Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa
File:                     323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa (raw, json)
Hash identifier:          loOT4uUrO9WjkdZXJ6f6E3hvioVdAAVCW+TRCMZSXxM=
Subject key identifier:   64:62:E1:24:E6:6F:64:B7:0A:5B:B1:D5:E4:FB:9F:AF:03:9D:87:BB
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       49B265E60BA5F2A8643E2305110B87B21D9BABCE
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:47 +0000
ROA not before:           Thu 04 Apr 2024 16:40:47 +0000
ROA not after:            Thu 03 Apr 2025 16:45:47 +0000
asID:                     266437
IP address blocks:        2804:37d0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b2:65:e6:0b:a5:f2:a8:64:3e:23:05:11:0b:87:b2:1d:9b:ab:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:47 2024 GMT
            Not After : Apr  3 16:45:47 2025 GMT
        Subject: CN=6462E124E66F64B70A5BB1D5E4FB9FAF039D87BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0b:f4:e7:b9:a3:e2:09:24:3d:fc:86:d1:1e:
                    c7:70:dc:75:c1:37:01:e6:69:e5:74:a4:9b:f0:c2:
                    55:06:64:6e:50:7b:95:d5:85:dd:c6:fb:11:11:63:
                    88:a0:2b:bc:c1:4f:df:f0:6b:80:2f:c2:9a:51:07:
                    bb:8e:52:03:15:e9:35:e9:68:4f:31:a4:dc:55:10:
                    65:cb:7f:c7:d5:3a:e3:c5:8b:37:09:11:3d:0e:ca:
                    7b:fd:7d:01:0d:d3:e3:23:d3:66:3f:f8:2b:70:71:
                    e4:09:7c:ca:15:0a:2b:a5:28:20:6d:15:32:1c:39:
                    85:02:f5:8e:22:8d:ec:ca:be:fa:29:be:42:29:e4:
                    27:4b:05:ff:5e:65:fa:24:57:66:50:ac:49:af:a5:
                    0b:7a:9b:df:2f:76:96:b4:ba:2c:4c:71:ca:68:fb:
                    a4:13:32:dd:0f:f1:f9:fc:81:17:9e:93:b2:83:65:
                    02:2b:a3:c7:dc:71:2d:78:17:9b:ec:07:df:ec:14:
                    b2:2f:ee:8b:b4:81:8d:88:96:06:7d:f1:e1:86:1c:
                    6e:9d:ec:9c:4b:2c:7c:33:01:3b:fd:9a:ee:df:e1:
                    28:56:e9:63:4e:8a:78:26:a8:fb:1c:90:0f:51:a1:
                    6c:a7:12:e1:c0:85:06:98:7b:3e:43:81:55:a5:bc:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:E1:24:E6:6F:64:B7:0A:5B:B1:D5:E4:FB:9F:AF:03:9D:87:BB
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a323030303a3a2f33362d3336203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:95:c9:cc:7d:aa:eb:aa:ae:f8:08:fe:2b:56:52:b2:77:6c:
         58:9d:54:ee:96:b9:3c:71:6a:e8:32:df:92:58:ba:89:fc:80:
         bd:8f:d9:c8:26:34:b4:66:77:60:bd:17:f7:e5:f2:16:24:96:
         05:46:b8:06:72:0e:0f:e1:83:86:ca:f3:ad:14:44:3d:af:3b:
         f1:96:d7:75:dc:47:4f:48:e2:cb:d1:e5:b3:75:e9:b1:72:87:
         2d:11:4e:c7:c2:61:62:78:36:8b:dc:84:f4:e0:9b:80:17:d7:
         c4:c2:9f:85:fd:1b:ac:46:7f:ea:25:4c:d6:7f:a0:89:21:2c:
         6f:44:9f:b5:e6:fa:3e:37:6b:9e:5e:65:2a:bf:a3:6f:e0:52:
         ff:4e:5d:20:86:61:93:2e:ba:54:51:cc:c8:ad:c3:1b:00:17:
         c0:12:93:4a:bc:e7:cf:31:99:34:b8:4b:08:25:d4:e4:a1:a4:
         9d:16:99:ac:a9:30:9c:e7:c7:c9:c7:31:5f:37:ba:97:08:e0:
         23:b2:5a:e7:c2:e1:0d:84:62:53:e9:9c:b5:6f:d5:37:26:a8:
         6f:49:ff:5a:10:20:4d:3a:c1:29:88:a4:1e:89:bc:f3:99:51:
         6e:a3:1f:88:22:26:ba:ac:3b:63:b5:d0:c4:74:ab:40:2f:37:
         b3:9f:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org