Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          Gv+PI2nZp0cxruPymoob4G4Y1HErIloYJRZosiK0DVo=
Subject key identifier:   9E:19:97:E5:6F:50:3B:E9:71:66:5F:2E:07:6B:09:D4:9D:B0:56:09
Certificate issuer:       /CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
Certificate serial:       200116B05301268621D69B0E95FAC185D74BEA26
Authority key identifier: B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Thu 04 Apr 2024 22:37:34 +0000
ROA not before:           Thu 04 Apr 2024 22:32:34 +0000
ROA not after:            Thu 03 Apr 2025 22:37:34 +0000
asID:                     270793
IP address blocks:        2804:7180:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:01:16:b0:53:01:26:86:21:d6:9b:0e:95:fa:c1:85:d7:4b:ea:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B44441CC8BE361C80B2B79E2EB78406E56E536AD
        Validity
            Not Before: Apr  4 22:32:34 2024 GMT
            Not After : Apr  3 22:37:34 2025 GMT
        Subject: CN=9E1997E56F503BE971665F2E076B09D49DB05609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:2d:e3:c9:23:f4:ce:37:d2:3e:96:b4:4a:
                    f2:a0:1f:26:e0:53:39:11:0b:25:77:64:0b:78:e7:
                    90:20:97:5c:08:e7:92:b9:60:e0:eb:dc:4d:38:db:
                    bf:5f:b1:68:89:aa:83:b9:fd:68:54:4d:b9:b1:7c:
                    ae:16:38:16:8f:d1:bf:95:89:c9:b8:3c:a8:cc:0f:
                    9c:d6:d8:96:ff:dd:22:d5:be:6a:c4:b7:7f:58:7e:
                    20:5d:01:f2:68:df:b9:f7:17:55:54:20:2f:b3:b4:
                    d9:3d:07:62:d1:76:f8:3b:48:6e:47:7a:c3:0f:4c:
                    09:b8:ea:51:42:e6:75:ce:95:6a:73:4c:47:a7:33:
                    d2:f1:70:3c:40:29:d3:6e:77:9a:45:cb:38:93:5f:
                    57:66:75:16:7a:f5:f2:3a:1f:07:8d:0b:e7:ab:5d:
                    2b:b6:07:e3:7d:20:5f:17:0b:71:b6:ec:9c:6c:91:
                    ca:ae:2b:75:a2:a1:ef:bf:16:73:2d:01:eb:2b:0f:
                    d8:6a:14:9e:10:db:93:d4:7a:c4:03:2d:27:22:95:
                    fc:23:80:97:76:47:95:f7:c3:55:50:47:84:58:91:
                    7f:52:5e:05:e4:ce:7c:a9:f5:bd:7c:ea:19:06:3f:
                    a5:11:aa:0a:98:11:4f:5e:39:ab:e8:a2:b1:fd:78:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:19:97:E5:6F:50:3B:E9:71:66:5F:2E:07:6B:09:D4:9D:B0:56:09
            X509v3 Authority Key Identifier:
                keyid:B4:44:41:CC:8B:E3:61:C8:0B:2B:79:E2:EB:78:40:6E:56:E5:36:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44441CC8BE361C80B2B79E2EB78406E56E536AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/1/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:8a:08:9d:fb:9d:d1:2d:2d:77:6e:82:ca:4a:35:c3:9b:
         a6:e9:8f:ef:1f:da:91:c1:0f:b5:59:2b:a8:2d:96:4f:37:bf:
         a9:86:22:90:76:b1:cd:83:5e:4d:90:41:c8:4d:7a:71:5c:48:
         9e:48:05:a9:bc:aa:14:80:e3:e5:01:b4:55:60:89:34:8f:2b:
         34:37:73:ef:be:21:bf:9d:41:0e:d6:32:26:94:c6:6d:51:b5:
         4d:8c:36:b8:15:fa:bf:bd:1f:99:43:c1:b3:c9:b7:80:60:e3:
         0b:91:61:f7:80:ce:94:99:fe:8f:cb:81:0e:4a:3a:8b:9c:5f:
         53:c5:10:3c:ab:f5:f3:cd:19:d5:43:49:77:44:67:7f:3b:b0:
         55:03:53:cd:ef:cf:dd:d3:4d:48:99:e5:dd:48:f5:20:e1:33:
         69:8f:45:6e:34:2a:7a:8c:e4:b6:40:c6:be:7c:e8:38:16:dd:
         90:60:56:14:ae:4c:5a:49:7a:e8:ae:e2:a1:a7:62:97:e0:66:
         64:33:c7:30:ab:6b:26:18:d2:ba:1b:d4:0d:94:05:4d:79:08:
         e5:ab:39:a0:e9:71:db:79:b8:1b:fa:8f:d6:b2:21:65:ba:c4:
         81:6f:0a:27:07:0f:9d:70:26:cc:11:f3:cf:d3:d9:e0:85:59:
         cd:ba:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:07 2024 by rpki-client on console-ams.rpki-client.org