Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa
File:                     323830343a323337303a3a2f33322d3334203d3e20323634313632.roa (raw, json)
Hash identifier:          3nirVVK6FJEFbEtvuDNbcgJs1cfo9Q5yOVgBMVpZjkY=
Subject key identifier:   20:26:03:DB:FB:73:61:33:0E:09:B2:A3:D8:42:B2:A7:77:C4:5E:91
Certificate issuer:       /CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
Certificate serial:       6A46228871FF5453665A6419D984E6C651B334B1
Authority key identifier: F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa
Signing time:             Mon 01 Jul 2024 14:12:34 +0000
ROA not before:           Mon 01 Jul 2024 14:07:34 +0000
ROA not after:            Mon 30 Jun 2025 14:12:34 +0000
asID:                     264162
IP address blocks:        2804:2370::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl
                          rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:46:22:88:71:ff:54:53:66:5a:64:19:d9:84:e6:c6:51:b3:34:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737E609C9AE9595DC55025FC95C8BF63244E8F2
        Validity
            Not Before: Jul  1 14:07:34 2024 GMT
            Not After : Jun 30 14:12:34 2025 GMT
        Subject: CN=202603DBFB7361330E09B2A3D842B2A777C45E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6d:45:46:a6:f2:38:57:d1:75:66:31:1e:93:
                    52:5a:57:c8:7d:4a:8d:ec:c1:70:da:3e:8c:08:90:
                    61:fb:3f:2c:cc:36:85:af:66:25:55:c3:cf:0e:0e:
                    41:fe:44:1a:5d:84:b4:e5:10:27:9d:6f:22:52:12:
                    97:89:52:2f:e8:c9:f5:db:3d:e3:dc:cf:f4:81:ae:
                    83:66:a1:52:aa:c1:77:ec:c7:5e:57:20:49:b6:40:
                    13:ee:28:ee:3a:1e:d2:e6:f7:b8:3f:fb:10:78:91:
                    d8:fa:b3:e0:ce:41:d9:5d:fd:c0:20:ea:f3:f3:92:
                    ed:a8:e4:4e:f3:4c:19:31:38:13:f9:ae:a5:8c:7e:
                    47:c2:af:1a:aa:ad:63:34:80:eb:02:b4:59:91:f6:
                    c2:16:7a:04:ab:28:69:90:2c:67:48:c3:32:49:3c:
                    08:81:06:d2:c9:94:eb:c1:89:46:90:e1:f3:1c:65:
                    70:51:37:fe:6e:e1:0a:71:26:0c:c0:52:d2:20:07:
                    e0:0c:5f:44:0e:6e:01:ff:15:c2:1c:75:5e:a2:c6:
                    7b:16:33:e9:4d:6c:d6:d5:72:50:30:48:45:8e:2c:
                    96:fb:ec:b5:b4:3d:99:0e:f4:1f:1c:77:a4:72:a8:
                    b5:ae:52:ef:9d:57:4b:34:b4:36:17:c4:82:30:73:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:26:03:DB:FB:73:61:33:0E:09:B2:A3:D8:42:B2:A7:77:C4:5E:91
            X509v3 Authority Key Identifier:
                keyid:F7:37:E6:09:C9:AE:95:95:DC:55:02:5F:C9:5C:8B:F6:32:44:E8:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/F737E609C9AE9595DC55025FC95C8BF63244E8F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F737E609C9AE9595DC55025FC95C8BF63244E8F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/323830343a323337303a3a2f33322d3334203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2370::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:e7:ea:79:43:35:b8:ff:f3:71:33:d9:8d:8a:42:18:a3:0a:
         e2:c8:98:a7:7e:66:3b:e8:51:d9:4d:a7:7b:49:9b:a2:f0:fa:
         a8:6b:00:77:f6:8c:65:5a:76:ad:a7:69:b4:ba:a4:7a:4a:8f:
         d3:b1:4d:80:a2:6f:63:43:33:38:ff:96:a3:0f:7f:08:9e:e3:
         81:3e:aa:3b:00:04:4b:d1:24:5c:d5:85:61:9c:34:d6:df:c2:
         a9:61:78:8c:6e:70:fe:aa:94:87:5b:af:5f:03:89:ed:68:07:
         57:05:3d:66:7b:19:83:49:67:0b:d4:79:e9:f5:06:69:06:3f:
         64:7f:cb:80:8b:0b:39:17:6d:36:bd:af:3f:cc:1f:be:bc:ef:
         e1:fe:e6:73:31:fe:fe:15:69:95:f3:db:a1:e8:02:5c:f8:3b:
         69:d6:e8:a7:39:cd:94:a9:c0:40:b9:0b:85:ba:e1:cf:84:19:
         13:76:a0:97:c6:3c:b5:85:92:93:98:0f:99:74:69:0f:8d:6c:
         a6:2a:b8:d3:8e:28:b0:77:1e:91:ae:3c:30:00:7d:3b:68:53:
         61:1b:e8:4a:c2:e8:6a:93:25:a4:e7:17:1f:ed:0c:cc:eb:64:
         6b:fe:08:07:68:c0:f3:72:20:a7:e8:a6:34:8f:e3:ee:55:07:
         6b:57:a8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:09 2024 by rpki-client on console-ams.rpki-client.org