Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
File:                     323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa (raw, json)
Hash identifier:          zPWlaz1hL5OaUD0HWDRY9mDDiOCGWiL6JcyZWucMfFM=
Subject key identifier:   D1:94:6E:5E:B7:51:4E:7D:8D:B9:4C:C4:6C:E0:20:01:F3:76:5A:3F
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       30B4FB69ED427F738AC1DE55099DF289A6DDB7FD
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa
Signing time:             Mon 21 Oct 2024 23:15:58 +0000
ROA not before:           Mon 21 Oct 2024 23:10:58 +0000
ROA not after:            Mon 20 Oct 2025 23:15:58 +0000
asID:                     265311
IP address blocks:        2804:2de8:2000::/35 maxlen: 35

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:fb:69:ed:42:7f:73:8a:c1:de:55:09:9d:f2:89:a6:dd:b7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Oct 21 23:10:58 2024 GMT
            Not After : Oct 20 23:15:58 2025 GMT
        Subject: CN=D1946E5EB7514E7D8DB94CC46CE02001F3765A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:02:03:c2:81:dc:29:10:43:d2:e3:1b:e0:
                    bf:45:ff:d8:14:c9:8b:bf:0b:66:fb:7a:e3:d7:6e:
                    a2:fd:9a:78:91:96:42:7f:00:b6:10:7e:bc:d2:b9:
                    e5:d3:be:78:eb:c6:35:47:65:e4:89:d4:ab:38:14:
                    5e:bf:e8:56:1c:58:f0:cc:85:6f:8c:f1:2f:ce:38:
                    59:80:95:69:77:37:ed:c6:dc:42:05:f1:72:e6:d5:
                    6b:61:53:ec:75:db:fc:73:f4:bd:33:0a:b0:3a:78:
                    92:d9:15:59:61:58:d7:27:0d:94:91:e8:0e:b7:21:
                    f6:36:c0:4e:11:55:82:77:be:7e:5a:9d:58:f2:48:
                    e3:98:f6:55:f2:5e:6f:e6:39:2c:38:9e:50:c2:67:
                    a2:ed:28:ad:61:96:46:2e:89:3c:c3:35:9f:de:fe:
                    0e:67:fd:54:32:60:ca:58:95:1b:5a:ce:1f:44:51:
                    9a:da:40:d6:6a:fb:b3:3f:df:39:a4:fc:97:f1:7c:
                    da:01:1f:89:60:c1:6e:45:09:3b:12:c9:12:be:7d:
                    0f:c3:a2:49:79:9b:bb:0a:fd:fb:5a:47:ae:bb:0c:
                    6c:4b:36:28:4f:45:e7:4b:01:46:7d:05:18:9f:1a:
                    17:bc:e1:f2:8d:a6:d6:c7:72:02:bc:0d:ce:38:3c:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:94:6E:5E:B7:51:4E:7D:8D:B9:4C:C4:6C:E0:20:01:F3:76:5A:3F
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a323030303a3a2f33352d3335203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         14:30:a6:65:28:33:b6:21:00:93:36:15:60:7a:56:fe:b3:48:
         7b:24:41:92:fa:8f:e2:ee:4f:a1:40:e4:b2:d7:1d:4b:f1:02:
         01:4e:d2:a8:55:81:3c:a7:9a:c8:21:cf:e4:01:09:b6:e1:2e:
         c0:42:5e:cd:33:de:6f:a7:77:f3:4b:81:db:03:01:7c:e6:a2:
         9e:55:67:73:1f:26:ae:a6:fa:1f:2d:a6:51:8b:e4:fc:e9:ac:
         ff:82:7c:de:e5:b1:30:b6:46:25:d6:7c:11:ae:3a:99:ea:65:
         f1:e5:e8:7a:61:67:67:b0:4e:63:10:79:0b:70:ec:46:6c:71:
         f9:22:22:2d:78:df:25:cd:3f:b6:71:e5:0d:94:b0:43:54:36:
         7c:34:06:63:f9:16:c5:6f:5e:16:c1:eb:54:09:2b:7b:cc:24:
         d8:84:c2:f8:cb:ae:6d:4e:de:90:5e:11:8e:30:6f:6e:cd:ca:
         25:aa:10:c7:84:0f:8b:e4:38:d9:9e:58:f9:83:49:3e:2c:48:
         ef:0e:ab:72:16:fb:87:8d:fb:cd:f0:31:d7:6c:77:1b:d4:cb:
         02:5f:da:07:f0:2e:c6:d1:49:9f:7a:1c:18:21:f5:a6:50:d4:
         73:2a:aa:71:80:50:45:f0:5e:37:a8:56:08:0e:98:ce:53:25:
         4a:44:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org