Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f34362d3436203d3e20323636343337.roa
File:                     323830343a333764303a3a2f34362d3436203d3e20323636343337.roa (raw, json)
Hash identifier:          ryn8rhovgCin5d9rfCEbeiI8NCwvSKN1mgbLm29H7RU=
Subject key identifier:   4E:F8:2B:F4:23:8C:09:6F:EC:48:00:EF:64:78:83:65:E4:C0:EB:9D
Certificate issuer:       /CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
Certificate serial:       44E36B785D73FD73C944151B47EB01B885CF0A18
Authority key identifier: 1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f34362d3436203d3e20323636343337.roa
Signing time:             Thu 04 Apr 2024 16:45:45 +0000
ROA not before:           Thu 04 Apr 2024 16:40:45 +0000
ROA not after:            Thu 03 Apr 2025 16:45:45 +0000
asID:                     266437
IP address blocks:        2804:37d0::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl
                          rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e3:6b:78:5d:73:fd:73:c9:44:15:1b:47:eb:01:b8:85:cf:0a:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CB2152A8F44BC0B30650B200D8A3BA673D374FD
        Validity
            Not Before: Apr  4 16:40:45 2024 GMT
            Not After : Apr  3 16:45:45 2025 GMT
        Subject: CN=4EF82BF4238C096FEC4800EF64788365E4C0EB9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7c:76:d1:84:f5:62:8c:7d:15:43:6c:9f:ef:
                    67:ea:9e:69:94:eb:9d:ee:67:24:d2:28:5c:cc:be:
                    38:7b:31:a6:94:b9:43:45:10:e4:67:20:a0:a0:54:
                    d6:99:e4:9f:9b:82:2b:14:b4:03:ad:28:90:8a:55:
                    a6:14:ff:2a:88:39:64:d0:59:53:57:1a:75:82:5c:
                    db:fe:bf:d2:b0:79:44:32:4e:1c:66:c7:69:2e:89:
                    fa:97:b3:dd:e7:ea:5b:2f:1d:32:11:35:c3:f2:d6:
                    b6:a8:ff:18:3e:54:93:6e:22:77:62:f4:31:3d:c8:
                    41:dd:20:97:e6:9b:9f:cc:b3:6a:ed:6a:95:26:5b:
                    f0:81:29:8d:c6:a1:d0:9d:5a:33:51:6d:c4:95:aa:
                    f5:a3:1f:dc:01:34:19:ab:df:0f:01:c6:53:3a:31:
                    69:40:3e:e8:fa:4f:73:c3:f0:a6:26:78:ad:35:c7:
                    b7:33:54:02:73:33:1f:a9:68:00:01:61:ef:65:8a:
                    17:87:c1:5b:63:1e:d0:29:5f:5f:d9:07:93:ca:e5:
                    15:6a:93:b7:24:93:98:88:7d:4c:6e:68:77:c7:ae:
                    56:23:b4:bf:c1:0f:5d:ab:83:5d:e3:20:6b:9c:3c:
                    fe:7b:ae:d1:c3:22:2e:84:9d:39:7e:a9:3d:c8:74:
                    25:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F8:2B:F4:23:8C:09:6F:EC:48:00:EF:64:78:83:65:E4:C0:EB:9D
            X509v3 Authority Key Identifier:
                keyid:1C:B2:15:2A:8F:44:BC:0B:30:65:0B:20:0D:8A:3B:A6:73:D3:74:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CB2152A8F44BC0B30650B200D8A3BA673D374FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/1/323830343a333764303a3a2f34362d3436203d3e20323636343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37d0::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:a2:93:2a:bc:27:f9:45:a7:da:a9:d3:82:84:93:34:de:7f:
         45:9a:ab:23:b1:88:f1:5d:c4:fd:39:d8:46:06:b4:a8:92:9c:
         4b:1c:68:a9:5d:c6:af:e7:f4:0f:87:ad:f0:09:e5:11:20:01:
         b7:61:f2:2b:ec:31:43:53:48:db:c6:f1:ca:c3:62:12:3c:2e:
         94:91:72:d1:60:81:6f:26:c0:0a:c1:0a:9a:32:ca:b4:80:d7:
         4b:04:16:69:e9:70:02:c1:8c:76:c3:97:37:90:16:3a:d2:5b:
         f8:90:8e:7b:02:5e:0b:85:51:91:af:cb:2a:ba:6a:83:73:33:
         35:82:eb:06:04:a8:76:2a:dc:06:2e:3b:3a:48:40:fb:80:67:
         2e:5a:d9:12:6b:93:ab:6a:b1:b7:89:08:b1:7b:5f:b5:9e:9f:
         10:ce:f3:bc:04:fe:94:85:f1:19:62:fe:97:37:26:b8:3d:b3:
         ee:56:ce:1d:a1:2f:f8:6e:89:8a:63:5a:27:2f:d6:7f:ec:16:
         b5:2f:fa:a8:cc:1d:cf:3a:36:2d:f4:91:b9:da:fa:44:56:22:
         d3:dc:5f:1f:ad:c3:d1:cf:a2:96:3b:82:7a:df:b4:79:cf:a1:
         75:58:4a:53:dd:0c:c0:9b:67:35:90:b1:23:50:b2:27:34:46:
         18:2f:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:50 2024 by rpki-client on console-fra.rpki-client.org