Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa
File:                     323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa (raw, json)
Hash identifier:          xrCzYquvUYTg4Ig3svtxdc2EZS5WGmInkngqEpWwV/s=
Subject key identifier:   D2:51:1B:8B:80:DC:1C:75:FA:C6:D9:9F:70:E4:70:26:15:DB:A8:C9
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       5ADB6D1BC837FD250D101D1EDE6C34153ECCB2E1
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:47 +0000
ROA not before:           Thu 04 Apr 2024 16:40:47 +0000
ROA not after:            Thu 03 Apr 2025 16:45:47 +0000
asID:                     266437
IP address blocks:        2804:37d0:6800::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:db:6d:1b:c8:37:fd:25:0d:10:1d:1e:de:6c:34:15:3e:cc:b2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:47 2024 GMT
            Not After : Apr  3 16:45:47 2025 GMT
        Subject: CN=D2511B8B80DC1C75FAC6D99F70E4702615DBA8C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:b0:57:f6:01:64:1e:03:8d:2e:9d:b9:0e:
                    44:52:d7:c2:68:6f:1d:50:57:51:0a:f9:1d:58:ed:
                    ec:2f:38:c7:d6:96:9b:4b:1c:aa:67:d0:85:ec:bd:
                    87:b0:3a:92:b4:48:11:a0:4c:8c:d3:ab:17:51:3d:
                    53:f3:3b:02:e6:7f:db:f5:d6:80:56:f1:30:f4:73:
                    58:df:ab:3b:a4:9c:13:83:51:ee:ee:7c:d0:7b:b7:
                    db:ca:0b:a6:dd:1f:71:5b:81:ef:be:d7:dd:ac:51:
                    d8:a2:9d:3e:3a:7f:54:a3:c4:c8:0e:9c:56:ca:a7:
                    c0:09:29:08:7c:36:a0:de:d1:36:e1:94:21:95:b8:
                    cc:54:63:0a:a3:71:98:d1:41:ab:48:9e:8c:1f:b9:
                    cc:a9:3f:3b:f2:04:1a:63:78:13:c1:5a:db:79:d6:
                    58:ed:02:48:98:21:b7:e6:7a:a6:de:04:ca:bf:e8:
                    02:6d:9e:fd:71:bc:b5:7c:99:d1:d2:c6:49:c9:bb:
                    a6:6a:38:08:05:42:48:a5:6d:5e:91:f9:6c:e7:dd:
                    2a:da:a0:21:72:56:fc:f1:5b:e1:30:b3:b1:65:12:
                    d0:89:a9:e9:bb:cd:7c:1a:ea:17:1f:69:23:bc:94:
                    62:a6:d1:92:ef:d6:0d:ec:ef:08:e6:cf:60:09:b5:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:1B:8B:80:DC:1C:75:FA:C6:D9:9F:70:E4:70:26:15:DB:A8:C9
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a363830303a3a2f33372d3337203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:6800::/37

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:b0:4b:35:c2:68:03:e7:48:d2:77:81:17:fa:7f:e4:05:
         05:33:72:33:30:a8:69:39:d1:1d:d9:93:95:27:71:5e:c9:59:
         4d:c2:ea:95:9e:c5:8e:5f:09:62:73:c1:c4:e0:4f:78:a0:b4:
         0f:e0:70:28:82:fd:0f:9b:d3:be:0f:57:de:32:c9:38:64:ce:
         f3:11:cf:85:6a:5f:5a:1b:4f:49:be:75:e3:85:73:23:0f:1d:
         6e:62:c7:c8:eb:74:f9:bb:17:47:40:1d:57:71:70:77:f8:ad:
         e8:64:93:88:45:f5:30:c7:5f:32:dd:de:a3:6f:c8:35:e5:1d:
         93:83:90:02:5f:24:ba:4e:d9:a1:eb:f4:81:43:e6:4f:1e:8b:
         46:39:3f:e4:8c:c1:0b:35:b4:ca:2e:7e:9c:69:c5:6c:fa:9a:
         b2:a7:d6:16:d3:e3:31:86:22:1c:cc:6b:07:ff:bb:74:64:27:
         c3:ff:bd:78:d5:f7:43:72:d2:88:4f:29:04:c8:c9:f6:5c:a6:
         ff:78:ca:4d:9c:fc:50:62:e4:c4:63:0f:d0:80:4a:12:26:ce:
         df:75:9e:31:73:5c:39:e2:8c:2d:19:13:da:82:06:d0:73:30:
         c3:31:e9:41:2d:ad:35:46:f2:f5:03:7c:3c:62:4e:06:af:0c:
         99:36:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:01 2024 by rpki-client on console-ams.rpki-client.org