Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          O1HXsLyWs12GT8+z+AtDIogpnZSEpXC7L9Vlq/oRsnc=
Subject key identifier:   57:72:63:E1:A0:17:EF:A7:1E:96:14:E3:11:CF:CD:70:CC:A3:F7:A3
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       31067E4069B2B87A08A7571EA0F4F1874BF42913
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:19 +0000
ROA not before:           Mon 27 May 2024 21:46:19 +0000
ROA not after:            Mon 26 May 2025 21:51:19 +0000
asID:                     265010
IP address blocks:        2804:3160:7004::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:7e:40:69:b2:b8:7a:08:a7:57:1e:a0:f4:f1:87:4b:f4:29:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:19 2024 GMT
            Not After : May 26 21:51:19 2025 GMT
        Subject: CN=577263E1A017EFA71E9614E311CFCD70CCA3F7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:ec:eb:88:34:4e:f9:72:24:32:2e:b2:97:
                    00:21:f9:ee:23:c1:b1:f4:a4:8a:84:11:3e:5d:19:
                    7e:dd:be:20:8e:e7:bf:3f:43:48:7a:a8:b7:04:6d:
                    b8:0f:29:f1:3a:5b:c5:79:74:1d:56:23:bd:0f:51:
                    7a:5f:c3:96:79:4e:06:6e:1b:75:73:c9:0d:79:dd:
                    be:4a:4f:f5:35:a0:6d:0c:aa:2d:26:dc:8c:aa:0c:
                    f8:df:bf:79:7f:40:d6:b3:55:ca:7d:da:2f:52:ea:
                    f0:73:e0:66:11:bb:aa:5b:6c:2d:0b:e4:7a:e3:3d:
                    4e:7a:7d:2d:e7:a7:b2:8f:2b:fa:94:d7:f7:4f:a1:
                    61:86:5c:96:0b:b0:1b:11:d6:5f:5e:c8:ac:d6:d7:
                    2c:fd:e3:6a:87:b8:ac:8b:3e:b5:36:c0:aa:e1:f9:
                    17:d4:ce:d2:20:f1:31:e8:c5:dd:44:90:ce:3d:d6:
                    bd:14:0d:e6:13:5c:a7:81:3e:ab:25:8d:7d:b9:aa:
                    7e:a7:99:de:ee:7f:45:15:a0:35:7b:16:46:96:b0:
                    cd:8f:81:60:c8:2b:7a:bb:19:80:53:b9:4b:c2:11:
                    84:d3:e6:d9:be:52:72:d3:9c:b8:15:32:74:74:42:
                    9b:10:b5:43:18:49:8b:ea:7d:a3:e0:f1:df:e6:25:
                    6d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:63:E1:A0:17:EF:A7:1E:96:14:E3:11:CF:CD:70:CC:A3:F7:A3
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a373030343a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7004::/46

    Signature Algorithm: sha256WithRSAEncryption
         b8:ee:7d:8e:53:9e:de:a1:17:a4:ab:49:bd:49:77:5d:01:cd:
         58:d6:fd:a5:d1:ae:13:eb:57:d2:ad:ee:b1:a3:74:92:82:26:
         65:c3:a2:35:6b:5c:e7:64:17:1e:9d:0d:64:07:6a:c9:75:43:
         e8:11:ef:ba:6a:63:23:79:52:f5:37:02:c8:cd:62:73:ec:96:
         32:03:db:ee:a9:eb:c7:1f:94:75:76:d1:80:34:65:a4:94:fc:
         21:14:ea:22:75:d0:ec:fa:ac:44:83:3f:53:3f:a9:56:c8:50:
         c9:fb:8e:15:ab:e3:cb:51:4f:37:20:d3:c5:85:96:30:9b:a4:
         43:a1:02:83:f8:24:8c:bb:5f:ee:a2:f0:59:e5:78:5b:2d:9b:
         87:5f:2f:ba:4c:be:af:93:ea:a9:8c:32:91:dc:af:56:5d:c8:
         74:76:ae:13:a7:6a:8f:cd:14:84:95:61:59:ad:b4:50:31:48:
         79:74:1c:5c:b8:cc:d6:ca:e7:46:37:af:b2:09:97:cf:b7:5f:
         d3:4b:ed:2e:3c:44:63:f4:f7:72:bc:bc:56:73:9a:3e:dc:90:
         f0:1f:a3:60:47:d5:25:28:77:00:e7:d8:29:b4:6d:be:33:27:
         3d:50:cf:3a:ce:c7:f0:90:a8:58:df:34:7a:64:ce:51:5d:0b:
         f8:32:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org