Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          I8eOYgNtJgIUkuJ8bfaFRIJ6kAXFyhUM2LI9DQLqPTk=
Subject key identifier:   42:F2:3F:98:D0:02:41:DC:A5:74:FD:31:74:88:43:CA:CB:2E:CE:B2
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       2D0802A3860B952EC0C476F4D5831E127D66A4CD
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:19 +0000
ROA not before:           Mon 27 May 2024 21:46:19 +0000
ROA not after:            Mon 26 May 2025 21:51:19 +0000
asID:                     265010
IP address blocks:        2804:3160:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:08:02:a3:86:0b:95:2e:c0:c4:76:f4:d5:83:1e:12:7d:66:a4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:19 2024 GMT
            Not After : May 26 21:51:19 2025 GMT
        Subject: CN=42F23F98D00241DCA574FD31748843CACB2ECEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:2e:ac:8a:d6:39:c5:b3:29:0d:7e:9e:b9:
                    9d:6d:6e:a2:30:a4:8c:94:e3:2b:42:19:0c:11:ba:
                    46:17:19:c4:56:a1:4c:d6:94:fa:94:24:c7:75:72:
                    23:12:36:62:cc:4b:a7:6b:5d:24:91:2f:f8:19:b1:
                    b1:8b:4b:ac:37:3d:b6:c1:6e:d2:a7:ee:b8:14:81:
                    b6:a6:ad:14:bf:0a:8a:ff:52:70:36:e6:0a:a0:f4:
                    ac:ec:9a:62:57:a3:7f:bd:87:97:24:f2:74:53:5b:
                    b1:c6:a2:de:b1:26:6c:b5:01:f4:f6:ed:be:20:67:
                    79:4c:c5:a2:0f:77:9c:a0:da:df:3d:3a:af:ac:ef:
                    e7:6a:d8:a4:e7:17:43:6c:1b:82:b0:05:95:7c:1f:
                    d0:99:8b:86:57:50:79:39:83:f9:80:7c:f4:74:a0:
                    f2:cd:f0:94:f3:66:9d:18:5f:e2:d0:e6:13:68:cf:
                    5b:78:68:b1:53:5c:9e:4b:90:c5:3b:8b:1e:71:eb:
                    51:36:bf:ef:aa:4f:e0:e2:69:69:6d:bc:21:3c:f6:
                    1f:18:51:e8:08:b7:63:a0:c6:4f:c0:2b:82:3d:bf:
                    a6:4c:77:2a:c0:f2:fa:2a:3d:b1:7a:7c:9b:55:de:
                    d1:8f:e3:e4:29:85:53:a5:3c:fe:98:c7:b2:6f:77:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F2:3F:98:D0:02:41:DC:A5:74:FD:31:74:88:43:CA:CB:2E:CE:B2
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a323a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:3d:16:0b:de:d8:69:b3:12:db:da:e5:d6:95:a4:f0:c1:ae:
         10:1d:6d:7a:e1:28:e3:83:c9:9c:46:91:fd:5e:a3:0d:16:50:
         28:bc:ed:f9:b2:7c:57:d9:28:2b:22:3c:4e:b8:c5:79:13:59:
         28:91:c4:50:f7:6d:e9:31:6b:09:19:98:44:c4:1c:bc:7a:b8:
         6b:92:b2:ab:be:76:de:38:2c:57:ef:4c:5a:36:f1:23:47:4d:
         61:92:4b:a7:6f:06:c6:32:fe:f1:e4:e9:13:ce:08:c6:05:b2:
         84:88:72:ac:15:6a:9b:7a:a8:f1:d8:c3:db:ed:89:73:71:55:
         cc:dd:82:56:6e:2b:e3:f3:fa:44:84:03:87:b6:dc:1d:0e:ae:
         e5:6f:81:ae:ab:6c:29:c7:c9:70:7e:0d:54:da:ae:a9:f1:f8:
         93:60:97:dd:b4:76:69:f5:0d:b9:ce:9d:bc:c2:a3:23:d4:1b:
         7e:81:ac:d8:2a:a9:01:87:3f:ca:31:f5:24:65:0d:fc:8b:24:
         7a:49:dc:75:10:2f:07:f2:b6:bb:c6:67:b7:3e:49:86:cc:3f:
         3d:82:a1:e5:21:cb:6f:ab:a2:3f:55:6b:74:cf:4c:6c:5f:75:
         17:75:9b:87:b8:5d:25:be:4b:1b:43:c3:58:47:70:ab:07:b8:
         07:6e:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org