Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa
File:                     323830343a326465383a3a2f33322d3332203d3e20323635333131.roa (raw, json)
Hash identifier:          ZC8PqoGwmr+qdQJcsDwZwHmVk/PrkgznFSq8KSIkgqs=
Subject key identifier:   36:10:94:73:6D:52:A5:39:0B:89:90:92:CA:15:62:43:1D:7E:4F:93
Certificate issuer:       /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial:       FEB3B909D6828ECEC4DA56357AF5ACDB813158
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa
Signing time:             Thu 04 Apr 2024 16:23:04 +0000
ROA not before:           Thu 04 Apr 2024 16:18:04 +0000
ROA not after:            Thu 03 Apr 2025 16:23:04 +0000
asID:                     265311
IP address blocks:        2804:2de8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
                          rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 07:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:b3:b9:09:d6:82:8e:ce:c4:da:56:35:7a:f5:ac:db:81:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F24241E6982A012648294002B697451627DFF661
        Validity
            Not Before: Apr  4 16:18:04 2024 GMT
            Not After : Apr  3 16:23:04 2025 GMT
        Subject: CN=361094736D52A5390B899092CA1562431D7E4F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:2f:df:ba:ea:6e:d2:f2:90:1d:c7:12:1e:
                    9c:68:4f:06:9f:bc:a5:ad:86:af:d2:17:0e:ff:84:
                    cf:d1:92:c5:4e:4d:71:15:7e:a9:7b:df:a1:4a:02:
                    94:ff:95:a0:4e:5d:be:71:1e:fb:99:52:29:6c:ce:
                    64:ea:1b:af:eb:eb:04:7c:e2:00:41:db:b7:24:ea:
                    bf:87:52:2a:ed:bb:4b:e9:fc:de:59:e4:2b:40:dd:
                    03:29:f7:f4:34:41:47:08:e8:91:55:69:79:15:79:
                    6c:e8:2e:3e:91:d1:ac:f6:81:f8:f5:0f:3a:62:f3:
                    c9:07:80:28:53:2b:f0:aa:9d:5c:68:3d:e7:4d:5a:
                    52:22:02:55:73:54:bf:43:40:92:0b:37:40:b1:d9:
                    1c:55:21:a9:dd:23:d7:73:72:65:5a:a7:52:25:b0:
                    6c:f6:8c:7d:2d:19:72:6a:c0:6d:ef:e0:fc:56:f7:
                    74:dd:58:7a:a0:53:b3:42:5b:e1:12:cc:f9:b2:93:
                    fd:2e:84:5c:f0:ea:d3:e2:d2:53:75:6e:a3:9e:02:
                    1e:9d:aa:ea:3a:f5:63:11:33:43:99:bc:91:3b:42:
                    99:39:f5:bb:6f:67:d6:c5:4c:47:62:7d:cf:07:bc:
                    91:9d:e0:2c:78:66:89:80:e3:b7:43:4d:70:47:e2:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:10:94:73:6D:52:A5:39:0B:89:90:92:CA:15:62:43:1D:7E:4F:93
            X509v3 Authority Key Identifier:
                keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2de8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:26:55:ea:77:d2:e9:de:26:68:a5:2c:18:84:45:8e:09:f8:
         e3:72:f1:eb:7e:71:3d:9c:53:73:32:16:bb:07:83:19:2f:dc:
         ca:7c:fc:8c:9b:00:aa:a5:40:02:7d:c9:e0:e4:58:50:e2:dd:
         9c:99:36:02:6b:ef:d6:d9:46:06:e1:2f:3d:29:77:10:4c:1a:
         e2:d3:b9:6e:a1:6c:ba:8e:c0:63:05:6b:69:ee:51:b7:5f:74:
         8d:b1:aa:a4:50:10:6d:7a:32:d0:cd:02:09:4a:8a:e2:bc:b4:
         2b:c2:c7:46:0f:c6:c6:f9:fc:c5:1d:2f:98:f8:88:7b:c3:6d:
         ec:73:91:9c:3d:04:9c:05:87:63:9e:07:ce:44:79:fb:76:13:
         5c:6a:d0:2c:89:48:55:df:22:63:bf:3e:1b:24:d5:95:52:29:
         b5:3e:47:d6:52:1c:48:14:d4:25:65:11:b3:f6:42:8d:c1:2a:
         c9:68:83:ae:d2:cc:2b:60:82:9b:86:af:41:ac:23:4a:f9:35:
         6a:fc:a5:9a:7a:c1:8d:97:90:89:ab:7e:f9:5f:6e:40:1e:65:
         45:de:85:e6:d8:38:62:81:71:c8:08:54:a1:7d:94:c1:09:1d:
         40:e6:81:5c:21:11:be:cb:f7:43:24:26:a0:d8:13:84:ae:70:
         a6:1c:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:57 2024 by rpki-client on console-ams.rpki-client.org