Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33322d3438203d3e20323637363038.roa
File:                     323830343a343433303a3a2f33322d3438203d3e20323637363038.roa (raw, json)
Hash identifier:          SwHszxj9tmffzhYyfac4cyKmaeSklf3mUx9Vcl0VZQk=
Subject key identifier:   F9:A5:F8:DA:B1:69:60:AC:EB:56:0C:28:3C:5C:39:88:4A:AA:C7:38
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       1F795561E69890760A3F14DA548FA41F516B6589
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33322d3438203d3e20323637363038.roa
Signing time:             Thu 04 Apr 2024 15:59:21 +0000
ROA not before:           Thu 04 Apr 2024 15:54:21 +0000
ROA not after:            Thu 03 Apr 2025 15:59:21 +0000
asID:                     267608
IP address blocks:        2804:4430::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:79:55:61:e6:98:90:76:0a:3f:14:da:54:8f:a4:1f:51:6b:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: Apr  4 15:54:21 2024 GMT
            Not After : Apr  3 15:59:21 2025 GMT
        Subject: CN=F9A5F8DAB16960ACEB560C283C5C39884AAAC738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:ef:d8:7e:18:13:e3:cb:69:da:5a:e1:1a:
                    eb:69:d0:9f:f3:1f:cf:d5:3d:1b:50:e7:07:f7:47:
                    6a:84:bd:22:c4:48:5b:6f:b4:11:f3:1f:c0:69:dd:
                    ba:bf:db:28:5f:e2:62:8a:e0:ce:e9:d9:84:d4:29:
                    e9:3a:6f:b7:6a:35:08:e8:b0:a9:42:12:dc:9a:a1:
                    0f:24:58:0d:85:c7:34:cd:00:00:f4:a9:66:ee:7e:
                    ee:9a:48:d4:76:ee:55:85:8b:7d:4e:03:9c:5f:44:
                    af:49:cf:0d:4d:6c:d1:ce:94:4f:b4:b4:55:e9:15:
                    c3:1d:b4:79:c4:e4:d6:c7:cb:df:7d:e5:be:c7:25:
                    6b:52:01:16:3c:f4:74:53:c1:1f:5b:4d:fe:c3:c2:
                    e1:39:dd:e1:59:d3:49:88:9d:b1:a7:dd:6e:5b:f6:
                    52:63:cf:57:21:5d:25:d4:aa:8d:9a:50:05:b7:96:
                    a1:ce:73:29:36:ed:31:a1:c6:40:72:f6:dd:1f:a3:
                    06:08:90:9c:58:b1:a4:52:31:49:c3:a6:27:aa:27:
                    f8:09:a3:c5:2e:45:0c:97:33:e7:c9:23:26:d7:74:
                    d2:bf:46:96:3d:2f:f5:d8:6e:02:0b:38:20:0a:75:
                    59:e2:93:d9:c9:05:93:12:8d:82:c8:f0:c7:37:9b:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A5:F8:DA:B1:69:60:AC:EB:56:0C:28:3C:5C:39:88:4A:AA:C7:38
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33322d3438203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:74:5c:14:30:6b:39:4d:b5:1c:8c:67:34:6f:ed:41:c6:73:
         8f:61:9c:d2:9d:79:0d:e8:64:d5:61:6e:16:55:41:51:5a:67:
         d4:59:88:f9:13:3c:8c:18:d2:82:71:a3:c3:52:79:75:1a:a4:
         41:c9:6d:0c:4b:b7:4f:5e:4f:82:e2:f8:36:a7:dc:5d:19:2a:
         8d:a1:3a:e6:69:bc:29:07:5e:9e:3b:78:43:3e:7e:b5:16:24:
         3b:5d:83:c9:ce:24:d2:12:58:22:ea:57:f2:63:3d:41:27:2e:
         6e:e9:97:bc:28:65:ec:bd:39:c6:b1:77:f5:e8:d9:14:d9:9f:
         b8:73:c4:22:bd:71:21:84:8c:71:89:19:60:02:a1:52:f0:26:
         78:0e:4c:a2:cb:74:27:28:2b:dd:71:42:9f:81:3b:82:a7:4c:
         19:e4:06:b8:5e:18:9f:6b:0c:84:27:1b:13:2d:2f:e7:d5:1c:
         12:08:25:c8:2c:07:d5:85:80:cb:23:c4:53:01:45:72:22:6b:
         29:d0:54:d5:4f:f4:13:76:cf:90:4a:d0:15:51:e8:73:83:c0:
         a4:41:7a:56:40:78:99:a1:98:17:dd:da:84:6c:d1:65:e4:53:
         82:77:98:42:51:76:bc:92:ce:72:1c:c1:c9:83:69:92:31:17:
         3d:ec:33:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:06 2024 by rpki-client on console-ams.rpki-client.org