Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa
File:                     323830343a313962343a3a2f33322d3438203d3e203631383133.roa (raw, json)
Hash identifier:          LSFzAQBUqI3S4tpOShTBUoqWlpkusZpHwutzr7hXCvY=
Subject key identifier:   08:63:70:A6:8F:D6:61:DB:FF:22:24:E1:AC:CD:8C:38:07:1E:94:CC
Certificate issuer:       /CN=36ED969D92322E6C7F28A050D3ABC47947497160
Certificate serial:       5D472DE61A9FC507D02D7C8C57AA29E7CEE34EEB
Authority key identifier: 36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa
Signing time:             Fri 17 May 2024 14:26:24 +0000
ROA not before:           Fri 17 May 2024 14:21:24 +0000
ROA not after:            Fri 16 May 2025 14:26:24 +0000
asID:                     61813
IP address blocks:        2804:19b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl
                          rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 08:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:47:2d:e6:1a:9f:c5:07:d0:2d:7c:8c:57:aa:29:e7:ce:e3:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ED969D92322E6C7F28A050D3ABC47947497160
        Validity
            Not Before: May 17 14:21:24 2024 GMT
            Not After : May 16 14:26:24 2025 GMT
        Subject: CN=086370A68FD661DBFF2224E1ACCD8C38071E94CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:10:e7:2f:bb:21:9d:f6:7b:3b:ea:0f:11:
                    73:8e:cd:4a:3e:a0:36:3f:bb:cc:b4:0c:6a:5c:f4:
                    74:16:f9:20:9c:63:10:f5:c3:a8:74:56:3c:2a:ed:
                    a5:97:ff:20:ef:dd:c1:4a:e2:59:2f:b6:ec:16:f8:
                    1b:b1:e8:41:c2:26:44:a1:2a:5a:c1:01:ba:bb:99:
                    fa:64:d7:22:2a:da:19:cb:80:ec:8a:cb:19:46:fb:
                    c7:c8:e6:d7:ed:9f:07:14:2e:00:fe:4b:be:53:93:
                    d5:f6:2f:73:a5:50:31:66:4b:a4:f4:5e:41:67:0a:
                    26:27:c1:a4:1c:16:8c:72:53:f3:bd:a3:63:d0:af:
                    28:18:ab:29:0e:e7:77:0d:10:77:71:d0:15:ed:6d:
                    c7:bd:c7:00:1d:92:e2:8a:f1:0f:f8:f5:9e:a3:99:
                    b3:c8:30:cb:f8:5e:84:27:4a:b9:5c:12:83:78:4d:
                    4f:e3:21:5f:3c:e2:22:26:f3:79:ac:8d:bb:43:82:
                    06:73:25:3e:43:f2:c8:e2:ad:5e:75:90:46:1f:c8:
                    b3:12:0f:48:fd:a9:83:0b:3c:99:26:32:e5:81:e1:
                    a3:81:51:50:38:ed:00:2e:63:33:57:7c:ec:ae:92:
                    fc:f7:fb:27:36:27:20:68:60:31:27:a7:26:f5:15:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:63:70:A6:8F:D6:61:DB:FF:22:24:E1:AC:CD:8C:38:07:1E:94:CC
            X509v3 Authority Key Identifier:
                keyid:36:ED:96:9D:92:32:2E:6C:7F:28:A0:50:D3:AB:C4:79:47:49:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/36ED969D92322E6C7F28A050D3ABC47947497160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ED969D92322E6C7F28A050D3ABC47947497160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/0/323830343a313962343a3a2f33322d3438203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:85:e3:3c:7e:e8:96:65:c6:69:be:f1:7d:75:3f:eb:0e:
         6e:78:92:37:d6:78:ad:16:72:a0:bf:5f:18:7d:8d:74:26:76:
         1c:5d:63:31:a8:59:07:c8:4d:44:24:82:b5:10:ae:ef:0f:6e:
         a6:c3:98:ba:7f:ad:fe:9f:09:1b:d3:cd:04:01:1f:1f:12:a7:
         2c:e1:5f:98:1d:a5:cf:1f:85:51:f0:89:24:53:8c:db:e8:8a:
         87:7e:19:de:08:fd:66:58:0f:44:85:57:6a:02:ff:06:58:70:
         b1:aa:85:ec:26:52:df:aa:c1:08:f6:a6:31:bc:52:ab:29:b5:
         22:79:58:14:d2:d2:97:16:e0:93:84:1c:a7:01:b7:5a:93:aa:
         36:c3:6e:ad:0b:4a:03:ff:0c:2c:f3:98:3f:6e:4a:c7:d4:cb:
         92:ff:32:9f:31:7f:6c:d9:0d:e1:46:43:4b:4f:4a:9a:d4:79:
         00:e3:fc:43:bc:d7:c9:26:3f:f4:99:ff:4b:27:fb:d0:e4:4c:
         d2:b8:1e:37:5e:a7:10:59:c4:31:bf:e8:92:ce:2d:1b:95:6d:
         ce:c9:c3:d4:1e:0f:cf:61:cc:65:fa:ee:f5:96:f7:cb:2b:6f:
         ea:38:a0:8c:6c:61:98:67:a8:04:79:06:18:64:92:25:2f:d9:
         11:26:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:31 2025 by rpki-client