Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
File:                     323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa (raw, json)
Hash identifier:          BSSpHFUp92hjqrt6F9Bjm5SFtdbfnZj4t6f7wGbVZbY=
Subject key identifier:   61:D9:93:42:7F:3C:B4:37:73:DF:65:EE:15:D6:76:A8:7C:D1:6B:E7
Certificate issuer:       /CN=95DCFB3408E5756D963C105FC27CDAA5323D7B17
Certificate serial:       4ED23D7FD39FF248E238798582D50081ADCA4A56
Authority key identifier: 95:DC:FB:34:08:E5:75:6D:96:3C:10:5F:C2:7C:DA:A5:32:3D:7B:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa
Signing time:             Mon 10 Jun 2024 13:41:36 +0000
ROA not before:           Mon 10 Jun 2024 13:36:36 +0000
ROA not after:            Mon 09 Jun 2025 13:41:36 +0000
asID:                     266020
IP address blocks:        2804:393c:7700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.crl
                          rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:3d:7f:d3:9f:f2:48:e2:38:79:85:82:d5:00:81:ad:ca:4a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95DCFB3408E5756D963C105FC27CDAA5323D7B17
        Validity
            Not Before: Jun 10 13:36:36 2024 GMT
            Not After : Jun  9 13:41:36 2025 GMT
        Subject: CN=61D993427F3CB43773DF65EE15D676A87CD16BE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:38:84:d6:dc:e7:dc:ac:49:3b:6a:7f:5b:68:
                    4e:d4:4c:16:5d:ef:b3:a7:3f:45:ac:4a:ac:f9:29:
                    60:37:c9:96:0c:4a:55:80:d2:a5:27:cc:8b:7d:21:
                    a3:82:0b:64:e4:11:dd:79:2e:9d:4a:8f:b5:70:87:
                    f1:96:22:c5:e3:f9:f2:40:55:88:c2:00:8f:b8:8a:
                    29:f8:a3:21:6c:8e:11:87:a3:2a:2d:9d:73:57:b4:
                    59:4b:62:5c:6b:96:fa:44:90:e3:bb:12:32:54:f4:
                    b2:41:9c:85:9b:80:ae:0b:ce:80:d7:b6:e9:ff:a9:
                    b5:3a:dc:36:e3:c4:91:60:84:b9:17:5e:39:b5:41:
                    65:1a:a2:39:a8:58:03:14:08:0a:c4:34:c3:70:b4:
                    93:79:b0:92:c3:6f:8d:38:ff:a4:c2:8a:7b:73:06:
                    51:82:bc:ed:53:c5:fe:b7:e4:cf:6f:be:24:82:8a:
                    fe:f2:e0:4a:f9:5f:61:fa:8a:84:74:2a:33:1b:77:
                    33:6a:33:9a:4b:74:06:29:5a:54:2e:a8:7b:54:18:
                    8f:a0:43:0a:6d:cc:f0:8f:19:40:ba:a8:ce:15:df:
                    85:86:9d:24:48:b2:0c:57:61:af:80:09:03:59:25:
                    01:fc:74:08:dc:58:f0:45:e2:92:1b:76:b5:35:cd:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:93:42:7F:3C:B4:37:73:DF:65:EE:15:D6:76:A8:7C:D1:6B:E7
            X509v3 Authority Key Identifier:
                keyid:95:DC:FB:34:08:E5:75:6D:96:3C:10:5F:C2:7C:DA:A5:32:3D:7B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/95DCFB3408E5756D963C105FC27CDAA5323D7B17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95DCFB3408E5756D963C105FC27CDAA5323D7B17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/323830343a333933633a373730303a3a2f34302d3430203d3e20323636303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:393c:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:99:24:c4:ff:5b:fd:fb:4c:5f:93:27:72:42:46:d0:89:
         e7:e9:ff:fb:3f:ff:c1:67:0d:3b:c7:68:0a:f6:84:af:0f:bd:
         cb:be:8b:a8:c3:8f:b5:9e:4e:0d:8c:9b:34:96:60:ff:67:41:
         83:62:70:3e:cf:03:fb:db:01:58:2b:56:ca:c5:da:e2:0a:5d:
         eb:bb:a2:36:46:ee:46:8c:43:95:bf:08:9a:b9:e0:47:38:78:
         4e:4a:a9:cd:93:c1:9a:c2:3c:34:b0:5d:7b:e4:f6:1a:ea:ac:
         d6:2d:15:f8:5b:00:f2:8d:81:c8:d2:ae:08:7e:99:5a:bd:18:
         7b:e5:0a:12:ee:7d:47:97:1a:35:87:de:72:32:c6:40:c9:3b:
         f9:22:21:73:87:89:e2:a6:62:10:4c:90:09:6f:61:de:76:e7:
         d8:e0:e6:b4:ce:40:e6:2a:50:28:e2:df:4c:0d:4b:cb:b5:9d:
         32:37:a8:c2:c0:bf:50:d8:46:31:1b:7e:9b:36:fa:19:f7:d3:
         8d:40:be:68:23:b6:a6:a4:69:6a:6d:be:a2:4b:e0:ed:91:f9:
         dc:8e:14:25:6e:77:dd:22:08:fd:9c:d8:17:79:2f:c2:c1:63:
         1e:14:ad:cd:22:b9:be:3d:22:e0:29:54:0a:09:9a:46:84:58:
         fa:9f:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:27 2024 by rpki-client on console-ams.rpki-client.org