Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
File:                     323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa (raw, json)
Hash identifier:          QxQUgqCzEMPd+qCrelfoUOhGzwnLSDX0w1293z19YuI=
Subject key identifier:   A8:38:D5:0B:E0:66:EA:45:7E:BF:CE:11:D5:01:31:58:23:00:E4:F5
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       DA69715D3999B6D7F862CB8B51CA686D014995
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:05 +0000
ROA not before:           Thu 04 Apr 2024 16:18:05 +0000
ROA not after:            Thu 03 Apr 2025 16:23:05 +0000
asID:                     265311
IP address blocks:        2804:2de8:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            da:69:71:5d:39:99:b6:d7:f8:62:cb:8b:51:ca:68:6d:01:49:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:05 2024 GMT
            Not After : Apr  3 16:23:05 2025 GMT
        Subject: CN=A838D50BE066EA457EBFCE11D50131582300E4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:08:82:e0:3e:93:e0:8c:a2:8e:46:32:60:e3:
                    88:74:5f:f3:4b:fb:e9:f2:25:bf:c9:98:4d:16:85:
                    9d:bb:56:a6:97:fa:ec:20:e6:31:d8:d8:d8:64:2f:
                    ea:11:2e:cf:3f:3c:c8:ff:fa:44:10:47:e3:fa:71:
                    cc:79:aa:d5:da:66:cf:98:62:2e:a1:50:37:ee:1b:
                    c9:84:3b:57:75:52:6a:3c:7f:72:f9:67:7c:ba:33:
                    a5:ed:01:e9:96:59:ac:9a:95:12:fe:ee:2e:a0:6b:
                    14:ea:68:c8:ca:ea:ea:ea:b9:98:7f:25:4c:00:35:
                    7f:32:ce:b8:2b:60:95:7e:cc:19:0e:31:5a:b6:43:
                    13:18:f8:a8:b0:3f:6f:03:5b:ed:fc:e2:e6:0b:36:
                    bd:36:2b:e5:46:34:56:8a:c2:4e:30:55:10:c6:bb:
                    a8:03:c8:ac:76:ff:77:11:8a:46:9d:4e:d9:22:fa:
                    3c:02:1f:91:59:55:4b:dc:b4:23:cb:98:be:4a:78:
                    73:72:9c:f5:15:bc:86:89:f4:1b:fa:44:c4:2d:e0:
                    bf:11:f1:60:b6:6d:20:ab:70:f5:94:3d:1d:b3:e4:
                    0b:36:fc:98:59:30:76:7d:b0:32:dc:f0:a3:af:7c:
                    eb:fe:f6:d9:8b:74:4f:73:63:13:63:96:c3:7c:f4:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:38:D5:0B:E0:66:EA:45:7E:BF:CE:11:D5:01:31:58:23:00:E4:F5
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a383030303a3a2f33332d3333203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:da:f8:de:6a:14:b7:50:f4:4b:18:d1:04:20:68:f5:97:
         27:8e:42:9c:f8:70:27:57:bb:fd:44:e0:1b:17:bc:fa:55:4f:
         d5:1d:88:86:3e:71:cd:cc:3d:33:f4:a7:21:19:e2:6d:87:b4:
         3c:c6:c0:1a:a6:59:77:2e:1d:23:b9:f9:8c:8f:68:38:99:85:
         25:5f:8c:36:87:62:e2:b4:83:80:e7:09:9b:d9:03:8c:4f:e1:
         c2:31:4e:3b:b0:60:92:2a:ec:3f:49:2a:72:ac:5e:f4:fa:13:
         d0:69:13:99:06:34:df:5d:64:8b:85:8d:9d:59:50:35:23:9e:
         e8:8e:00:56:d2:54:e7:fe:d2:e5:70:1c:4b:d9:89:26:78:36:
         82:0a:78:d6:d1:6f:b1:ef:f9:09:13:98:db:62:18:ab:c2:e7:
         c4:03:e1:9c:02:92:c8:fd:92:92:79:78:f4:6c:41:77:7d:93:
         5b:71:05:65:5d:3c:e9:60:3f:69:d7:d9:47:70:94:e3:3b:af:
         6e:aa:f5:5c:db:f3:61:d0:a6:ca:7f:94:34:d6:12:13:a9:02:
         1a:b7:a7:d3:12:b9:ef:b5:56:60:00:14:10:40:d4:6e:98:36:
         3a:14:d6:2c:0d:d8:1f:15:1d:1a:0b:43:c1:63:25:5e:20:98:
         17:a4:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org