Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          Q3lSSInB2tr/AORcIIMApfFgaObk7sqznyE0k+hKyFw=
Subject key identifier:   DB:70:1C:15:BC:6B:3A:4E:47:D7:22:DA:FC:11:35:A8:E5:5B:C7:B0
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       3F99B261D6ED8FDAAFD30D2698C9AA2890DDBCC0
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 04 Apr 2024 00:50:44 +0000
ROA not before:           Thu 04 Apr 2024 00:45:44 +0000
ROA not after:            Thu 03 Apr 2025 00:50:44 +0000
asID:                     61637
IP address blocks:        2804:1c18:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:b2:61:d6:ed:8f:da:af:d3:0d:26:98:c9:aa:28:90:dd:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Apr  4 00:45:44 2024 GMT
            Not After : Apr  3 00:50:44 2025 GMT
        Subject: CN=DB701C15BC6B3A4E47D722DAFC1135A8E55BC7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:35:e0:f8:d6:46:54:6d:59:af:2b:98:b6:
                    3e:e8:a1:b0:41:9a:57:00:ab:6c:e8:91:4a:24:ac:
                    a5:b3:f6:0f:81:96:08:fe:19:ee:10:74:26:4a:03:
                    62:32:7d:ed:90:8f:cd:69:e0:0e:47:c7:30:ff:d9:
                    c8:0d:01:52:4f:78:98:47:76:d2:89:28:63:da:a5:
                    47:cb:f5:fa:80:c1:dc:a0:c9:30:b7:f6:e8:22:4c:
                    8c:10:4a:42:3a:92:a9:7e:b3:2c:74:a2:eb:3a:57:
                    0f:2f:63:8b:88:a3:f4:8c:08:33:3f:2e:cc:d8:9c:
                    1b:e7:6d:1c:17:fa:90:1d:88:82:05:ff:5d:4c:19:
                    6a:23:c3:92:92:b2:eb:3b:87:c1:83:74:81:51:5c:
                    ef:99:1f:9f:21:ea:6a:0f:0e:e7:2f:df:6a:11:39:
                    50:3a:e9:bd:94:ff:ef:a5:a9:3b:e6:fa:2b:43:a4:
                    d8:06:7f:a2:f7:a5:43:db:b6:9c:c6:66:7a:cd:98:
                    a1:1f:12:b7:9f:5e:90:21:b9:66:d4:fd:65:4d:41:
                    f0:10:df:5a:b6:da:9c:81:cb:cd:cd:de:ba:62:94:
                    5b:a5:97:12:49:39:08:50:85:9d:59:ed:ed:25:28:
                    3f:71:8a:08:08:a3:d2:37:0c:ee:32:af:a7:87:33:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:70:1C:15:BC:6B:3A:4E:47:D7:22:DA:FC:11:35:A8:E5:5B:C7:B0
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a653030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:ff:15:11:cb:58:7d:0b:7b:b4:51:69:1e:3b:ff:cc:29:
         96:07:18:6c:61:f6:91:d4:7b:b1:58:c6:15:de:88:95:b9:01:
         ad:a0:50:2b:10:fe:18:84:71:fd:d6:87:f9:c1:ea:24:eb:5d:
         d3:19:4f:e3:01:4f:ca:1c:3b:ef:91:ce:b2:27:48:61:f4:d7:
         59:79:19:99:36:98:06:5d:09:ad:5c:7f:cf:92:4b:7d:df:b8:
         0f:d3:e5:27:a9:01:a8:40:fd:da:61:a7:fb:28:8e:30:62:51:
         78:9e:5c:36:fc:e9:44:ab:9f:4b:6a:99:da:ff:a6:59:27:d0:
         f1:71:16:08:28:a4:24:ef:71:00:39:fa:64:3f:16:e3:3e:c7:
         dc:78:10:35:08:35:03:d6:16:22:66:3d:ab:dd:d6:9d:61:ad:
         71:29:e2:96:63:f9:38:5f:58:6f:be:ec:a4:e6:0d:6b:d6:d3:
         b7:5e:0e:24:87:b5:74:41:97:11:e4:fd:7d:fe:91:9c:9c:47:
         5b:2d:42:c4:77:31:7b:60:90:43:ae:7c:b9:12:68:ab:51:7e:
         3d:17:e6:b1:8b:51:35:9a:7d:34:85:08:7e:86:8e:93:36:6b:
         87:33:3f:8f:c8:4b:68:20:95:3f:a7:a6:08:a5:61:7e:8c:58:
         8a:43:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org