Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
File:                     323830343a323637383a3a2f33322d3335203d3e20323634333432.roa (raw, json)
Hash identifier:          SZlmDAUFhlJm+rbtxDCcM/+Xk6qVFFXw6frVc3klXjQ=
Subject key identifier:   5C:E7:5A:AC:1D:12:5D:E5:5B:9E:9C:A6:87:0D:A8:5E:A4:36:7B:D8
Certificate issuer:       /CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
Certificate serial:       50EC19CB97886C28F65B987490A8FC6AEFE05C8D
Authority key identifier: AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa
Signing time:             Wed 03 Apr 2024 18:32:14 +0000
ROA not before:           Wed 03 Apr 2024 18:27:14 +0000
ROA not after:            Wed 02 Apr 2025 18:32:14 +0000
asID:                     264342
IP address blocks:        2804:2678::/32 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl
                          rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ec:19:cb:97:88:6c:28:f6:5b:98:74:90:a8:fc:6a:ef:e0:5c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD
        Validity
            Not Before: Apr  3 18:27:14 2024 GMT
            Not After : Apr  2 18:32:14 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:87:6f:88:84:f3:19:99:d7:ac:a0:fa:3e:
                    dc:0e:5a:f9:a4:84:d3:d1:ec:86:aa:76:40:1d:e5:
                    1e:3e:e0:61:49:70:fe:31:45:fb:a8:02:9e:83:a4:
                    61:85:14:fc:7a:78:8c:79:2f:87:11:e2:90:1d:a7:
                    6a:af:9a:5e:96:b8:a0:7a:99:7d:b1:b0:b4:88:42:
                    25:30:b4:63:05:3b:de:40:2e:d2:ec:f8:2c:55:d2:
                    4e:ee:72:71:01:80:04:6f:22:fe:5d:b5:eb:ae:68:
                    32:b8:1a:ec:43:6a:09:68:0f:26:43:1f:04:7a:ec:
                    a5:48:82:df:b0:6e:6e:0f:ab:4b:2b:8d:b5:ba:77:
                    5e:38:0a:eb:42:ac:a6:72:01:bd:4b:6f:bd:d9:64:
                    b1:fc:fe:76:49:fc:bc:07:55:88:1f:b1:fb:de:c8:
                    f8:2b:6f:fd:fd:6d:df:f6:4b:69:e0:8e:6e:32:4c:
                    2e:12:66:08:50:4d:08:18:41:09:a6:1f:04:b2:ff:
                    d2:84:52:72:a5:ab:f8:f4:37:44:56:ec:b2:65:ef:
                    5a:ae:e3:e4:ff:f1:f6:30:43:66:da:cc:ff:b6:ce:
                    19:16:37:81:a6:5f:8e:76:fb:a4:89:b9:1b:8d:be:
                    12:d8:f0:b1:eb:8e:29:6c:68:58:03:68:98:8e:e8:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:5A:AC:1D:12:5D:E5:5B:9E:9C:A6:87:0D:A8:5E:A4:36:7B:D8
            X509v3 Authority Key Identifier:
                keyid:AC:9D:ED:B6:6C:13:A6:8A:FC:D2:B7:A3:76:D9:E8:14:C9:F2:0B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9DEDB66C13A68AFCD2B7A376D9E814C9F20BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AtyFs9kG7ZjtbKdUzWUmusSFng9yTH1FwCKfKk5mWXLc/1/323830343a323637383a3a2f33322d3335203d3e20323634333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2678::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:da:1e:66:30:f1:a9:87:9a:6d:61:39:0d:0f:1d:db:35:ee:
         db:77:3d:31:90:60:96:c4:00:57:b9:44:41:18:dc:34:15:1d:
         cc:bc:a7:dd:9f:a4:49:96:0a:73:73:3a:fc:f2:27:ad:ec:00:
         27:f9:89:96:f6:4c:f3:35:6a:80:31:8f:2d:6f:8a:b8:7b:1f:
         e2:f6:e5:c5:e3:15:7c:9f:df:d2:3c:46:c3:b6:87:6b:2c:b1:
         a5:c4:a5:8a:aa:b2:7a:b4:ae:29:0f:04:56:1b:f1:05:f5:04:
         6a:b1:42:eb:3c:a4:8f:56:d0:05:72:93:b3:33:07:a2:ae:54:
         cf:4b:35:a1:8d:17:03:2d:36:04:5e:fb:cc:e1:ea:3f:ad:70:
         33:11:11:72:85:28:bf:a8:3f:14:79:5f:e7:fb:d9:6a:4d:da:
         db:e5:c1:f2:eb:06:64:d4:7f:26:08:aa:ef:fb:dc:fc:57:7e:
         5b:1d:3c:35:b2:fc:f6:95:78:2b:7b:56:98:85:e5:24:23:07:
         0d:c4:85:5a:a5:1d:17:07:b5:0c:36:7f:81:8f:56:a5:22:84:
         2c:c4:c5:f8:3a:4d:6a:1d:ef:80:7a:d8:ef:78:cf:95:7b:41:
         f0:f3:8e:41:f7:8a:4b:ca:c9:d0:a8:1a:88:fd:49:11:e7:d1:
         b4:2c:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:01 2024 by rpki-client on console-ams.rpki-client.org