Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
File:                     323830343a316332303a3a2f33322d3332203d3e203631363339.roa (raw, json)
Hash identifier:          gQGmsBHvSCK/HVD+QEmh63lMrViM5+yNYPTckHGVJEk=
Subject key identifier:   49:B0:B2:48:AB:DD:FD:02:B9:BF:44:51:8D:AD:54:82:2E:03:9A:8B
Certificate issuer:       /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial:       344FE87E937AF034B45C40DE075CF85B3508CF4F
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
Signing time:             Wed 03 Apr 2024 18:32:16 +0000
ROA not before:           Wed 03 Apr 2024 18:27:16 +0000
ROA not after:            Wed 02 Apr 2025 18:32:16 +0000
asID:                     61639
IP address blocks:        2804:1c20::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
                          rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:e8:7e:93:7a:f0:34:b4:5c:40:de:07:5c:f8:5b:35:08:cf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
        Validity
            Not Before: Apr  3 18:27:16 2024 GMT
            Not After : Apr  2 18:32:16 2025 GMT
        Subject: CN=49B0B248ABDDFD02B9BF44518DAD54822E039A8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:58:96:45:15:71:44:ac:ca:53:c0:ac:b8:
                    aa:3e:d2:29:d2:71:90:b1:9f:93:ca:9e:e6:79:53:
                    82:e4:ac:ad:3d:cd:ed:da:a8:39:b7:80:5f:4a:8b:
                    8e:3a:01:69:b6:5d:5c:fc:af:71:8b:25:d4:2e:be:
                    7c:62:e8:44:da:b8:0d:ff:ec:d9:73:05:39:36:c7:
                    0f:b6:ce:bd:d5:46:a3:62:4b:65:44:40:0a:20:44:
                    5a:4f:15:25:ac:5f:07:90:96:58:d5:06:08:bd:ce:
                    35:cc:c3:22:77:a3:7b:a7:c0:03:5a:65:b7:2e:b2:
                    f4:5a:db:76:9b:1e:32:7d:f7:5f:db:e7:5a:d5:d5:
                    29:08:9b:d1:13:ef:98:da:91:cd:88:21:3f:3a:b9:
                    a8:98:e9:78:6a:0f:66:34:82:3b:d8:8b:17:83:4c:
                    04:88:db:a5:fb:60:5c:7a:4b:b1:9d:30:a5:0a:f1:
                    96:4e:1a:8f:6f:69:0d:b6:50:f5:6e:5d:47:94:16:
                    3c:7d:8f:4c:e3:6f:7f:0a:b7:59:7b:88:02:71:bb:
                    ab:35:b8:38:f9:5a:30:99:a6:20:59:12:c4:8e:ac:
                    0d:fd:d5:d8:c1:d4:8d:be:2b:f7:5b:c7:55:0c:96:
                    0c:96:04:95:03:0e:e3:b7:99:23:ca:42:2a:60:2a:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:B2:48:AB:DD:FD:02:B9:BF:44:51:8D:AD:54:82:2E:03:9A:8B
            X509v3 Authority Key Identifier:
                keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:90:48:a6:4f:6d:1c:7b:45:9b:cb:47:ef:64:43:fb:31:70:
         ac:c2:71:35:94:d9:b2:21:3e:84:1c:93:3a:f6:be:35:40:16:
         08:08:dc:12:bd:60:96:d8:19:68:5f:29:87:a4:39:cc:9b:7f:
         ce:78:a3:51:13:f9:2a:6e:6e:36:f7:70:ab:f2:f7:30:45:2c:
         62:9e:02:e6:22:64:9f:b3:11:98:18:1e:da:01:f9:d5:c5:e7:
         39:20:f8:1e:c3:23:07:f1:6c:51:04:a5:8b:fd:e5:ac:29:f0:
         6c:17:ce:c3:6d:7b:05:3f:5e:1a:2c:6f:bd:3d:cd:e3:29:da:
         76:2a:7f:46:94:cb:7d:2d:38:89:7d:e8:33:71:63:de:fa:e8:
         f3:38:fe:3d:8a:d3:d4:7c:32:4e:0d:2e:81:d0:31:f8:af:92:
         76:82:2f:09:e8:1b:d9:7d:46:46:f4:1b:13:97:9c:a9:a3:80:
         fb:1e:46:b2:a3:a2:f0:3f:05:36:33:32:e3:a8:17:97:8a:44:
         72:77:c6:ae:57:80:db:07:ff:3b:e8:89:b4:29:14:0b:94:35:
         da:d4:2d:79:6f:74:82:d2:34:28:cd:0f:01:9d:18:4d:58:3d:
         2d:b7:65:66:90:ce:90:29:0d:bf:83:83:64:0e:a4:71:4a:d9:
         89:81:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:51 2024 by rpki-client on console-fra.rpki-client.org