Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          kHYTa4KYDpaIuB275ODjB6BFhklUCBhEqG6gBJiYE9c=
Subject key identifier:   06:6A:89:A5:1F:5F:B4:8C:83:64:C2:B3:76:1B:BD:73:22:F5:CA:B1
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       05A7D9C6BB6F816AE3682F2FAEBC2B1BE507F8A8
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:47 +0000
ROA not before:           Thu 04 Apr 2024 00:45:47 +0000
ROA not after:            Thu 03 Apr 2025 00:50:47 +0000
asID:                     61637
IP address blocks:        2804:1c18:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a7:d9:c6:bb:6f:81:6a:e3:68:2f:2f:ae:bc:2b:1b:e5:07:f8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:47 2024 GMT
            Not After : Apr  3 00:50:47 2025 GMT
        Subject: CN=066A89A51F5FB48C8364C2B3761BBD7322F5CAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:bc:0e:a2:51:45:45:51:cb:36:75:c6:ef:
                    ed:ed:92:da:bf:48:41:bf:b7:8d:9c:f0:72:66:e5:
                    dd:27:06:97:dd:e4:5e:6d:d7:87:75:dc:c6:97:40:
                    78:42:46:f0:2b:f6:72:55:27:35:24:1a:d4:78:f9:
                    37:44:df:02:39:13:ae:c6:30:a8:5f:5e:81:71:83:
                    6c:0c:70:21:4a:71:82:85:20:f5:c8:85:b6:9c:90:
                    a8:f9:bd:f4:09:b8:17:02:4c:47:46:7d:3f:d4:0a:
                    32:29:30:55:0c:b0:85:77:8e:6d:dc:f6:8e:75:02:
                    af:bf:7d:e3:43:c6:c5:2b:99:53:69:06:b6:c2:20:
                    4f:f9:73:d9:11:ad:84:d2:43:15:89:0f:9f:51:af:
                    d6:91:72:39:ea:a0:9b:f1:b6:4a:7c:d1:b8:65:f0:
                    7b:07:05:6e:26:29:5e:76:28:7b:9c:9b:09:b7:6f:
                    b7:9b:98:2f:86:05:c2:06:66:db:4a:d0:18:d2:7c:
                    3e:6c:77:06:99:ef:f2:1a:24:13:6e:d4:54:34:b8:
                    2b:85:22:5b:fe:47:b4:82:c3:2f:c6:ca:7f:50:2d:
                    ac:b3:ee:9d:5e:41:aa:38:cd:f2:e7:bd:b4:c3:bc:
                    e6:29:ad:90:f8:32:ae:fb:a4:f5:13:ce:3d:41:4d:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6A:89:A5:1F:5F:B4:8C:83:64:C2:B3:76:1B:BD:73:22:F5:CA:B1
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a633030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:17:d1:07:8d:c5:c4:58:b7:93:3e:24:8a:25:50:f6:d5:95:
         33:c7:a2:8f:9f:62:10:ac:24:2f:01:7d:ad:c3:2f:a1:82:51:
         75:d9:d7:a9:7e:dc:d4:cf:b4:70:72:11:d6:b1:28:c5:46:5e:
         57:07:b1:d2:d4:d2:06:1e:57:f1:80:91:67:3a:1f:41:46:7c:
         34:6d:88:c6:8c:a3:dc:24:91:99:54:09:12:61:b0:ca:5b:d1:
         27:9e:23:79:d9:b2:53:4d:1d:b6:4f:c9:81:af:09:d2:61:11:
         d5:c8:b8:bf:ac:19:73:40:d1:ac:e9:17:1e:af:1d:00:68:ef:
         03:8b:45:fc:64:99:11:dc:f6:16:b5:42:b3:29:45:50:24:c6:
         84:2e:bc:b9:06:d7:a7:43:e3:8f:1e:f1:ae:00:04:fb:76:58:
         10:9b:1a:87:36:a4:de:3a:fa:27:02:9b:fa:7b:84:4e:31:28:
         99:1d:12:b1:f9:c3:30:40:54:43:2b:11:8a:f5:3d:7e:88:fa:
         3f:dc:18:31:80:7a:46:fd:a3:1e:b6:0d:ae:9e:70:3e:10:be:
         55:45:41:a0:48:b4:c9:41:77:86:2b:3f:28:a1:59:ec:d8:6a:
         e1:88:8a:74:31:7f:2f:93:aa:eb:e5:5e:ca:f1:13:4a:53:f5:
         f4:b5:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org