Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
File:                     323830343a376438383a3a2f33322d3336203d3e20323731353637.roa (raw, json)
Hash identifier:          D4QOYTnVQICzyrgeKRM3eEXv+fZLBLm7vQ1JbNp/q7o=
Subject key identifier:   A0:88:47:A8:E9:43:98:7C:96:6C:AB:9A:76:22:ED:F1:BA:B1:90:A1
Certificate issuer:       /CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
Certificate serial:       19DF9292CBD6018F503B9DB810C161830C2745BE
Authority key identifier: 7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa
Signing time:             Wed 03 Apr 2024 18:39:12 +0000
ROA not before:           Wed 03 Apr 2024 18:34:12 +0000
ROA not after:            Wed 02 Apr 2025 18:39:12 +0000
asID:                     271567
IP address blocks:        2804:7d88::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl
                          rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:df:92:92:cb:d6:01:8f:50:3b:9d:b8:10:c1:61:83:0c:27:45:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9
        Validity
            Not Before: Apr  3 18:34:12 2024 GMT
            Not After : Apr  2 18:39:12 2025 GMT
        Subject: CN=3082010A0282010100F04F888E9FD0BEEED9678FF6A6A15CE66F0705B371BCBF0B20D958722D40AE5CEBFE53DD414A12FFB8C016137ABA6A7D1CF4C79957186EA190A5C933B4F8EF8199508946D12C7D92657D5D1DE49C974EB9A3FE1344012299F73E48ACFD12C1779AA56FDFAFC0259F2BB915A34C829E36E50F4682848142993864B6E3352E78759E04FCF534C562E5260C5BCD0BC2A0A42F82ED8633D22357F6089D802574806446AFE71C935D398BC9F3B70F769DE81BD3961D9CD8EF28FA46C2297198DC1E311AAA719C5AA7BA311627F9A28EF8202A6B9AE54B16BE4BB482CC29AEBA39F830433675D7EDBA2B5CCD5550A194D92AE962BF9535C4EAAACA9CA0B5EC63FEE9710203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4f:88:8e:9f:d0:be:ee:d9:67:8f:f6:a6:a1:
                    5c:e6:6f:07:05:b3:71:bc:bf:0b:20:d9:58:72:2d:
                    40:ae:5c:eb:fe:53:dd:41:4a:12:ff:b8:c0:16:13:
                    7a:ba:6a:7d:1c:f4:c7:99:57:18:6e:a1:90:a5:c9:
                    33:b4:f8:ef:81:99:50:89:46:d1:2c:7d:92:65:7d:
                    5d:1d:e4:9c:97:4e:b9:a3:fe:13:44:01:22:99:f7:
                    3e:48:ac:fd:12:c1:77:9a:a5:6f:df:af:c0:25:9f:
                    2b:b9:15:a3:4c:82:9e:36:e5:0f:46:82:84:81:42:
                    99:38:64:b6:e3:35:2e:78:75:9e:04:fc:f5:34:c5:
                    62:e5:26:0c:5b:cd:0b:c2:a0:a4:2f:82:ed:86:33:
                    d2:23:57:f6:08:9d:80:25:74:80:64:46:af:e7:1c:
                    93:5d:39:8b:c9:f3:b7:0f:76:9d:e8:1b:d3:96:1d:
                    9c:d8:ef:28:fa:46:c2:29:71:98:dc:1e:31:1a:aa:
                    71:9c:5a:a7:ba:31:16:27:f9:a2:8e:f8:20:2a:6b:
                    9a:e5:4b:16:be:4b:b4:82:cc:29:ae:ba:39:f8:30:
                    43:36:75:d7:ed:ba:2b:5c:cd:55:50:a1:94:d9:2a:
                    e9:62:bf:95:35:c4:ea:aa:ca:9c:a0:b5:ec:63:fe:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:47:A8:E9:43:98:7C:96:6C:AB:9A:76:22:ED:F1:BA:B1:90:A1
            X509v3 Authority Key Identifier:
                keyid:7E:39:AD:73:29:EE:99:AA:F1:35:0B:E6:B2:DE:00:E2:85:1C:AC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E39AD7329EE99AAF1350BE6B2DE00E2851CACA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CS9SkHvPoQ5CbbhCzLW49iwni9a1p9UPxAiMWHzMjwBV/1/323830343a376438383a3a2f33322d3336203d3e20323731353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:ad:d5:1e:7f:a2:72:c6:a1:56:2c:4a:61:33:b1:5f:18:77:
         99:49:3a:9e:48:07:40:e3:bf:6b:97:4c:64:7f:6e:1f:3f:54:
         9d:e7:2f:a2:35:66:24:9f:62:a4:ae:f3:6c:69:93:55:1c:d6:
         5d:6e:9e:ba:4f:11:70:ec:ba:50:81:ef:54:87:1e:c7:b4:b4:
         9f:ed:1c:52:6d:d4:be:a5:61:67:92:fc:7e:d9:21:ea:d3:7d:
         11:93:54:9d:d7:8b:e9:ba:d8:20:49:9f:7c:40:f8:b5:7d:97:
         eb:29:e2:ca:ae:c6:eb:74:2e:8e:c1:23:75:ef:47:06:e2:27:
         66:8f:72:f7:6f:ee:64:19:88:ff:4b:f2:d9:0a:6d:88:fa:e5:
         a3:78:0b:59:7e:6c:36:19:79:c9:ee:c9:e3:ce:54:5d:30:e0:
         83:cd:67:73:d4:97:ca:68:11:b7:f5:6e:20:56:f2:9e:b1:7d:
         50:cb:c9:ee:a0:dc:b4:ad:ed:27:1e:c3:fe:da:46:63:bd:7b:
         86:5d:df:a6:75:9d:32:0c:fa:f3:b1:81:4e:37:90:8b:5a:80:
         a0:bd:77:3d:da:cd:af:77:b2:68:b2:bd:77:39:81:bb:b2:79:
         9a:84:79:c5:4f:98:c7:9b:99:42:c0:e6:ca:e1:44:2b:25:2e:
         ea:f2:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:36 2024 by rpki-client on console-ams.rpki-client.org