Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          t3IVT1CHXXLg3fDi+dxtK+/09CRrQDm+mQS+42UYepM=
Subject key identifier:   02:6F:03:94:76:08:40:B2:7F:4C:A4:00:6B:11:B0:FF:B4:DC:52:57
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       61E7711565628A29CB1F83D3B379F74EDAA8084F
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:45 +0000
ROA not before:           Thu 04 Apr 2024 16:40:45 +0000
ROA not after:            Thu 03 Apr 2025 16:45:45 +0000
asID:                     266437
IP address blocks:        2804:37d0:5000::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e7:71:15:65:62:8a:29:cb:1f:83:d3:b3:79:f7:4e:da:a8:08:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:45 2024 GMT
            Not After : Apr  3 16:45:45 2025 GMT
        Subject: CN=026F0394760840B27F4CA4006B11B0FFB4DC5257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:63:00:23:75:b9:31:3e:a5:1f:a0:64:49:
                    e1:c6:7d:9f:2e:16:00:48:f4:04:c3:48:a9:0b:e2:
                    0b:c3:f8:19:ae:9c:9d:90:9a:07:80:60:6a:f6:45:
                    01:6d:0f:96:18:98:23:25:35:c1:33:16:84:8f:79:
                    68:38:d0:02:d9:9a:83:7d:10:a7:39:28:97:c7:95:
                    a9:f7:e6:80:10:e6:65:e6:b6:9b:80:17:97:3d:84:
                    53:7c:53:92:55:db:32:e3:72:3b:30:1d:93:85:2f:
                    10:8b:8e:56:6d:cc:71:a1:21:c8:80:c8:3f:9c:31:
                    3d:08:d1:2e:0b:e8:ca:36:06:87:d7:bc:6b:28:91:
                    65:77:4d:59:21:d0:df:dc:84:18:ce:cf:bc:db:cd:
                    99:5e:41:ec:89:0a:ce:12:90:43:31:e9:f5:71:5e:
                    28:42:88:be:6d:13:de:d4:7a:95:08:37:82:eb:08:
                    46:76:f9:e7:1d:dd:bc:66:8a:9b:8e:b5:9b:50:a8:
                    41:a5:92:12:53:e8:12:bf:09:cd:a4:d9:f1:9c:f9:
                    cf:92:74:46:d3:c1:0c:d6:cc:15:cd:2e:61:65:33:
                    a3:9e:f1:fb:c1:d2:c4:c5:65:63:69:94:de:4f:3a:
                    cc:a3:21:5f:9f:70:93:d8:c1:25:b1:c4:d8:9e:21:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6F:03:94:76:08:40:B2:7F:4C:A4:00:6B:11:B0:FF:B4:DC:52:57
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5000::/46

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:ed:0d:5a:e7:1c:72:87:55:97:94:01:07:81:cd:3b:62:
         70:75:80:5a:75:25:01:bf:92:a6:a8:42:d6:d4:77:27:d1:f5:
         5b:24:16:ac:e3:2b:70:92:d1:72:b4:98:09:5a:bd:3c:f9:09:
         98:05:22:88:d4:3a:8c:93:18:96:0d:0f:e0:ea:8e:6e:29:2d:
         29:6a:b5:24:dc:ad:84:7e:60:29:06:8d:b7:50:bb:ab:b9:58:
         41:ce:7c:cf:ac:df:6a:61:2b:67:eb:e4:99:25:21:0f:75:bb:
         bb:78:d8:f7:78:c0:7f:7b:24:98:a1:3a:56:f4:93:3c:70:46:
         60:40:09:46:36:68:28:82:ba:cf:6c:a2:84:ce:03:9c:22:ca:
         d4:7a:43:8e:c6:69:45:93:bd:75:97:42:93:e7:db:d7:a7:1b:
         71:a0:f1:30:71:27:4f:c6:4f:27:b2:41:4d:0a:1a:52:fc:82:
         27:e6:dc:4b:33:f1:ba:d7:a1:1d:4d:3f:44:f7:00:dc:08:c2:
         d7:08:19:20:3f:bc:ce:eb:f9:36:15:ea:4f:85:5e:d5:08:fe:
         54:eb:94:02:ec:92:4f:ba:9f:f2:8d:80:d1:32:56:21:72:c6:
         f9:24:8c:bf:ca:82:99:28:15:ad:98:4f:a3:9d:f1:53:bf:61:
         5b:57:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org