Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          bxaffWmmaDWZsGWMMaY2KCTO7qpIXWgcWySWNGT3cGw=
Subject key identifier:   6E:FC:47:1E:E3:0C:39:38:8F:BE:B5:40:9D:60:65:68:5E:18:CD:5F
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       7A59D85423BBC778AA19FD9CDE859F2120C66D07
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:48 +0000
ROA not before:           Thu 04 Apr 2024 16:40:48 +0000
ROA not after:            Thu 03 Apr 2025 16:45:48 +0000
asID:                     266437
IP address blocks:        2804:37d0:5001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:59:d8:54:23:bb:c7:78:aa:19:fd:9c:de:85:9f:21:20:c6:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:48 2024 GMT
            Not After : Apr  3 16:45:48 2025 GMT
        Subject: CN=6EFC471EE30C39388FBEB5409D6065685E18CD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:8e:43:15:70:4a:28:d3:82:24:b8:65:27:
                    95:d6:5d:93:01:96:38:b6:98:01:83:b5:86:da:32:
                    79:f9:6a:ae:d9:3a:2f:e3:ea:67:ad:f6:80:cf:50:
                    e1:b0:5d:15:54:47:69:77:63:fa:ae:7c:5f:b9:b7:
                    56:76:85:17:7f:aa:db:c1:cf:88:9f:22:48:d3:d3:
                    3b:2c:42:03:6e:5b:f0:85:ac:b5:0e:09:35:07:05:
                    21:a6:cd:52:84:81:95:ec:cc:49:f2:35:df:c9:24:
                    37:93:ea:a8:6a:e6:6b:95:59:89:b8:2b:39:c6:12:
                    93:36:79:3a:3b:0f:2d:3b:9c:db:67:c3:98:c4:17:
                    f7:6a:dd:13:be:ec:8d:af:2e:48:ad:f7:60:f9:ac:
                    7f:b5:cd:97:39:5a:34:2b:6f:88:c9:e9:e2:18:70:
                    04:9a:e4:27:33:93:73:dc:9a:11:e6:12:3c:18:4c:
                    10:cb:8f:3f:bd:54:73:f8:26:e8:1f:b0:c1:75:20:
                    e2:13:a2:ca:b5:42:d1:c6:e1:47:05:71:85:db:1a:
                    44:e8:70:7e:a0:0c:7f:0e:e4:54:e2:43:07:a4:83:
                    dc:c4:2c:74:6e:27:51:70:5f:ea:6e:b1:cf:e0:99:
                    7b:bf:9f:35:05:ae:51:2d:35:e7:ae:0c:e5:35:b5:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FC:47:1E:E3:0C:39:38:8F:BE:B5:40:9D:60:65:68:5E:18:CD:5F
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a353030313a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:5001::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:31:22:bb:d5:9a:fe:68:ad:e3:89:cb:b5:fd:e9:88:7b:
         09:b9:eb:3c:46:d6:6e:5e:ac:13:b8:3c:96:ca:e9:53:fb:92:
         f7:88:cf:c1:5a:05:cb:b5:ce:c9:72:db:d3:d5:bb:c6:29:fa:
         ca:ed:ad:56:10:3a:b9:56:18:aa:3b:f0:3c:51:1a:e2:5d:1b:
         83:9e:51:ae:04:97:8e:76:7a:c3:5e:b3:13:31:86:21:9c:f4:
         f5:fc:18:2b:88:25:6b:8e:f0:a6:61:8b:15:20:b5:34:26:1a:
         f3:97:bd:3b:34:5c:e7:10:5a:3d:6a:d5:b0:32:1e:f8:1d:78:
         67:94:7f:e7:42:61:f1:59:95:5d:de:66:9f:f7:26:46:a3:34:
         e5:e0:3f:7a:10:0c:74:eb:1c:c9:7d:07:4b:07:39:6b:cd:24:
         21:ae:19:ce:34:93:e4:1c:d9:d4:0c:fe:00:f8:77:cc:6c:88:
         13:72:76:0e:d4:f0:00:d3:4d:0e:31:5d:2b:cd:82:dd:35:b0:
         c3:72:e3:ad:8a:57:59:5b:ef:67:20:74:93:b2:09:57:68:91:
         1e:46:b5:cb:db:32:7a:45:aa:a7:33:43:d8:68:d1:71:5f:b7:
         1c:e1:02:fe:f0:1d:57:f3:bb:f0:cd:f9:d4:e4:42:40:99:7a:
         09:80:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org