Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          fXHjPlvLhWcPtuJxMlZpEvSTEgcPG1dXG2IYwb8wFfw=
Subject key identifier:   68:30:38:F4:8F:DE:9F:E4:4B:3D:FC:32:E6:F8:90:44:BE:FA:3A:7A
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       1BEF4AD9849919E58CAEBAC8DA4294BF66D025E0
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:17 +0000
ROA not before:           Mon 27 May 2024 21:46:17 +0000
ROA not after:            Mon 26 May 2025 21:51:17 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ef:4a:d9:84:99:19:e5:8c:ae:ba:c8:da:42:94:bf:66:d0:25:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:17 2024 GMT
            Not After : May 26 21:51:17 2025 GMT
        Subject: CN=683038F48FDE9FE44B3DFC32E6F89044BEFA3A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:16:c0:06:bf:22:84:56:35:22:99:e7:2c:
                    10:0d:7a:59:5a:e8:9d:16:d1:97:45:2f:ad:0f:fb:
                    30:f1:03:c9:d0:d0:07:35:76:40:5b:ec:a4:7f:96:
                    9e:bc:5d:71:8d:f9:a2:83:92:ea:0e:66:86:11:c0:
                    32:ab:f3:b4:08:c7:dc:24:09:1c:bc:74:87:82:c3:
                    ae:35:4f:99:1e:46:96:65:97:16:97:ff:55:b1:0f:
                    a4:8a:d4:e4:ce:a3:61:fd:ba:39:a2:73:59:83:b4:
                    f8:c1:38:7a:bc:af:45:c5:ae:85:4c:9a:04:45:7e:
                    28:b7:27:d4:4c:59:cc:28:4c:da:b0:69:df:ae:99:
                    6d:91:31:95:a7:21:f5:53:8a:f2:11:02:4f:13:dd:
                    8d:68:65:cb:61:ba:97:8c:57:4d:ed:02:db:16:4f:
                    6d:b1:14:53:68:d2:2c:54:3e:2c:3c:59:71:c1:52:
                    67:93:7a:27:a0:a9:76:ff:81:b2:58:94:b5:a8:79:
                    45:19:50:c2:ed:f0:c0:16:d4:4f:7a:9b:a4:3d:89:
                    eb:fa:07:24:c7:fb:18:1b:2a:aa:99:41:6b:ce:58:
                    14:44:c3:05:fb:77:c1:9c:81:73:63:f6:9e:89:c0:
                    c1:3c:63:5c:c3:cf:11:ac:83:19:07:e5:f6:e7:c3:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:30:38:F4:8F:DE:9F:E4:4B:3D:FC:32:E6:F8:90:44:BE:FA:3A:7A
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         67:60:1c:67:35:1f:29:d3:5d:9b:35:8e:41:8f:df:98:81:69:
         84:ed:ec:1b:37:22:fe:6b:c8:15:42:ba:1d:90:4b:6d:7b:27:
         72:1e:4a:ef:cd:e4:70:8a:88:73:08:24:8c:94:26:62:da:9c:
         5b:fe:39:ec:e0:10:77:60:3f:11:32:06:19:40:69:df:b2:76:
         99:75:3e:0e:83:e5:bb:82:12:32:4a:a0:b0:11:44:22:63:a4:
         23:ee:0b:95:7b:91:6f:39:70:6a:6c:79:58:63:88:ec:ce:8a:
         77:e1:0f:33:3f:1f:32:fc:0c:49:04:4b:f8:c1:e7:c9:32:b4:
         f6:91:93:e0:85:0f:62:b4:3d:56:9a:6f:b7:82:f8:7e:22:9f:
         14:70:66:c3:44:a3:ca:3f:19:6b:36:7d:c9:7d:59:6a:88:4d:
         78:d1:ce:44:08:67:5c:37:07:8f:bc:21:42:94:3c:1c:2a:2d:
         11:cf:db:b6:21:11:67:5a:96:b5:df:86:60:8a:b9:12:bf:70:
         1f:37:0a:f0:a9:3c:f8:c2:2c:eb:30:11:9f:2b:a6:e6:47:f2:
         db:48:31:c3:92:84:2e:97:1b:53:0f:63:a5:46:8c:ed:70:35:
         de:2b:25:61:12:c4:18:1a:d2:4c:c3:a1:da:d6:ef:42:93:30:
         37:2a:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org