Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
File:                     323830343a356632343a3a2f33322d3332203d3e20323639303739.roa (raw, json)
Hash identifier:          9RRF0IuyB4K5MSrg/uXvFp/AlbvE8/F/HNGP/SHbNhc=
Subject key identifier:   23:91:07:D8:A7:74:5C:A2:58:4B:A9:50:5B:16:85:BD:B8:29:0E:E5
Certificate issuer:       /CN=9A72AC165710D3D2240950F90FF41932E5992CFB
Certificate serial:       4615CEAD37B2641AB22066C64E87C1A4CE672AC1
Authority key identifier: 9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa
Signing time:             Wed 03 Apr 2024 23:33:31 +0000
ROA not before:           Wed 03 Apr 2024 23:28:31 +0000
ROA not after:            Wed 02 Apr 2025 23:33:31 +0000
asID:                     269079
IP address blocks:        2804:5f24::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl
                          rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:15:ce:ad:37:b2:64:1a:b2:20:66:c6:4e:87:c1:a4:ce:67:2a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Validity
            Not Before: Apr  3 23:28:31 2024 GMT
            Not After : Apr  2 23:33:31 2025 GMT
        Subject: CN=239107D8A7745CA2584BA9505B1685BDB8290EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:40:fe:a7:a7:03:bf:af:b4:1d:c7:6c:85:
                    fa:95:fc:9c:f6:cb:94:f7:95:ba:34:bc:2e:e5:b0:
                    a2:03:05:58:67:ab:18:3c:b6:fb:ea:0d:f7:0b:b7:
                    04:09:01:77:f9:c1:85:86:cb:b2:22:0d:37:03:77:
                    48:50:5a:cc:b1:b4:3c:7e:ba:81:8d:e2:b2:ba:ee:
                    6a:b1:d4:44:46:02:20:ab:95:76:e8:c6:04:e1:a4:
                    2a:9a:16:a8:80:cf:45:1f:c3:0c:c7:85:72:ed:57:
                    e2:80:11:06:ea:26:0d:b4:c3:a5:31:15:28:07:54:
                    10:59:0c:f2:08:4f:91:70:03:5f:a7:fe:d0:f6:b9:
                    bc:a7:f5:e2:6f:90:ee:c4:2e:47:52:43:51:d6:79:
                    5c:ad:c4:09:06:2d:98:17:8b:63:41:90:e3:16:b6:
                    42:aa:40:a7:9c:03:75:15:2b:dd:91:a8:80:3f:1a:
                    a1:7d:e3:21:5e:88:6c:ba:ef:c2:9a:04:e0:fd:f4:
                    2e:22:ed:a9:5e:65:3c:a1:39:20:70:46:5c:cd:44:
                    23:4b:3f:7f:aa:9f:ac:fb:8b:0d:8a:09:0f:72:37:
                    02:60:76:b7:22:e7:9c:8e:f3:17:4f:b2:e9:0a:72:
                    2d:1a:c3:ca:7b:5e:e5:82:fd:0e:37:86:d9:65:9a:
                    0d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:91:07:D8:A7:74:5C:A2:58:4B:A9:50:5B:16:85:BD:B8:29:0E:E5
            X509v3 Authority Key Identifier:
                keyid:9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/323830343a356632343a3a2f33322d3332203d3e20323639303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f24::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:73:86:b6:16:54:bf:f8:af:b9:bf:38:60:98:14:7f:84:fa:
         82:cc:2f:3e:b2:b5:56:c2:b9:75:a3:17:00:6c:18:79:1a:6b:
         f6:2e:01:60:a4:53:6e:c8:4c:ba:7c:91:da:8b:1e:6e:16:97:
         ca:5a:ba:c8:9e:89:79:d3:fc:67:65:7d:63:e6:0f:e0:61:79:
         74:ad:91:cf:27:de:2e:db:a0:9b:c6:85:b0:73:ac:66:1d:36:
         59:ba:87:9c:78:39:0c:8c:57:2c:fc:2b:db:e3:98:c1:a8:7d:
         e5:af:22:7d:b7:fb:c0:cc:87:e0:5f:16:ab:4a:f6:58:3d:ca:
         39:79:66:0d:d0:61:a4:57:4e:86:95:6d:ba:38:c2:6b:79:b7:
         fd:30:39:93:97:ff:49:a8:78:0c:c9:d9:d9:ed:1a:3b:8c:4b:
         e4:38:1e:3c:af:f9:77:51:5f:33:1b:be:29:93:15:4f:37:5d:
         3a:b6:55:b8:9c:d7:6c:2e:1e:30:5e:cf:cd:a8:80:82:eb:11:
         de:3a:59:74:d0:4d:52:83:e0:6c:b6:c3:e0:29:69:bd:89:81:
         2e:4e:ef:13:28:31:06:30:68:ce:d0:af:1e:0d:50:72:95:01:
         e1:3f:3a:f5:57:cf:b3:a1:cf:43:a7:58:28:df:98:ed:ff:8e:
         38:2c:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:08 2024 by rpki-client on console-ams.rpki-client.org