Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          bk8tg/Sw7SrfoE0L4Lo41/FkdGxkXldhlVsO1vYj0Co=
Subject key identifier:   94:11:C6:0F:74:3F:05:BA:58:F7:9B:5C:36:B1:29:40:A1:8E:60:2E
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       6FC552DF692E982DD037171935F6C182EF2BB198
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:48 +0000
ROA not before:           Thu 04 Apr 2024 16:40:48 +0000
ROA not after:            Thu 03 Apr 2025 16:45:48 +0000
asID:                     266437
IP address blocks:        2804:37d0:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c5:52:df:69:2e:98:2d:d0:37:17:19:35:f6:c1:82:ef:2b:b1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:48 2024 GMT
            Not After : Apr  3 16:45:48 2025 GMT
        Subject: CN=9411C60F743F05BA58F79B5C36B12940A18E602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:86:2f:9d:a2:a4:84:e6:8f:78:0c:82:5a:
                    46:2e:8d:4a:a7:81:c8:32:f6:6b:27:f5:67:2e:f3:
                    e0:fe:d8:53:5b:7d:b5:76:e8:60:eb:9c:0a:7d:63:
                    f9:48:6a:dd:5b:86:32:2b:3d:db:07:47:bc:59:d6:
                    f8:4b:12:3c:d4:ae:c3:05:ee:20:2a:51:35:b3:10:
                    b4:b8:8e:26:24:20:38:91:e0:bc:e2:34:34:c5:1d:
                    fa:4e:83:92:4f:42:57:f4:f8:33:9b:22:3c:4a:db:
                    7d:31:f5:52:8c:b0:4d:fa:25:5d:3c:e0:34:92:0d:
                    cb:33:51:12:dd:73:94:5f:74:70:bb:76:18:03:b6:
                    7f:2b:44:0d:bd:b0:0d:39:0a:c1:dc:85:96:6c:f9:
                    44:2f:9f:8f:90:07:b7:fa:f5:d9:6a:2e:b2:2a:b2:
                    f2:84:33:47:f2:0a:53:9a:9e:55:49:f2:c3:4c:88:
                    f6:ee:79:05:35:11:35:c4:69:83:2f:d4:71:15:0f:
                    f8:5a:01:c5:18:da:ff:eb:af:b7:81:0c:85:65:47:
                    e2:52:bf:3f:2a:3c:76:d2:1d:98:49:ce:53:2c:ac:
                    8c:55:df:44:37:06:b9:fc:b5:6e:e4:04:a0:d8:da:
                    e0:07:e0:01:f5:c4:68:a7:01:eb:c0:f4:68:fd:0f:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:C6:0F:74:3F:05:BA:58:F7:9B:5C:36:B1:29:40:A1:8E:60:2E
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a333a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:39:cb:03:76:32:8e:25:c7:2e:14:bd:26:4f:b4:5e:0f:85:
         ee:67:be:9d:c4:18:f5:2d:9a:64:e4:b8:7b:0d:a6:be:ac:be:
         99:bc:94:62:1b:97:19:9b:bd:3d:91:a6:a3:5a:9d:36:ed:ce:
         a5:61:f6:d9:54:f3:24:b6:97:17:68:ef:d2:04:82:cb:67:f8:
         2b:51:3a:c3:0a:46:fc:a5:34:59:66:c9:18:03:51:a4:13:7d:
         57:e9:cf:82:90:0c:b1:bc:7d:45:0a:a2:3f:de:4f:e7:73:b5:
         9b:e8:6c:bc:1f:4a:01:48:82:0e:6f:e4:d2:28:3d:c6:63:a9:
         29:09:d4:5a:50:5a:e1:7a:e1:c9:c6:f3:aa:50:4b:81:ff:2c:
         24:53:e7:76:c9:92:dc:51:c6:e3:36:dd:82:f8:b3:bb:85:99:
         04:47:bc:19:84:f7:77:18:c4:46:7f:d1:a4:59:3a:5c:00:d8:
         3a:96:f8:fd:af:47:40:f1:ee:79:06:b8:aa:5a:5e:9a:77:f4:
         b2:27:32:3f:68:a6:b7:b9:7e:69:c1:e9:f6:6f:b3:3a:f0:4a:
         07:2d:ab:e2:20:a8:b5:85:b4:ba:c2:2b:5c:5b:b7:9e:b1:44:
         13:ed:b1:64:d5:a7:0d:1a:e0:02:19:62:74:46:48:e9:e3:3d:
         6f:55:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org