Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
File:                     323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa (raw, json)
Hash identifier:          5Fqzc0lDlrHUqR6NgMYGhYbxJord3AiwBsk1W6BEbrU=
Subject key identifier:   D3:87:2C:B8:1B:B2:C8:67:30:B5:BE:AA:55:A6:65:C3:E4:F4:C8:A1
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       09C8C51C53A240EFFA0523D64FCC0ACD7F86F121
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:50 +0000
ROA not before:           Wed 03 Apr 2024 18:25:50 +0000
ROA not after:            Wed 02 Apr 2025 18:30:50 +0000
asID:                     52977
IP address blocks:        2804:768:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c8:c5:1c:53:a2:40:ef:fa:05:23:d6:4f:cc:0a:cd:7f:86:f1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:50 2024 GMT
            Not After : Apr  2 18:30:50 2025 GMT
        Subject: CN=D3872CB81BB2C86730B5BEAA55A665C3E4F4C8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:5e:95:35:5f:ef:85:c9:a7:e1:90:2b:57:
                    de:5a:f9:5b:5b:a2:6a:77:f6:32:81:e0:50:62:27:
                    f8:81:ae:e9:77:44:36:fe:80:eb:0a:42:96:86:ad:
                    7b:41:6b:47:9c:d7:05:5b:15:a6:c5:09:db:a3:e5:
                    e9:3d:de:28:06:49:b5:f0:4c:6d:96:72:83:21:fe:
                    b6:5f:f4:e4:ad:e5:88:d8:be:4b:d6:38:0b:07:20:
                    ad:9b:a5:24:d2:95:f9:bb:d5:43:4f:52:c1:1b:fa:
                    d4:ff:f7:d6:0d:17:9f:49:fc:e3:a7:a8:98:a0:7b:
                    97:de:f9:14:4b:c7:74:41:bf:53:a2:bb:72:bf:72:
                    83:54:3e:bb:ad:7e:7d:7b:e7:14:6c:9b:bb:b1:c9:
                    60:39:bc:52:98:5b:3e:0d:38:01:81:80:fc:c5:7d:
                    73:f1:de:75:b2:cd:e1:be:61:7f:3f:bf:f5:b1:f3:
                    89:3d:24:78:f8:bd:a9:9a:1a:63:04:6b:03:17:39:
                    af:10:c3:27:88:45:49:66:5c:ae:1b:6a:29:41:5a:
                    88:70:fe:80:69:ea:6c:d7:4e:9c:30:10:9e:9f:05:
                    01:82:59:13:4d:bc:c2:89:55:40:35:7c:ca:3d:cb:
                    92:60:0d:75:aa:f0:03:2b:22:f5:e4:86:e2:37:04:
                    d2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:2C:B8:1B:B2:C8:67:30:B5:BE:AA:55:A6:65:C3:E4:F4:C8:A1
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a313030303a3a2f33362d3336203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         73:43:31:9e:86:2b:5e:6e:db:75:73:3d:f2:9f:b7:46:82:4a:
         d9:30:69:ef:9f:4f:47:ff:20:91:bb:d0:cb:7a:90:23:91:c2:
         3f:c1:de:5a:6e:92:3f:fa:bc:d8:76:a6:f5:f0:91:7b:5e:f9:
         3b:7e:7e:d9:dc:55:09:9e:a2:4a:b3:29:fb:bb:e2:2c:95:0b:
         ab:f2:f1:5c:ef:c1:c6:00:0a:e4:9e:17:e9:ac:a0:10:42:a7:
         3b:45:82:20:77:4c:be:0d:70:fc:c1:60:a6:b6:81:ed:9a:9e:
         11:e2:e1:83:dc:0e:73:0e:47:2c:ce:d3:22:eb:6f:e2:cf:f2:
         ba:18:c7:37:10:40:5e:3b:60:71:0a:83:3e:84:42:c8:b6:5d:
         d1:73:fe:f0:48:e7:5b:d5:c4:1f:f4:c9:4b:88:56:f8:58:eb:
         d8:8c:de:41:1d:33:ae:ce:91:4e:58:bf:93:c1:2e:21:30:31:
         40:d3:02:ea:8f:e0:f6:dc:0f:0d:d5:a1:c6:49:92:07:c3:d5:
         26:b1:43:19:78:f0:10:0a:84:27:62:7b:6e:e2:84:ec:68:45:
         4d:4c:9a:08:c3:7f:f4:f9:b0:3a:a4:82:9c:81:59:81:e4:13:
         c6:ef:13:0a:52:83:0d:a4:5a:b8:af:cf:af:92:a8:59:fa:04:
         44:4f:ab:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:20 2024 by rpki-client on console-ams.rpki-client.org