Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          cFIfr0eRBKrTt7GkrbjvV7Ms1rnky1TuDLeusuWo+O4=
Subject key identifier:   24:66:D8:E8:47:5F:92:8A:23:9E:7C:11:CB:65:78:B8:9C:16:49:8E
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       07DF5C2D5F08DEDF2F714D201A433640205ED515
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:19 +0000
ROA not before:           Mon 27 May 2024 21:46:19 +0000
ROA not after:            Mon 26 May 2025 21:51:19 +0000
asID:                     265010
IP address blocks:        2804:3160:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:df:5c:2d:5f:08:de:df:2f:71:4d:20:1a:43:36:40:20:5e:d5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:19 2024 GMT
            Not After : May 26 21:51:19 2025 GMT
        Subject: CN=2466D8E8475F928A239E7C11CB6578B89C16498E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:f3:8d:61:46:cc:1b:0e:f7:0d:27:a9:03:
                    cb:f5:78:90:37:97:8c:7b:28:20:fc:d2:27:2e:b2:
                    00:3e:4c:80:e8:f5:d8:e9:cc:89:06:8a:97:a4:d7:
                    71:1f:5f:4f:71:46:c7:bc:8e:c3:65:e0:72:7e:4a:
                    92:4b:d4:e3:19:c3:68:65:6b:5b:cc:c3:11:ac:8a:
                    ab:41:a0:bd:f5:04:52:67:62:6d:bf:16:e1:a7:1b:
                    7c:b0:dc:7e:51:05:e4:97:6d:49:7d:56:a3:49:12:
                    a8:8d:e6:3d:91:d3:d9:f8:6c:77:ae:a8:65:27:59:
                    47:6f:a1:ed:06:7c:4b:5a:98:dd:e8:fe:91:67:ce:
                    fd:2c:cb:83:6f:fb:5f:30:4d:5b:02:e9:0f:9d:57:
                    f7:07:6d:ad:ab:de:59:0e:41:4f:01:ac:17:96:93:
                    3d:f7:24:37:23:04:16:d3:dd:46:0b:e4:ac:73:29:
                    6c:46:de:36:5a:09:60:81:aa:68:92:3d:c0:94:c1:
                    1c:d9:f9:46:11:27:d4:0e:1c:a8:66:fd:eb:9a:30:
                    43:9a:53:50:a8:5f:72:14:de:6c:95:66:c0:1d:6e:
                    a4:de:0c:5c:18:a5:53:3b:8d:d4:c3:68:11:44:e6:
                    b8:bf:73:50:3d:5a:54:1f:c7:0e:6e:20:90:1e:c2:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:66:D8:E8:47:5F:92:8A:23:9E:7C:11:CB:65:78:B8:9C:16:49:8E
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:48:16:b8:85:97:f7:57:14:4a:97:50:20:e0:08:3e:eb:94:
         30:f0:a0:6a:f0:ca:a7:73:5d:93:54:da:4e:b9:6b:f9:a5:0c:
         c8:15:e6:c6:89:c8:7e:e9:ca:41:ba:59:e9:6f:17:be:0c:1b:
         38:fc:71:32:d8:0a:12:ff:b3:d8:10:52:c9:4a:df:16:30:36:
         ba:fe:24:38:b9:f2:2c:a2:ca:5f:f4:c3:cf:ae:fa:15:d5:d9:
         bb:65:89:06:88:d0:e5:3f:bd:c9:b9:4a:ff:a7:d7:73:4e:c5:
         50:5e:c4:be:8e:5c:3d:6e:42:ad:a1:94:1a:4e:19:44:f0:18:
         30:33:63:64:e6:bf:d6:ee:cd:67:a9:06:f1:c4:63:91:79:ff:
         c5:b6:ad:6e:65:31:7a:73:d2:8f:47:01:ad:d1:9c:75:56:8e:
         c1:70:1b:ea:25:9a:78:d4:5a:c0:a4:18:17:fa:d3:35:ee:cd:
         b9:61:80:11:bf:d4:ff:37:36:90:b2:74:33:67:6b:94:25:50:
         17:07:24:39:13:83:d9:8f:d9:84:41:62:ed:9d:59:e2:4d:c6:
         bb:67:6b:6a:78:1a:c8:4d:b8:4a:26:fc:a8:91:d9:23:aa:c1:
         db:17:26:70:ec:0d:bd:06:8a:0b:d0:22:8d:d6:f6:c1:e5:fa:
         5a:a7:d7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org