Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          /giJEreBiSNnp5EKv3XnPaER+ra9xhGm8pK370+Mnro=
Subject key identifier:   06:5A:8E:B9:4C:8F:52:A5:9D:91:7C:CC:F7:D3:1E:D7:9B:A8:D2:91
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       166C31F37333AE3461BBF82D15F2C6F932DA1E32
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:20 +0000
ROA not before:           Mon 27 May 2024 21:46:20 +0000
ROA not after:            Mon 26 May 2025 21:51:20 +0000
asID:                     265010
IP address blocks:        2804:3160:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Jun 2024 11:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6c:31:f3:73:33:ae:34:61:bb:f8:2d:15:f2:c6:f9:32:da:1e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:20 2024 GMT
            Not After : May 26 21:51:20 2025 GMT
        Subject: CN=065A8EB94C8F52A59D917CCCF7D31ED79BA8D291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9a:ed:17:54:6e:51:dd:06:55:9c:66:7f:a2:
                    67:53:0a:4f:68:b7:ad:b6:5e:22:07:63:3a:6e:58:
                    55:5b:51:25:e0:d7:20:7f:2c:c4:9a:c7:d7:7f:12:
                    cf:bd:86:eb:b4:7c:7d:6a:33:0b:ae:bb:55:dd:9f:
                    66:c5:93:07:cd:7d:31:8c:74:ab:27:81:85:b4:37:
                    1b:ce:18:43:95:5a:52:64:af:4b:90:f8:0c:43:c9:
                    8e:2c:e6:93:c2:65:a2:0d:d1:07:3a:36:50:c3:7d:
                    f6:80:05:f8:27:ee:2c:15:64:1e:cf:e9:4a:40:0e:
                    11:a0:e8:f2:c6:ea:e4:71:a9:9d:4c:9b:b7:aa:2e:
                    53:d6:2e:e0:66:c0:04:14:2d:5b:15:08:66:89:4e:
                    64:28:10:12:da:4c:12:fe:b5:c9:8e:a5:d4:ee:d0:
                    d0:08:5d:c0:5b:ae:34:94:24:b2:13:f0:33:1d:ee:
                    51:85:67:1f:32:97:f0:c3:32:ca:aa:6d:6c:f9:b9:
                    2b:00:db:2f:b3:8f:73:97:88:ac:f4:64:30:47:e1:
                    2e:90:1d:64:41:65:14:56:fb:86:2e:4b:3c:f8:78:
                    63:57:f3:94:9b:30:97:60:b7:b2:0f:a9:de:61:62:
                    6d:9a:0e:c2:a7:40:fd:3b:dd:74:00:9f:11:7e:64:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5A:8E:B9:4C:8F:52:A5:9D:91:7C:CC:F7:D3:1E:D7:9B:A8:D2:91
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:01:c2:79:fb:6f:18:5c:81:ee:5f:82:5f:c1:02:f2:b5:e2:
         ea:79:2e:54:e4:c5:73:32:fb:24:c5:78:da:f3:58:ed:e1:da:
         5a:56:87:be:e5:a0:91:02:d0:dd:20:a3:5e:12:8b:fe:72:6a:
         9b:59:be:49:5d:2f:68:06:fb:f6:3a:1e:42:fc:5e:be:89:8a:
         d8:50:1e:b4:d3:83:a6:41:39:d9:7e:2c:8c:21:8d:c9:75:25:
         db:55:af:9c:6a:b9:5f:9d:25:77:1b:a9:50:51:32:bb:5d:d9:
         1e:cb:59:7f:ae:9e:e5:f8:aa:f9:cd:cf:99:6b:ea:3a:92:0a:
         2f:9b:54:3b:d3:58:27:6b:f1:49:ab:3d:ca:ec:97:22:2f:c9:
         28:b3:1f:62:fa:51:02:98:b5:50:68:3d:91:75:59:03:27:d6:
         d1:26:dc:ea:32:fd:89:a7:2b:ee:48:40:78:b9:2b:3b:9d:db:
         05:be:06:a6:68:3e:8e:b9:6e:49:42:2a:30:86:47:8f:3c:0b:
         6c:5a:f7:f8:ac:84:80:e0:89:7b:a6:90:82:b7:74:0a:06:67:
         d4:19:35:ac:aa:f4:ee:30:4d:d0:a8:d9:9e:62:03:aa:28:07:
         c6:30:ae:00:9e:f6:85:64:56:b0:69:3c:2d:c3:2a:db:1c:e2:
         92:2d:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 19:09:55 2024 by rpki-client on console-ams.rpki-client.org