Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
File:                     323830343a35633a3a2f33322d3438203d3e203238323031.roa (raw, json)
Hash identifier:          eiGeqePQ2qspR9QH5do/uooouz1+07wES68tLgBXImE=
Subject key identifier:   6D:0D:90:25:BB:37:7D:E8:BA:2B:59:21:FC:CB:E5:35:34:6C:98:C5
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       1C10151A5D3524E0891F6C00023D587F43804C48
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa
Signing time:             Wed 10 Apr 2024 12:30:44 +0000
ROA not before:           Wed 10 Apr 2024 12:25:44 +0000
ROA not after:            Wed 09 Apr 2025 12:30:44 +0000
asID:                     28201
IP address blocks:        2804:5c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:10:15:1a:5d:35:24:e0:89:1f:6c:00:02:3d:58:7f:43:80:4c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Apr 10 12:25:44 2024 GMT
            Not After : Apr  9 12:30:44 2025 GMT
        Subject: CN=6D0D9025BB377DE8BA2B5921FCCBE535346C98C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:c9:9b:a1:d7:c9:b4:7d:f0:53:39:b6:34:
                    7a:bf:41:3e:37:67:f4:59:48:c9:69:71:fa:13:e1:
                    da:99:da:03:2c:07:42:28:9b:91:3f:6d:70:90:34:
                    15:e8:f6:7d:07:f6:23:97:60:8f:e3:e2:7f:3f:83:
                    4f:6b:6d:71:16:b6:cd:65:48:72:b1:aa:b4:86:2d:
                    77:4c:e0:d8:62:ba:de:0a:6e:2e:95:6e:a2:ef:7f:
                    4a:97:10:9a:75:60:b5:d1:6b:6a:43:af:d8:fd:4c:
                    5e:44:d1:e3:69:b4:47:fc:1e:84:6a:85:38:45:e9:
                    34:01:6d:c2:42:46:0a:5d:de:83:8f:7a:b3:65:87:
                    be:42:63:96:ee:fb:27:78:04:d6:63:48:4a:76:13:
                    9d:2e:79:55:ae:8f:db:b7:14:47:35:47:be:03:36:
                    6d:5d:dd:1f:b1:d9:aa:8f:c4:da:44:c3:f9:47:38:
                    25:1b:8c:64:ef:7f:d3:14:32:10:68:50:c0:0f:67:
                    57:ac:ea:17:17:b6:87:4a:bb:24:2e:f6:28:9d:e9:
                    57:c6:28:00:2f:c7:dc:17:3e:8b:71:5c:9f:b6:da:
                    56:f0:8e:06:52:f8:69:94:0a:97:db:c7:52:e8:b9:
                    c0:a9:4e:bc:82:d0:53:53:12:bd:2b:06:56:25:2c:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0D:90:25:BB:37:7D:E8:BA:2B:59:21:FC:CB:E5:35:34:6C:98:C5
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/323830343a35633a3a2f33322d3438203d3e203238323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:a7:f1:ba:b2:1b:c0:b1:f4:c2:5d:52:ac:00:f9:d9:d4:ef:
         80:b2:d6:15:aa:15:18:70:79:cc:d3:7d:6d:78:c9:6c:c8:60:
         d4:2e:90:0d:15:99:d2:37:e5:89:df:0a:90:7d:ce:45:dd:8e:
         bc:52:83:b9:e0:dd:04:32:84:6c:9c:14:10:ae:52:f6:1a:0c:
         e9:9f:d7:a4:98:92:89:72:4e:bb:5f:a4:8b:ab:b4:af:b0:be:
         5c:6b:9c:d5:34:81:34:2a:53:28:68:46:77:0d:dc:ef:13:a1:
         c4:75:39:c6:4c:b8:d1:ab:5e:f3:03:6d:f8:2f:45:cf:ea:e0:
         67:c4:93:50:af:08:1b:80:99:c4:a8:42:95:36:fb:e1:66:be:
         e0:97:f7:cc:ac:51:27:b2:b8:4b:4f:ee:3d:c4:e3:4f:34:36:
         58:73:d7:a9:22:f6:f8:d5:8e:3b:38:e8:58:a4:ae:f7:fd:79:
         9d:39:d9:7b:6c:ec:bb:28:8d:9a:f1:3e:e0:bd:c7:4d:bb:3f:
         54:70:4c:72:e0:c8:5c:8e:27:32:03:69:13:24:96:d7:4a:6d:
         09:26:65:31:41:90:a2:c4:7d:ff:5f:b6:ca:f3:dd:34:8d:bd:
         68:9e:2c:48:bc:4b:ec:e0:6f:b5:51:00:2c:23:a9:96:37:87:
         60:25:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org