Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e2033333536.roa
File:                     323830343a333831303a3a2f33322d313238203d3e2033333536.roa (raw, json)
Hash identifier:          xmRyy+NwZRfjkwNkNEmkOB4s8c5tEFEoFTfStC9x03Y=
Subject key identifier:   FC:5F:3B:22:5B:4D:F8:17:92:58:AE:5C:08:AA:19:1E:75:67:8F:07
Certificate issuer:       /CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
Certificate serial:       0271A2F082AB9B43408F0E87D0CC48B530B1CB51
Authority key identifier: C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e2033333536.roa
Signing time:             Fri 05 Apr 2024 01:03:58 +0000
ROA not before:           Fri 05 Apr 2024 00:58:58 +0000
ROA not after:            Fri 04 Apr 2025 01:03:58 +0000
asID:                     3356
IP address blocks:        2804:3810::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl
                          rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 03 May 2024 03:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:71:a2:f0:82:ab:9b:43:40:8f:0e:87:d0:cc:48:b5:30:b1:cb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6515BA471C9733A2EE467323C9F6EE88BE098A6
        Validity
            Not Before: Apr  5 00:58:58 2024 GMT
            Not After : Apr  4 01:03:58 2025 GMT
        Subject: CN=FC5F3B225B4DF8179258AE5C08AA191E75678F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:44:0c:3a:ef:17:cb:d5:a5:a9:08:37:b1:66:
                    39:40:03:31:6c:dc:67:41:17:95:11:87:bb:17:01:
                    3b:34:d5:45:fe:27:a9:f9:73:12:d6:cc:6f:82:1d:
                    8e:ac:e0:d8:4c:c9:e8:ba:7b:cb:79:56:64:77:f3:
                    7d:bf:65:1c:6f:f7:a7:27:bf:fb:83:b1:34:1d:da:
                    41:34:de:3d:76:4c:c0:3f:c5:23:4d:f3:3d:c0:3d:
                    bd:06:32:00:3c:1a:20:d6:cf:ef:21:1a:c9:e5:d3:
                    82:6a:b5:67:27:4e:fa:f0:e9:3e:69:3e:d7:34:55:
                    4d:44:1d:62:4f:66:bf:42:12:86:6f:5a:5e:36:61:
                    16:c0:14:45:98:b0:24:75:65:98:35:ca:66:bd:11:
                    6a:e0:d7:19:a2:3f:75:4a:e3:05:a3:1f:9a:52:3d:
                    f7:8e:c0:6e:5a:2b:f1:de:aa:ad:a0:06:a3:e9:5a:
                    83:6a:b7:69:e6:87:c7:84:bd:50:6f:79:bc:25:78:
                    11:a0:56:32:f3:bc:aa:8f:08:03:b4:70:ab:d7:e6:
                    4c:47:51:b0:93:9c:f0:18:24:9a:4a:e4:48:72:3f:
                    fd:08:c7:e9:74:97:00:36:df:68:2c:80:7d:75:4d:
                    ea:33:be:e8:c1:8b:59:9a:6f:40:d0:d8:75:a3:22:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:3B:22:5B:4D:F8:17:92:58:AE:5C:08:AA:19:1E:75:67:8F:07
            X509v3 Authority Key Identifier:
                keyid:C6:51:5B:A4:71:C9:73:3A:2E:E4:67:32:3C:9F:6E:E8:8B:E0:98:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6515BA471C9733A2EE467323C9F6EE88BE098A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/1/323830343a333831303a3a2f33322d313238203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:ab:93:cf:42:fd:c7:be:d7:84:ef:cd:4d:ab:45:b9:d3:21:
         1b:7f:83:ae:0b:7b:30:3a:c5:be:67:5e:3b:e2:9d:40:ef:3a:
         9a:c9:c7:e3:5e:7a:01:1b:d9:5f:2a:50:8f:99:08:e4:14:5d:
         b6:55:25:43:ff:ec:0a:dc:f2:71:33:c8:13:df:ce:86:36:a2:
         79:f7:bf:07:93:5d:ef:68:25:19:73:73:66:b4:e8:28:91:4e:
         c6:b4:67:3c:8e:64:a4:ba:af:1b:ca:94:8c:ee:0c:4a:7e:b5:
         16:0f:d2:ba:85:ae:3a:ce:51:5a:c5:b5:59:2f:57:61:ef:1a:
         24:75:c0:23:c1:55:34:87:6d:aa:0d:ab:d8:05:9c:21:ae:eb:
         e7:b0:03:e0:ca:ae:5e:b0:47:12:de:11:be:a3:52:51:92:0a:
         ba:a2:7e:55:c3:d7:08:16:7a:13:fe:9c:b3:80:66:00:05:a6:
         c9:27:a7:08:d8:81:e1:2b:9e:4d:3b:19:60:56:d4:5d:d7:34:
         a2:34:0b:3c:e8:7b:66:dd:6a:70:65:9f:75:cb:09:83:c6:f5:
         01:f2:11:d7:f0:40:10:67:32:38:4b:d4:58:40:db:65:1d:b1:
         50:48:eb:bb:98:a4:c0:27:d5:54:8f:a9:be:46:bd:ae:83:b4:
         5d:a5:1c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:29 2024 by rpki-client on console-fra.rpki-client.org