:6b:03:d9:0a:c9:
                    8a:3f:27:70:92:25:92:eb:44:05:d0:d9:8d:70:8c:
                    90:72:3b:14:28:84:b4:6b:55:4a:65:3b:62:09:29:
                    7d:c8:8c:86:f6:3f:ce:16:15:61:ad:67:4d:dd:6b:
                    c3:dd:1b:3b:10:92:cb:07:7c:11:4f:60:dd:18:69:
                    5a:68:88:15:1f:69:5f:22:d9:f8:15:d3:3d:48:bc:
                    b7:67:10:85:26:8f:35:d9:15:49:19:24:91:ce:29:
                    a1:15:38:fe:71:09:c8:07:c7:89:0b:a8:6b:f8:85:
                    8a:95:2f:be:26:e8:bd:9a:56:b9:e8:b4:2e:54:13:
                    2c:49:1c:5f:08:6d:a7:f6:8a:a9:c3:bb:10:66:9c:
                    49:37:e4:ef:09:3b:bf:1c:7d:78:6e:af:99:95:06:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:F5:35:FE:28:99:A6:30:2A:77:07:17:1F:BE:65:45:ED:F4:1B
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a613030303a3a2f33352d3335203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:f1:4c:2e:c8:87:ca:16:c8:03:25:78:08:fe:8d:54:ae:
         7d:a1:a8:e1:f0:a8:9f:9a:23:e2:6e:5c:f2:3c:49:ab:d5:6e:
         dd:1f:78:62:7f:08:80:45:64:0f:fb:71:9c:43:c4:88:ce:e4:
         b6:df:e7:05:0c:05:6e:66:1c:db:24:70:63:9a:19:eb:2b:b0:
         b1:22:40:4d:dc:e8:34:d1:72:fb:3f:61:34:0b:47:b9:fa:b4:
         b1:ee:c9:4d:ee:d5:7d:1f:a0:18:df:a1:05:76:9d:6c:69:cc:
         e4:d5:55:5e:94:52:95:8e:e0:d8:f0:37:3f:73:61:93:94:1c:
         32:26:dc:fe:59:33:92:9e:d2:77:68:93:4f:86:04:d2:79:ec:
         f9:43:98:33:9e:72:dd:e5:10:60:a7:b1:91:cd:9e:00:29:6f:
         43:61:37:df:cb:c7:c1:31:77:07:0d:3e:37:f2:7b:f6:6a:36:
         a3:54:3b:f9:50:0b:6f:8c:e5:58:66:b1:06:d2:a4:b2:ed:06:
         04:a5:db:38:17:43:6f:14:8d:48:15:56:ef:0a:f7:40:ae:40:
         63:d3:89:d1:d0:3c:2c:c0:ac:d8:7a:13:ef:c5:b3:40:30:67:
         be:18:0d:31:20:36:d9:68:38:1a:d2:12:6a:7c:43:2a:25:e7:
         25:4a:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org