Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
File:                     323830343a316132633a3a2f33322d3332203d3e203631383432.roa (raw, json)
Hash identifier:          9BLU2et/s3uBshWPdguyNPNJhnPtaGSV/Dn12pbq3OA=
Subject key identifier:   0A:56:1A:F7:68:85:47:3C:5D:4D:5E:24:A0:B8:83:7C:D4:FA:2C:9C
Certificate issuer:       /CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
Certificate serial:       2B2C40845505A6ACACCD77DD5D880727E53CEC21
Authority key identifier: 18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa
Signing time:             Fri 06 Sep 2024 12:15:41 +0000
ROA not before:           Fri 06 Sep 2024 12:10:41 +0000
ROA not after:            Fri 05 Sep 2025 12:15:41 +0000
asID:                     61842
IP address blocks:        2804:1a2c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl
                          rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:40:84:55:05:a6:ac:ac:cd:77:dd:5d:88:07:27:e5:3c:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE
        Validity
            Not Before: Sep  6 12:10:41 2024 GMT
            Not After : Sep  5 12:15:41 2025 GMT
        Subject: CN=0A561AF76885473C5D4D5E24A0B8837CD4FA2C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:25:13:99:2f:f2:a9:a8:bb:8d:8f:f2:7b:
                    eb:89:b4:a0:83:79:de:2a:bd:7c:cf:f8:f5:25:a6:
                    f2:f3:e2:fe:98:3d:4d:aa:c2:d5:78:81:21:7a:09:
                    08:0e:d6:27:0e:d4:d6:20:53:31:5f:3e:41:cc:55:
                    44:96:2a:44:7f:6b:60:36:c7:67:2c:1d:98:13:12:
                    b3:75:c0:b4:91:c9:8a:83:98:8a:9c:ed:a1:b8:95:
                    e1:0f:ff:36:8d:91:fe:83:41:df:46:bc:10:16:34:
                    e4:ec:7c:1f:fb:08:f0:af:0f:c0:8e:a2:88:a8:df:
                    51:3f:71:e2:66:5c:b2:99:f4:32:88:95:c1:62:5a:
                    f9:17:0e:48:f1:b3:3c:17:42:d8:ff:fb:0c:34:9c:
                    1a:e6:92:33:68:00:0c:52:41:76:d7:a1:50:b2:81:
                    3f:c2:e4:a6:77:03:03:05:8d:cd:ef:7c:aa:59:7c:
                    30:83:f2:07:97:f2:39:ab:ed:d6:10:dd:fc:e5:d0:
                    46:30:eb:de:4e:90:83:65:1e:21:33:1b:99:a0:d0:
                    4d:02:45:d6:a7:57:48:ea:a9:2d:23:e2:7c:d2:75:
                    57:29:f5:72:f2:48:55:0e:4a:e3:74:ab:ec:0e:2c:
                    2c:8b:50:45:f1:98:56:9e:33:e4:9c:d7:ab:20:98:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:56:1A:F7:68:85:47:3C:5D:4D:5E:24:A0:B8:83:7C:D4:FA:2C:9C
            X509v3 Authority Key Identifier:
                keyid:18:FB:DB:75:17:89:A3:D1:CC:FA:7F:42:BC:38:F0:A8:CA:BA:F2:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18FBDB751789A3D1CCFA7F42BC38F0A8CABAF2CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQXuGvqkexjuubqJ3n1Lx7ottTkHYNU5yrwdCwohhMLz/1/323830343a316132633a3a2f33322d3332203d3e203631383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:1d:f6:9f:5f:de:e9:3c:99:e9:0c:5d:61:a4:d4:80:51:07:
         86:90:4c:5e:0e:7f:38:b2:d8:4e:ba:12:02:fb:ab:c9:c3:13:
         b5:28:75:e1:f7:ec:95:57:16:8f:f9:fc:f1:48:dd:f4:c0:1d:
         1a:b2:1c:52:10:72:01:f9:e4:f1:23:ec:ea:30:e4:e0:e6:7c:
         f3:61:fb:fc:a5:9c:b5:4d:b0:ce:47:44:9c:5d:b1:a5:bc:09:
         46:4f:63:47:6d:63:3a:b6:38:b0:a0:f5:bf:05:ea:fb:68:8b:
         fb:47:b9:cc:51:47:8a:8e:b1:4f:6d:7d:9b:7a:9f:14:00:39:
         2b:5b:ef:81:10:65:43:e5:0b:c4:af:66:92:17:c3:00:30:db:
         17:b2:b7:c0:f5:68:00:51:ba:95:0a:6e:17:07:4d:70:d0:63:
         2b:4a:9b:b2:b7:02:83:00:86:46:66:b3:21:45:7f:86:5a:b7:
         38:78:f5:bc:94:68:4d:34:80:06:1b:1d:11:c2:41:f6:01:a7:
         41:ec:1b:8e:29:c8:a6:dc:04:0b:83:cd:82:de:45:cc:59:fe:
         04:ba:01:c4:b0:be:9a:23:7c:55:17:d4:b4:fc:e6:4a:74:0b:
         69:eb:0f:ef:ee:e2:ea:9f:08:c7:b5:5b:23:ec:aa:94:06:65:
         ee:0c:ea:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:26 2024 by rpki-client on console-ams.rpki-client.org