Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34382d3438203d3e20323636343337.roa
File:                     323830343a333764303a373030303a3a2f34382d3438203d3e20323636343337.roa (raw, json)
Hash identifier:          uuvVx51up37ImNgTEu5ejaJZMbrwri8TAkR+X6F3Nqs=
Subject key identifier:   47:21:87:2F:27:F7:96:CF:48:07:5B:BE:D5:14:41:A3:C9:38:DD:AC
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       4D9AEF928CAA8E5DF84E3E358E3E248B5DAA26E9
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34382d3438203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:46 +0000
ROA not before:           Thu 04 Apr 2024 16:40:46 +0000
ROA not after:            Thu 03 Apr 2025 16:45:46 +0000
asID:                     266437
IP address blocks:        2804:37d0:7000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:9a:ef:92:8c:aa:8e:5d:f8:4e:3e:35:8e:3e:24:8b:5d:aa:26:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:46 2024 GMT
            Not After : Apr  3 16:45:46 2025 GMT
        Subject: CN=4721872F27F796CF48075BBED51441A3C938DDAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:45:9f:21:13:ea:7f:53:2d:f4:09:fc:fb:c5:
                    bb:8e:62:cf:41:b3:49:96:77:80:99:a2:65:1f:a3:
                    9e:11:2b:60:08:38:b4:70:52:d0:e7:20:bd:fa:ea:
                    58:33:1d:6b:43:59:6d:d3:6f:7f:78:af:6c:06:89:
                    bf:43:51:d8:48:25:39:9e:a5:a4:f6:55:d2:3b:09:
                    c9:2c:13:fc:4d:fb:cd:b9:e4:ec:1c:01:f6:02:5c:
                    cf:c9:aa:d8:da:71:38:9e:46:69:1b:37:b5:15:25:
                    b2:12:f1:81:bb:06:08:d3:1c:6c:b3:6d:2a:a2:f8:
                    2a:bb:41:aa:58:8d:b9:73:00:32:f7:a3:b0:67:44:
                    d0:0b:94:dd:bd:4c:0e:81:41:c3:ed:a2:5b:09:fb:
                    42:fe:0d:78:1a:17:bf:08:34:4e:e9:d0:7a:be:13:
                    6b:89:35:77:91:89:67:d2:67:94:d9:94:19:ad:7f:
                    89:98:df:31:87:04:2e:47:a9:af:50:65:b9:09:60:
                    b7:ca:7c:6e:eb:3b:73:1e:44:db:c8:88:d4:7e:26:
                    29:ff:73:34:ea:8b:52:c8:e3:84:98:5b:67:e7:59:
                    b6:d8:28:38:49:33:5f:03:f8:50:ed:68:71:8d:7f:
                    99:ed:e1:eb:e6:b9:23:15:0b:e9:1b:dc:8c:f2:59:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:21:87:2F:27:F7:96:CF:48:07:5B:BE:D5:14:41:A3:C9:38:DD:AC
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a373030303a3a2f34382d3438203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:dc:83:91:1f:ae:2d:5d:28:88:61:b0:e0:e0:71:a3:92:
         f6:10:d6:95:dc:c5:28:b4:57:07:2e:94:ad:3b:fb:a7:7e:2a:
         3a:c1:04:4e:81:a7:83:b7:98:86:31:4a:a1:d6:9e:5e:77:88:
         76:d1:15:eb:d0:74:87:ef:e9:bf:6c:3c:77:89:8c:92:ed:91:
         b1:bc:c4:90:7d:f2:7a:4c:81:c0:c5:20:48:02:92:a3:fe:87:
         e2:36:00:5d:d1:ff:48:a9:ce:3e:6c:1c:da:37:60:12:d1:02:
         f1:b2:71:ab:23:1e:cb:4d:07:01:8e:8a:78:10:1a:fb:1f:30:
         42:34:b8:5d:6d:5e:6a:df:9b:2d:a9:ab:6d:94:fe:60:5a:04:
         e6:f3:b5:2a:92:91:d8:5e:d7:6a:c7:b1:2d:bc:19:c1:ce:b7:
         a7:ec:be:50:1c:6c:e9:e7:54:bf:0c:31:4e:71:76:53:24:8b:
         63:6c:15:ff:38:e7:b7:00:39:a2:28:b5:c0:a1:fc:09:2c:aa:
         03:c1:08:fc:67:b2:d5:4e:a8:ce:4a:ef:ef:92:ea:24:a6:1e:
         bd:c6:ef:63:2e:4e:1c:8d:bf:2a:68:1e:f4:ff:3c:a9:5f:e0:
         cf:94:e2:8d:b6:ed:9d:e4:38:27:d5:2e:94:1b:95:d8:97:1c:
         99:51:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org