Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          150vWOiJEFYO4tWTpRl2flf31jAk6EVkFvgaGVeZOj8=
Subject key identifier:   1B:26:1F:8F:87:AF:AF:5F:57:B8:72:09:16:CA:FF:BA:5A:6B:98:35
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       32D848A23164363389E08F6BB9A5E517C42603F5
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:47 +0000
ROA not before:           Thu 04 Apr 2024 00:45:47 +0000
ROA not after:            Thu 03 Apr 2025 00:50:47 +0000
asID:                     61637
IP address blocks:        2804:1c18:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d8:48:a2:31:64:36:33:89:e0:8f:6b:b9:a5:e5:17:c4:26:03:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:47 2024 GMT
            Not After : Apr  3 00:50:47 2025 GMT
        Subject: CN=1B261F8F87AFAF5F57B8720916CAFFBA5A6B9835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:33:29:93:e3:17:a1:3b:0a:dc:d9:73:de:
                    f3:86:62:0b:82:aa:22:23:6e:8c:b5:cd:65:82:d2:
                    f8:ca:45:24:b4:3b:36:d6:5d:8d:24:63:cc:5a:7d:
                    82:18:04:bb:4d:a0:d0:b5:0a:08:aa:fc:63:a2:2f:
                    d4:e6:41:0b:44:b4:d3:e7:3c:db:cc:6e:43:51:bb:
                    23:81:dc:0c:74:65:41:8a:61:50:d1:44:06:8b:e4:
                    0c:05:9e:46:62:80:3e:e7:2a:f1:1b:f5:d4:a4:fa:
                    ac:71:09:46:d0:e1:d4:de:98:16:a2:d4:45:21:d5:
                    86:5a:9b:6d:57:e5:e3:fc:0c:10:3d:d8:99:a0:95:
                    b9:7e:e9:0b:da:a3:83:e6:6b:2c:67:84:23:49:11:
                    92:c6:41:23:a9:5f:40:ad:e6:d2:4b:20:0c:b6:13:
                    6f:c2:6f:bc:07:e9:cf:81:a4:8b:9c:e6:0e:31:7e:
                    ac:0e:0b:4f:b5:85:f6:d7:89:28:c5:7f:d1:3e:eb:
                    41:54:8d:0f:fb:ea:1e:6f:db:5e:e6:ce:82:24:91:
                    45:74:8a:30:60:ec:5a:15:6c:63:99:bc:60:16:ac:
                    e7:cb:b8:34:31:a9:bb:18:3f:68:0d:41:64:a2:c4:
                    01:ff:a9:48:45:44:6e:6e:32:35:07:ff:0f:20:49:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:26:1F:8F:87:AF:AF:5F:57:B8:72:09:16:CA:FF:BA:5A:6B:98:35
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:98:ef:42:2e:92:12:5c:a9:88:74:7a:e8:0e:6e:8f:fa:
         69:d3:1a:c3:21:aa:ef:8a:5b:03:0e:3b:e6:ac:5b:46:38:23:
         e4:02:0d:fd:fc:67:33:3e:1f:0c:9f:fc:c3:c5:72:5c:52:d9:
         b7:6f:74:a1:88:f8:68:80:60:d8:97:23:83:e0:bb:73:0d:41:
         b2:f9:18:49:8b:5a:11:3b:ae:32:f6:c9:c3:30:9a:6b:6a:1b:
         7a:c8:18:bf:54:90:1f:34:e4:42:d1:3b:f7:4a:a3:19:4f:f8:
         7c:37:35:3c:cb:7e:c1:51:15:5a:60:3d:74:70:ad:64:e1:30:
         2b:39:02:0a:85:a6:e9:87:18:99:38:d3:7b:0e:c9:64:fe:d3:
         06:c9:61:af:6f:d1:e7:26:44:38:6b:23:80:f5:b5:df:57:2a:
         21:c8:99:c8:86:fa:69:9f:3c:04:11:6c:c7:b7:f1:ab:27:bd:
         d0:71:fa:aa:58:28:86:01:61:4a:f6:69:b3:34:c6:cf:70:8d:
         8c:96:5f:bb:3c:0f:eb:aa:11:1c:fb:40:70:a8:52:3c:34:16:
         66:ac:8b:7a:07:1d:e0:e1:62:bb:8a:8c:ad:38:19:e6:08:c3:
         5d:32:05:a1:96:9b:97:08:2e:c7:2e:7c:2d:62:ea:42:51:3b:
         61:7d:03:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:27 2024 by rpki-client on console-fra.rpki-client.org