Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          QbFrFKuMuiEubR7xgneoes4dgyWWudcUQ6N9b8dNZho=
Subject key identifier:   17:AB:4B:02:DA:57:74:E1:51:D4:3F:F9:D3:AA:F0:06:23:BB:91:30
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       7AAF0CC4CE1684330431EB5ED045CF6CB4E6269F
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:16 +0000
ROA not before:           Mon 27 May 2024 21:46:16 +0000
ROA not after:            Mon 26 May 2025 21:51:16 +0000
asID:                     265010
IP address blocks:        2804:3160:7002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:af:0c:c4:ce:16:84:33:04:31:eb:5e:d0:45:cf:6c:b4:e6:26:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:16 2024 GMT
            Not After : May 26 21:51:16 2025 GMT
        Subject: CN=17AB4B02DA5774E151D43FF9D3AAF00623BB9130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:73:c6:31:a1:f6:b0:08:4f:36:9e:9d:2b:
                    26:6b:21:c8:91:be:57:ab:a5:b5:a6:62:16:54:4a:
                    cf:98:34:b1:00:c7:94:c2:e0:c2:9c:9b:ab:d4:9d:
                    ed:52:c9:fe:ee:52:df:81:63:6f:c6:b5:fe:de:ce:
                    cb:42:25:8c:82:40:02:28:5a:fb:be:65:f5:62:97:
                    95:f3:98:b4:8c:dd:94:78:2c:e5:c6:e1:c1:15:be:
                    11:1f:e1:86:26:10:f0:01:a8:87:83:ce:40:3d:8e:
                    b7:27:9f:ce:a7:88:fe:be:8e:b2:1b:4e:ff:84:d7:
                    04:d4:b7:5f:d9:c4:c4:fb:e7:08:27:46:a0:ff:7e:
                    f7:b3:6b:0b:58:f0:5b:c7:7f:21:42:7d:9c:7b:71:
                    1d:3e:b1:a6:1b:6b:3e:42:c0:ca:a2:60:7f:96:ea:
                    56:d9:77:2a:e9:c0:d1:d2:c2:8f:6d:62:b6:47:7c:
                    c7:4e:f1:15:96:77:a5:a8:52:bf:56:cd:22:6a:e6:
                    a2:3e:b4:9b:a3:b0:09:2b:a9:3d:04:4e:c0:e1:65:
                    50:8d:d0:1a:7b:6b:04:87:9c:4b:32:3f:5b:e5:83:
                    e5:e4:8f:44:2f:99:42:5d:67:6f:21:c7:df:1a:0b:
                    8b:66:a9:71:11:03:25:f3:eb:13:bf:af:53:8d:d1:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AB:4B:02:DA:57:74:E1:51:D4:3F:F9:D3:AA:F0:06:23:BB:91:30
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:cb:45:da:1c:7c:b9:2e:06:0c:d6:df:bf:b3:a6:e9:0d:
         f7:61:a7:5a:06:85:a9:eb:a5:cd:7a:f0:b9:92:d8:5d:66:0c:
         f1:f5:99:48:9a:3e:b9:aa:04:8e:59:22:a5:11:56:a1:5f:60:
         f9:6c:fd:d7:ee:c8:ea:75:6b:5a:18:72:c4:cb:6c:a2:6a:40:
         3b:4b:ad:14:76:dc:59:06:b6:6b:2a:99:9f:40:01:2c:fe:7c:
         a9:33:63:2b:29:cc:56:b7:46:0c:c0:e2:26:64:da:bc:77:69:
         8d:8b:8d:2e:c0:4e:4b:d2:93:c3:d6:89:a8:9a:c3:9c:c6:b5:
         f5:5e:4b:41:2a:65:38:e7:81:3b:b9:53:31:40:fb:70:37:e2:
         6d:d0:3a:7d:29:0c:e9:0f:b3:f3:b5:28:68:82:34:d6:a2:11:
         6a:50:f6:9b:d6:a9:68:98:a1:e7:c3:94:b8:11:22:fc:54:95:
         5d:1b:8b:a7:31:f0:0f:1c:c7:96:09:a7:e1:6a:33:52:de:e2:
         26:8e:53:70:3c:64:d7:ee:f4:55:6d:23:09:5e:67:cb:4d:11:
         9a:43:a8:6c:0d:6d:95:88:6b:1c:50:c6:7c:b2:5d:dc:e7:56:
         0a:54:a5:ff:ac:39:0e:69:0c:50:6e:b2:82:66:48:fa:46:f4:
         a7:4f:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org