Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          MsRCGQDpLwJRjwJBBN5D8F3KSyxSj2G8SclQPiFuCt0=
Subject key identifier:   A8:DE:88:60:36:9C:D0:A8:6F:FF:B2:2D:4A:00:6B:0C:43:B4:89:49
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       040FE8C65C24381A52253373DFE632C3AB7869A0
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:19 +0000
ROA not before:           Mon 27 May 2024 21:46:19 +0000
ROA not after:            Mon 26 May 2025 21:51:19 +0000
asID:                     265010
IP address blocks:        2804:3160:7000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:0f:e8:c6:5c:24:38:1a:52:25:33:73:df:e6:32:c3:ab:78:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:19 2024 GMT
            Not After : May 26 21:51:19 2025 GMT
        Subject: CN=A8DE8860369CD0A86FFFB22D4A006B0C43B48949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:18:c8:35:79:c4:93:08:f1:3f:d5:02:0d:c7:
                    a9:9a:ce:50:0b:ae:6b:95:46:cd:0d:da:f2:40:55:
                    d8:0f:5e:d7:cd:91:aa:94:3b:66:88:5c:da:30:b9:
                    c8:90:11:25:26:bc:9a:40:2c:e3:e4:fa:13:b9:fb:
                    58:43:c2:d5:b2:96:7c:27:f4:97:93:bf:c7:41:d3:
                    1b:ef:1c:6f:14:67:fa:d8:cb:40:6d:48:65:dd:fe:
                    40:76:69:5d:f1:b8:6d:9b:fd:66:33:da:ce:d8:72:
                    94:c5:da:6f:7a:fe:33:e8:f9:22:40:d9:4a:12:65:
                    1c:55:a2:76:ae:85:74:7d:3f:1a:7a:74:5f:63:6b:
                    a3:78:70:51:7e:7a:d6:38:eb:44:37:76:41:8e:81:
                    b3:ba:60:4e:f4:4f:78:48:99:3a:1e:9a:3b:05:67:
                    f6:ea:fe:07:ea:e8:90:ec:04:7e:b3:ad:b9:a0:ae:
                    01:72:49:6f:e2:c9:8b:a1:76:bb:2e:92:a4:3e:33:
                    10:97:b0:df:84:93:8a:be:e6:5d:d1:5e:b9:06:d1:
                    25:4b:43:06:6b:b7:e2:fa:9b:fe:b9:94:f3:d8:45:
                    0e:ef:f2:fb:91:ac:cf:14:4b:96:11:33:7c:47:28:
                    34:68:83:e1:9d:27:b0:a4:ea:2c:0b:24:62:25:7f:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:88:60:36:9C:D0:A8:6F:FF:B2:2D:4A:00:6B:0C:43:B4:89:49
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030303a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7000::/46

    Signature Algorithm: sha256WithRSAEncryption
         13:5d:1a:dc:62:ac:b7:69:47:6d:18:05:9c:83:26:95:24:06:
         10:78:7c:e0:d9:96:1b:41:19:99:e7:1f:e1:5c:44:53:44:e3:
         3b:05:ac:b7:93:a4:35:be:f9:a7:7f:7e:84:69:3a:13:a4:9b:
         00:9d:89:77:46:0c:ac:60:21:49:67:93:4b:46:ea:7d:22:50:
         86:92:e6:37:94:1b:d1:ce:8d:c1:e4:d1:3d:eb:be:8d:0f:07:
         52:2d:4a:1f:31:6b:77:e0:e4:05:4f:e7:d5:8f:de:b1:5d:29:
         83:05:61:bb:44:28:98:a8:a0:2e:2b:f6:13:1f:9b:a3:dd:c5:
         45:0c:82:fa:b9:b9:90:d0:ac:fe:5b:5a:c2:94:28:eb:d4:1d:
         bb:b4:f2:ff:55:8b:c6:46:c4:86:f8:6a:4d:d8:f3:9e:ba:46:
         5d:4c:36:35:fa:74:46:2a:e5:d4:6d:3e:32:3c:5b:54:4c:eb:
         02:d4:27:92:f0:7e:45:92:2e:f0:0c:d0:d9:36:8d:1f:54:10:
         f9:40:c0:a9:89:63:30:78:02:b2:82:0f:46:cf:8f:04:8e:2e:
         9f:45:7e:58:62:fe:f7:d0:76:a2:46:f6:ce:c7:89:71:82:be:
         8d:f1:a4:ea:5d:45:7a:bb:6c:06:8e:26:67:82:c7:59:7e:dc:
         7a:b9:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:16:48 2024 by rpki-client on console-fra.rpki-client.org