Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/323830343a326634303a3a2f33322d313238203d3e20323634383830.roa
File:                     323830343a326634303a3a2f33322d313238203d3e20323634383830.roa (raw, json)
Hash identifier:          VEJ7OcQJGGfF5fPaQZnKkPW2WyDRvTpQi3nKgaPALOk=
Subject key identifier:   3B:D0:6D:32:5D:A4:0B:27:BD:6E:DC:2A:90:DE:8F:FE:55:45:C6:DA
Certificate issuer:       /CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
Certificate serial:       7A855E870766E2C60A5E3B350411AF0361844117
Authority key identifier: 8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/323830343a326634303a3a2f33322d313238203d3e20323634383830.roa
Signing time:             Thu 25 Jul 2024 19:33:57 +0000
ROA not before:           Thu 25 Jul 2024 19:28:57 +0000
ROA not after:            Thu 24 Jul 2025 19:33:57 +0000
asID:                     264880
IP address blocks:        2804:2f40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl
                          rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 21:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:85:5e:87:07:66:e2:c6:0a:5e:3b:35:04:11:af:03:61:84:41:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D83B817FCC1F4634AF5642C22AD7FC9F62AD597
        Validity
            Not Before: Jul 25 19:28:57 2024 GMT
            Not After : Jul 24 19:33:57 2025 GMT
        Subject: CN=3BD06D325DA40B27BD6EDC2A90DE8FFE5545C6DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:64:81:69:e4:76:f7:73:85:d3:a8:d4:68:
                    d8:5b:76:9d:01:c4:f0:19:3c:56:1d:dd:2e:16:9f:
                    a4:2d:63:58:fb:e0:0c:5f:7e:f8:84:69:f4:47:ff:
                    5b:d9:1f:7d:5a:16:3a:0c:56:6b:38:ff:d0:47:69:
                    42:dd:5e:be:a2:28:9b:76:b2:b6:c5:99:96:1b:18:
                    04:3a:8f:56:9c:99:e5:94:65:b2:4e:fb:eb:c2:d6:
                    a8:73:f2:45:20:99:4b:24:3a:d3:0a:56:1b:7d:e3:
                    ca:6b:84:3c:66:8a:f9:89:89:83:07:35:68:25:e7:
                    86:74:5a:7b:ac:fd:8c:21:52:73:12:83:80:f5:84:
                    57:2b:54:b8:21:a7:da:49:ef:e9:23:ef:bc:22:0b:
                    2b:c4:91:ad:05:0c:bf:2d:86:9f:92:39:1b:d3:70:
                    c0:8e:b3:b4:2e:7e:45:7b:f0:f5:7e:47:06:55:8d:
                    c7:0d:79:16:74:22:08:22:e7:8f:cf:86:c6:cd:26:
                    d2:b0:d2:f3:9a:c3:a9:c8:57:bf:c8:2e:72:83:6e:
                    24:91:db:c3:f8:44:9c:41:35:8f:1c:ff:d3:dc:83:
                    4d:7d:57:ed:c1:33:37:cc:1a:24:e2:73:99:79:64:
                    6e:4b:3b:14:ce:6d:da:06:ed:1a:a6:e4:60:54:2a:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:6D:32:5D:A4:0B:27:BD:6E:DC:2A:90:DE:8F:FE:55:45:C6:DA
            X509v3 Authority Key Identifier:
                keyid:8D:83:B8:17:FC:C1:F4:63:4A:F5:64:2C:22:AD:7F:C9:F6:2A:D5:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D83B817FCC1F4634AF5642C22AD7FC9F62AD597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3As3Bd5oosFtNhQtDtxTwXztkwPAhcE1Jfq9rSB7buCh/0/323830343a326634303a3a2f33322d313238203d3e20323634383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:4c:8e:9f:d8:ff:05:62:ff:6a:b9:70:fe:79:ff:15:7d:
         25:9a:f4:22:47:48:ed:c5:2c:25:7e:d6:e6:d2:ba:bb:73:8b:
         b5:46:29:74:60:bc:1f:d9:f2:e5:79:b7:1f:73:dd:47:26:f3:
         6e:24:08:b2:c6:bd:09:4a:8e:99:46:87:ae:32:c2:30:d4:39:
         a4:3b:18:ac:2a:6a:60:9c:a7:21:c6:00:03:d8:71:5c:09:0a:
         73:88:45:bc:eb:2d:54:15:6b:bf:49:de:c9:2e:49:ac:be:30:
         a5:09:74:e5:d0:51:1a:f6:37:3d:22:c3:bf:03:52:43:88:6f:
         e5:8e:08:9e:14:16:ae:a5:1d:da:8d:73:3c:5f:c4:6e:ed:fb:
         12:ae:28:6e:7d:e8:9b:09:aa:e7:81:4e:df:38:3f:08:30:a1:
         9d:36:2b:16:6c:6d:9d:7e:73:87:82:c0:cb:cf:94:1b:89:a4:
         ac:91:82:c2:92:b8:26:96:92:8d:88:0a:f9:df:8d:06:47:ff:
         f1:9d:38:84:55:4e:47:d9:6f:40:1b:77:25:8f:17:64:48:c8:
         97:69:ea:00:bf:24:4e:e9:c7:7d:f4:28:ed:ec:05:4f:82:97:
         89:6c:33:09:ee:22:52:b1:05:af:7a:24:cb:7c:03:ab:23:1f:
         a7:8a:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:31 2024 by rpki-client on console-ams.rpki-client.org