Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
File:                     323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa (raw, json)
Hash identifier:          FHKkUlMAphKA+3bhxC1zsB4SmtX4IpZQsMwUGJoNhF8=
Subject key identifier:   2C:45:F3:6C:BD:BB:97:C2:58:70:88:2B:05:C5:D0:BF:D7:9D:D8:C9
Certificate issuer:       /CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
Certificate serial:       1C60073B47DFC7AC166AFDDF6CAB55313D080CE8
Authority key identifier: 9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa
Signing time:             Wed 03 Apr 2024 18:30:53 +0000
ROA not before:           Wed 03 Apr 2024 18:25:53 +0000
ROA not after:            Wed 02 Apr 2025 18:30:53 +0000
asID:                     52977
IP address blocks:        2804:768:4b00::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl
                          rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:07:3b:47:df:c7:ac:16:6a:fd:df:6c:ab:55:31:3d:08:0c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E
        Validity
            Not Before: Apr  3 18:25:53 2024 GMT
            Not After : Apr  2 18:30:53 2025 GMT
        Subject: CN=2C45F36CBDBB97C25870882B05C5D0BFD79DD8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:7b:ec:f3:a6:57:ac:7d:85:a0:bb:d9:1d:
                    34:16:99:0a:ef:38:df:74:96:ba:8d:04:1c:0c:30:
                    35:9c:40:1a:e0:22:23:e7:db:3a:13:46:b0:dd:57:
                    b2:f8:7f:f5:f9:0d:1c:5a:bb:20:aa:86:a9:55:3f:
                    cf:2d:b1:71:1a:16:ee:9e:42:0d:80:7b:1e:59:3d:
                    7d:45:ed:ad:f4:52:17:f4:2b:8c:0d:d1:42:2f:cc:
                    ca:8c:54:6f:a4:6e:e8:e1:86:e7:b9:e3:71:b7:ae:
                    40:3b:d4:67:a5:98:57:b0:43:28:d8:32:95:7e:db:
                    0c:9a:2e:72:76:99:ed:90:30:cc:39:2a:31:4e:05:
                    07:8f:cd:dd:47:0d:3f:e5:4c:ce:ea:59:f8:d0:de:
                    d2:42:3c:ba:d9:07:04:f3:10:70:59:a9:ae:a4:f4:
                    1d:47:3a:69:0e:59:d5:9a:4b:39:b0:ef:0c:d4:fb:
                    77:70:bd:d3:63:bc:64:0b:18:2d:65:97:84:05:84:
                    66:28:af:5f:81:79:ab:35:c1:05:c2:5f:9e:f6:1b:
                    4e:f9:b7:ba:06:45:78:82:76:ae:2b:22:24:ec:68:
                    8c:2c:48:32:22:57:87:85:21:0b:62:56:77:c8:8c:
                    d6:76:c8:22:cd:f8:af:36:cb:ae:1f:0e:69:59:41:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:45:F3:6C:BD:BB:97:C2:58:70:88:2B:05:C5:D0:BF:D7:9D:D8:C9
            X509v3 Authority Key Identifier:
                keyid:9C:BC:4D:C7:50:0C:24:EB:7B:E5:D1:B3:23:5A:7C:F0:EE:7C:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CBC4DC7500C24EB7BE5D1B3235A7CF0EE7CC50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9ztewJdFB2uZCHYipgn8bZtF6E7cCZ8Du1sxCthF2pp/1/323830343a3736383a346230303a3a2f34312d3431203d3e203532393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:768:4b00::/41

    Signature Algorithm: sha256WithRSAEncryption
         19:5e:e3:1d:35:ec:88:f5:b5:e1:72:0b:35:96:86:2d:97:d5:
         b0:e2:68:25:fa:0c:26:c4:55:7b:9b:ed:e8:e5:53:eb:ca:42:
         03:08:da:f7:79:44:f1:15:96:dc:05:3b:87:ae:f3:05:18:2a:
         1b:69:aa:53:9c:0c:ea:ee:c8:5f:8c:3e:b6:e3:6d:a0:ce:af:
         ca:b6:52:df:37:25:50:43:54:44:5d:b7:79:79:3f:4a:20:32:
         b2:51:81:4c:69:3a:28:4c:87:d0:20:5f:f0:07:bc:aa:10:10:
         20:e3:39:f6:4a:74:8c:dd:2a:78:df:4f:72:a4:84:99:9f:ad:
         c4:7c:05:cc:22:47:3f:1f:b7:58:bc:2a:05:1a:13:98:26:d4:
         30:1b:34:de:d7:09:c8:7c:ce:c3:46:3d:2d:f1:61:48:f8:ae:
         f0:f8:79:d7:bf:32:be:c5:00:7a:f7:6d:3a:36:b9:01:7a:25:
         06:a0:b4:ef:9a:fa:e3:88:26:c3:ec:12:62:d5:8d:64:50:05:
         0e:d3:2c:d7:ae:c7:83:56:37:e1:fa:46:f7:02:43:c8:79:01:
         bc:90:a8:9e:57:f9:c0:1e:ea:fe:3c:e5:e5:a5:09:b8:f0:fc:
         70:70:92:61:9a:9f:bd:2b:0a:2c:f1:3b:b2:12:f9:f9:f4:31:
         68:c6:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:50 2024 by rpki-client on console-fra.rpki-client.org