Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          nxi36Ppats8J1Cs23clEk7ckDLCZt0j8GkTvUutE9m4=
Subject key identifier:   EF:37:4B:6A:4A:41:00:49:1F:62:A8:82:79:BD:37:53:AA:24:4F:ED
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       2989C1CE5EB69DE9ED71800A1F1DA1F862206754
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:17 +0000
ROA not before:           Mon 27 May 2024 21:46:17 +0000
ROA not after:            Mon 26 May 2025 21:51:17 +0000
asID:                     265010
IP address blocks:        2804:3160:7001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:89:c1:ce:5e:b6:9d:e9:ed:71:80:0a:1f:1d:a1:f8:62:20:67:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:17 2024 GMT
            Not After : May 26 21:51:17 2025 GMT
        Subject: CN=EF374B6A4A4100491F62A88279BD3753AA244FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f6:51:e1:31:43:34:97:c8:9d:c1:79:5d:de:
                    17:df:23:8b:5e:2a:3a:39:79:1d:88:52:1a:56:71:
                    71:02:1d:38:b8:65:bd:c2:78:95:02:0e:a8:64:ff:
                    3e:5f:48:61:b8:11:63:d0:57:c2:0f:7c:bc:af:e2:
                    10:5d:cf:20:1a:88:c3:dc:4b:fa:59:d3:64:0e:96:
                    62:bc:cd:ca:5d:e5:6f:28:3f:a4:9a:45:35:1c:ce:
                    46:a3:43:76:6b:e5:25:42:91:7b:5b:36:84:bd:a6:
                    42:ed:3c:f6:a6:9e:92:79:ca:3b:6a:96:eb:e8:bc:
                    23:af:98:8f:44:83:de:2e:3d:76:5f:b9:4d:a4:f6:
                    c7:db:9a:13:61:c0:5a:d7:8e:d1:4c:27:2e:33:5f:
                    ce:85:41:24:19:c3:c9:6b:ea:81:0e:a7:cb:5a:c4:
                    96:b5:de:62:27:4a:63:b3:f6:6d:cc:a3:07:68:02:
                    d1:b6:69:24:94:86:31:af:3b:64:90:da:90:64:de:
                    f0:fd:47:c3:8d:49:fe:b0:8a:d1:59:39:0b:c8:63:
                    d9:24:ed:45:e2:22:14:9f:f1:f4:bf:e2:b4:a9:8a:
                    0f:1f:6d:c6:6c:42:d9:22:9d:88:8b:fc:cd:5e:eb:
                    64:d2:4b:0f:01:ba:18:a9:10:9d:9c:cf:b9:30:41:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:37:4B:6A:4A:41:00:49:1F:62:A8:82:79:BD:37:53:AA:24:4F:ED
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030313a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:29:ff:20:97:91:41:8f:a2:9b:0a:b2:2a:37:0a:61:ff:d2:
         5c:46:4b:4d:9d:67:be:fb:e3:e1:70:3b:80:80:4e:69:a6:0a:
         36:57:64:7c:3f:8e:66:dc:42:e0:9e:cd:04:14:90:70:c0:88:
         4b:72:13:82:25:28:13:9b:d6:33:9e:f6:21:89:1b:50:7c:14:
         40:b0:de:f9:53:08:cd:a4:09:01:1d:ab:bf:c2:a3:a1:83:c5:
         8f:62:d6:a9:1d:1f:28:30:b0:00:01:91:ff:0a:f7:69:b8:91:
         3d:1d:07:6e:ea:34:a0:fb:e0:6b:51:42:f7:ff:38:9d:06:9b:
         12:18:af:f1:56:0e:51:7d:5c:a9:d9:78:35:b5:14:6f:24:cc:
         f3:29:1c:1d:87:4d:bb:59:8e:95:e1:25:28:df:3f:d0:b0:60:
         26:6e:e4:9d:d5:ad:3e:7b:70:ff:be:6b:9b:be:a0:b5:d3:20:
         cf:c3:5a:64:37:7a:8d:eb:8f:bb:ff:5f:80:76:c0:53:88:a3:
         ca:0d:bd:85:cb:f1:da:dc:60:95:22:5c:a9:f9:9e:ee:11:1d:
         34:42:eb:4c:58:12:fb:50:a0:74:da:53:13:6b:05:fb:54:1d:
         ac:db:12:76:fc:f6:dc:ba:f4:a4:48:94:dc:ba:db:07:2f:8e:
         0c:bc:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org