Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa
File:                     323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa (raw, json)
Hash identifier:          Y73DiPyz2z16vGwACkEl7usKerx66KoJiV1iotyay2U=
Subject key identifier:   65:CF:2E:47:78:F2:33:42:C2:11:69:4F:4A:EB:7E:6F:D9:FD:55:47
Certificate issuer:       /CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
Certificate serial:       6D93CD48B8929DE3F78EAE9F083AB2D8F1B7C6
Authority key identifier: 10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa
Signing time:             Thu 04 Apr 2024 04:15:09 +0000
ROA not before:           Thu 04 Apr 2024 04:10:09 +0000
ROA not after:            Thu 03 Apr 2025 04:15:09 +0000
asID:                     266448
IP address blocks:        2804:37fc:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl
                          rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:93:cd:48:b8:92:9d:e3:f7:8e:ae:9f:08:3a:b2:d8:f1:b7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101C855F131ECCD651B34357FFD7CAA9390CF6FC
        Validity
            Not Before: Apr  4 04:10:09 2024 GMT
            Not After : Apr  3 04:15:09 2025 GMT
        Subject: CN=65CF2E4778F23342C211694F4AEB7E6FD9FD5547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e6:df:02:99:ea:fc:44:06:68:68:68:41:a3:
                    cc:aa:19:d1:01:1a:b4:7d:a1:d2:9c:44:55:f2:64:
                    03:60:d5:d4:55:c6:4c:e2:4d:92:e9:cd:7d:8b:6a:
                    08:e9:21:13:c9:74:4b:a2:5d:b4:eb:50:20:a5:b3:
                    f1:93:37:c6:83:5e:a9:6d:c7:63:f9:e9:99:77:ab:
                    a0:b7:d8:c5:b9:84:77:95:c6:c0:2e:97:04:6d:64:
                    08:b0:47:74:6e:80:e8:a0:4d:a5:6e:de:53:ba:79:
                    64:16:16:41:ed:88:45:43:df:eb:00:e0:42:20:f4:
                    76:4a:9f:e7:f9:06:db:91:8e:7f:19:6e:02:38:92:
                    1f:91:0a:d6:53:ef:8e:03:d5:9b:ce:38:08:ee:36:
                    ee:cb:7c:d3:dc:63:db:55:aa:58:b8:71:c8:a9:e0:
                    87:84:ff:28:22:b8:c8:4c:18:04:1b:89:cf:64:0c:
                    19:81:10:58:c6:da:5a:b6:24:77:33:3a:09:89:61:
                    7d:64:49:43:af:69:3f:cb:56:8b:75:d4:84:f5:e3:
                    e4:3a:70:85:be:f4:c5:20:40:62:d7:81:98:90:25:
                    ea:9f:ca:06:99:44:13:64:d1:7b:df:59:9e:77:f0:
                    82:bd:cd:84:58:0e:1b:cd:43:48:cc:2c:1f:d6:8e:
                    07:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CF:2E:47:78:F2:33:42:C2:11:69:4F:4A:EB:7E:6F:D9:FD:55:47
            X509v3 Authority Key Identifier:
                keyid:10:1C:85:5F:13:1E:CC:D6:51:B3:43:57:FF:D7:CA:A9:39:0C:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/101C855F131ECCD651B34357FFD7CAA9390CF6FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F9Z11QTxemy9JmDADPAxU5TG1st6Q8fma8vg5hnjHPcb/1/323830343a333766633a323030303a3a2f34302d3430203d3e20323636343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37fc:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:55:95:09:8d:96:23:bc:a8:64:23:ce:84:75:84:c7:1f:
         58:fc:4d:71:9b:52:f2:4f:09:e8:f0:6e:72:dd:e3:ec:02:2f:
         a4:53:d5:2d:ca:4e:2f:0d:48:3e:5b:e0:63:08:4e:e3:c8:39:
         1e:a5:d9:ae:9a:da:73:9d:d9:4f:c8:ba:5a:82:2f:6b:5d:f2:
         74:b7:53:fb:e7:8f:dc:fa:9d:3a:2b:c9:ae:09:a4:1a:3b:8f:
         9f:62:9d:2a:11:c0:7b:37:e4:97:97:76:19:27:2b:93:41:cb:
         ec:1d:ca:66:f0:a0:b7:46:cd:af:b3:d3:87:da:05:6b:9f:6d:
         f1:2b:a7:6b:b8:1c:a3:85:62:a2:bf:7d:a7:81:cb:dc:26:6e:
         cc:d9:4d:a8:b9:7d:73:d6:0f:67:de:b0:86:36:df:2b:8c:1d:
         e7:77:69:b1:af:81:04:bc:e5:2f:5a:65:9a:4b:ee:87:14:3c:
         8b:5f:31:2b:53:7e:9d:99:9d:bc:3f:f1:d6:6e:ce:0a:fd:54:
         b6:d7:da:fa:50:0a:e5:4c:81:f8:f9:bc:43:d5:db:00:23:dd:
         3b:4f:89:14:c4:b9:68:9e:13:e8:00:a1:67:4f:16:c8:b5:f1:
         d2:65:a3:58:8f:9b:2b:5f:11:26:de:1d:14:3d:38:43:b0:a4:
         60:07:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:27 2024 by rpki-client on console-ams.rpki-client.org