Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a333830303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a333830303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          hmgveNXw/NUw00nzKki4djxMvF0MZS/l4Nu+eOpj1eg=
Subject key identifier:   64:73:EB:19:62:40:FE:CC:E4:7B:AD:64:BD:4B:94:9F:18:6A:A9:26
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       646D6CF5E356A9C797C4D49E69B1B4E371E0672B
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a333830303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     52977
IP address blocks:        2804:768:3800::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6d:6c:f5:e3:56:a9:c7:97:c4:d4:9e:69:b1:b4:e3:71:e0:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=6473EB196240FECCE47BAD64BD4B949F186AA926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:48:43:ba:88:7a:77:60:99:79:59:97:ab:
                    18:bd:c2:86:12:eb:33:cc:0b:80:a7:3c:98:1d:29:
                    bf:0a:f5:ca:e9:13:cc:f3:9c:ef:bb:ce:83:9e:58:
                    06:30:76:b0:40:8b:e8:b5:c3:d4:cf:3c:b4:c4:8c:
                    9b:b6:8f:21:aa:aa:e4:a4:62:f2:da:8b:0b:01:c2:
                    3c:89:57:04:96:de:e4:e4:6a:95:00:2a:71:fd:e5:
                    d4:a8:cd:95:a1:63:1e:fd:e0:e2:18:03:84:1b:fc:
                    ee:e1:de:a7:a7:74:41:0c:9b:29:68:98:e6:95:a3:
                    7e:15:d8:a1:c2:c2:0e:c0:0a:0c:7c:26:55:63:82:
                    d6:5a:3f:5e:38:88:d2:3c:78:b2:3c:7f:0c:33:ac:
                    ed:13:07:80:66:26:ed:7f:c2:83:c0:1c:8d:d0:95:
                    fe:c8:26:ba:b6:d2:8b:c9:2a:1a:6b:83:d4:77:77:
                    54:f5:c8:ce:87:4a:7d:6a:79:0f:01:bd:ce:7a:85:
                    83:eb:d7:91:e6:a8:25:10:f6:74:b5:da:f8:53:ac:
                    f3:ce:90:be:16:0b:cf:7a:d1:61:28:02:49:7e:bf:
                    b8:54:ae:81:85:0f:e2:ef:b6:00:fd:1c:d0:75:51:
                    4f:ba:59:c9:41:8b:88:63:be:38:a3:58:2c:4d:14:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:EB:19:62:40:FE:CC:E4:7B:AD:64:BD:4B:94:9F:18:6A:A9:26
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a333830303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:3800::/41

    Signature Algorithm: sha256WithRSAEncryption
         09:20:fb:78:57:5f:f0:43:79:3e:17:24:fe:37:a3:9e:7a:4d:
         e7:8f:7b:2d:5d:de:9d:9d:58:36:e4:22:11:57:f8:01:b7:58:
         af:5b:a5:2e:88:df:29:da:2b:38:db:0e:aa:10:41:74:01:71:
         9c:33:5d:d1:25:72:fc:79:1c:d4:4f:6a:a4:72:8a:88:ee:d8:
         ad:45:b6:a7:32:36:63:8b:3e:0e:17:28:5e:e3:55:a1:19:a3:
         a8:66:d4:cc:1f:6e:8c:42:e2:a9:6d:ae:f8:9d:ee:a5:c7:d4:
         e2:8d:5c:f8:f5:9b:27:e4:ab:43:e6:28:0d:40:ae:d6:b1:2d:
         32:95:dc:e4:fe:e3:93:bc:fa:5d:a2:0d:31:92:27:db:2d:ec:
         77:4b:94:77:4b:f7:a6:cf:fd:73:e6:9e:08:d2:3a:93:82:5f:
         81:74:3d:bb:0a:c9:f4:62:24:8f:e2:2b:00:a5:72:4f:c5:a0:
         13:23:46:b3:e3:51:d5:a9:c3:b8:96:68:6d:31:e3:00:55:16:
         e2:16:42:5d:2e:99:c1:b4:9f:e4:8b:52:da:56:51:05:93:59:
         26:8b:01:6e:2b:88:02:13:fd:f6:52:3f:81:7a:e9:a6:d7:1e:
         d0:b5:12:8b:88:92:3a:56:7f:7c:df:65:1b:4c:2a:3e:6d:2e:
         31:2b:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:18 2024 by rpki-client on console-fra.rpki-client.org