Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          BmjP9Xb4oIosnDV5u71Tmp6p0Gs+gaB9VOKQGViALGw=
Subject key identifier:   05:C1:99:D6:4A:C7:5F:DA:71:37:6B:E2:89:E4:4C:37:12:F3:CC:62
Certificate issuer:       /CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
Certificate serial:       06C279F371565D1CF969B04ABC89B3E689FCBBE3
Authority key identifier: D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Mon 27 May 2024 21:51:15 +0000
ROA not before:           Mon 27 May 2024 21:46:15 +0000
ROA not after:            Mon 26 May 2025 21:51:15 +0000
asID:                     265010
IP address blocks:        2804:3160::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl
                          rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 16 Jun 2024 19:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c2:79:f3:71:56:5d:1c:f9:69:b0:4a:bc:89:b3:e6:89:fc:bb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7
        Validity
            Not Before: May 27 21:46:15 2024 GMT
            Not After : May 26 21:51:15 2025 GMT
        Subject: CN=05C199D64AC75FDA71376BE289E44C3712F3CC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:ea:84:2a:0e:8c:81:f4:ad:4c:cc:ca:d5:
                    a0:5d:c7:4e:4c:17:f2:f0:f9:12:8c:64:b4:19:43:
                    34:39:ce:49:b2:e9:31:b9:f5:cc:f3:1b:3f:f0:c9:
                    c9:c2:ce:7d:2f:90:73:0b:18:50:d4:17:83:6d:04:
                    aa:4d:72:37:b8:d2:6a:86:ad:b5:d8:45:12:82:72:
                    b3:9a:4f:62:4e:31:e3:59:e9:c1:b7:72:66:7f:2a:
                    90:5c:3d:a4:59:23:08:ac:07:44:7b:10:ef:8a:02:
                    3b:39:3d:41:e0:47:c5:2d:04:8f:a1:74:56:1e:59:
                    05:74:29:dd:af:7a:63:cf:19:a1:d9:75:74:1a:f3:
                    dc:2d:85:16:9c:44:54:7e:e6:36:49:71:28:df:14:
                    61:c2:a9:1f:3f:65:4e:99:87:26:86:a1:90:f1:10:
                    31:c3:93:7e:10:36:c2:5d:16:6c:72:74:3a:3e:cb:
                    41:bb:33:f8:3d:65:01:eb:a3:fb:45:73:ea:57:8d:
                    ab:0a:15:4b:4a:87:3c:fe:3d:d3:b1:d4:1d:c6:e8:
                    b0:6b:12:02:f8:69:8a:79:75:60:be:62:3e:43:f7:
                    f7:64:ac:92:26:2b:3e:07:55:07:2c:24:59:ea:f4:
                    e4:b2:23:ab:ef:cb:70:01:cb:4f:7b:ec:70:d4:64:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:99:D6:4A:C7:5F:DA:71:37:6B:E2:89:E4:4C:37:12:F3:CC:62
            X509v3 Authority Key Identifier:
                keyid:D3:D9:C9:24:7C:2C:AC:69:2E:0C:68:1A:DC:FA:69:26:69:CB:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3D9C9247C2CAC692E0C681ADCFA692669CBCFD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/0/323830343a333136303a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:1b:31:48:e5:af:7a:0a:bf:84:98:63:de:e7:6e:61:e8:81:
         94:96:4e:ab:49:5f:ec:cb:8a:42:7b:87:d3:7a:af:2f:91:ee:
         f2:70:1a:e0:35:84:ca:e8:3f:64:6c:09:15:90:c1:74:30:16:
         15:ee:cd:2f:10:c4:3a:f7:f6:a1:49:95:cc:f5:1e:ee:4f:35:
         d9:15:d0:78:4e:e2:b6:4c:e8:80:a1:6a:b6:c5:e8:55:8b:eb:
         f7:ca:4d:91:5b:3b:11:5d:d2:ef:84:97:74:4b:77:8d:2f:32:
         8e:4c:e2:4e:87:6a:5b:bb:10:4f:25:94:64:42:16:1f:5e:f0:
         04:6a:3f:e9:48:24:55:89:59:de:72:e7:26:17:5d:60:e7:52:
         2d:c2:5b:32:56:2f:b4:44:44:5f:d1:85:63:2a:3b:f2:a7:42:
         bf:a0:4d:67:27:49:fc:07:bf:ef:0c:e0:a3:f7:20:34:34:e6:
         27:4f:6d:8e:3f:8e:5c:8b:f4:ac:70:c8:8f:de:3a:34:ba:75:
         63:e8:91:77:d4:43:24:55:a2:97:02:4c:90:27:17:0d:48:87:
         87:11:c3:16:01:8c:2f:2a:e8:e3:5f:77:92:a6:1c:2b:41:2f:
         68:69:7d:42:e2:36:8b:84:e5:1d:de:c1:1b:58:31:4f:7e:5d:
         f1:fc:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:43:37 2024 by rpki-client on console-ams.rpki-client.org