Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa
File:                     323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa (raw, json)
Hash identifier:          aoqXBqhTB80L0DIwvsTXsptRVNbtHNkkiJVb+kQdAI0=
Subject key identifier:   D3:6E:E5:2A:A1:2E:64:CF:D8:90:52:34:9C:76:30:12:4C:D0:6D:58
Certificate issuer:       /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial:       31802FDB078DFBF3E7B15130FD831A39C42D1C06
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa
Signing time:             Fri 20 Sep 2024 16:27:40 +0000
ROA not before:           Fri 20 Sep 2024 16:22:40 +0000
ROA not after:            Fri 19 Sep 2025 16:27:40 +0000
asID:                     262296
IP address blocks:        2804:a84:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:80:2f:db:07:8d:fb:f3:e7:b1:51:30:fd:83:1a:39:c4:2d:1c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
        Validity
            Not Before: Sep 20 16:22:40 2024 GMT
            Not After : Sep 19 16:27:40 2025 GMT
        Subject: CN=D36EE52AA12E64CFD89052349C7630124CD06D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:85:a7:88:bd:d6:2a:71:50:7f:b5:a0:46:
                    2a:0e:d7:35:d5:40:9a:f3:69:f0:e6:2d:85:50:85:
                    ed:3c:77:4d:09:20:9f:a0:b1:3c:b9:64:89:50:d4:
                    27:78:f0:df:35:74:ee:1a:bd:11:fc:68:60:7e:98:
                    30:f9:d7:bb:b8:db:3c:82:e1:74:b4:1b:44:63:98:
                    61:53:1e:98:2f:1f:c1:77:13:b6:63:e3:e0:92:16:
                    5e:b3:15:39:5f:ef:ed:07:e4:f6:d8:d0:6a:45:f1:
                    06:3b:c8:31:20:d1:fa:6a:5f:27:e7:88:e1:2f:fb:
                    11:e6:43:3d:c5:ae:e7:e7:6e:fb:da:a8:f5:c4:86:
                    51:c8:6f:6b:8b:86:5b:15:0f:3e:af:8a:b4:71:a3:
                    85:0a:ef:1a:7c:c7:8f:fe:37:56:b5:29:98:f3:23:
                    37:36:58:54:78:09:73:79:8d:3b:1b:2a:c9:31:f3:
                    69:2e:5a:e5:ee:68:06:84:66:eb:40:c7:1a:f0:da:
                    b2:97:49:79:ae:01:50:02:6e:49:63:76:6b:71:34:
                    bc:a9:d7:e6:bf:d3:02:a1:3b:74:af:cb:f7:7f:d5:
                    f6:1b:b5:a2:5e:38:62:88:e1:ad:9b:88:bc:01:2f:
                    ec:7f:72:2c:e6:2d:66:c4:38:7c:6d:95:03:71:e9:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6E:E5:2A:A1:2E:64:CF:D8:90:52:34:9C:76:30:12:4C:D0:6D:58
            X509v3 Authority Key Identifier:
                keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/323830343a6138343a383030303a3a2f34382d3438203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a84:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:81:c6:a0:23:02:07:15:be:8b:6f:ff:39:f8:f1:50:1f:12:
         38:7a:ce:d6:28:38:2d:9e:ef:18:4a:22:98:23:76:e5:13:9d:
         42:37:fa:2e:4d:71:e2:ea:30:20:39:46:52:21:c6:0e:fa:dd:
         5e:74:4a:92:bc:47:72:56:10:ab:b3:a2:92:91:88:8e:f7:2a:
         13:a4:79:40:e7:80:98:e4:fb:7c:e6:d7:c8:97:56:1b:60:df:
         f9:60:05:08:a8:49:87:b8:9b:8f:5a:45:63:22:26:50:0e:4c:
         ba:fe:35:43:21:a7:52:c0:0e:41:c0:5a:f4:a6:62:b9:87:2c:
         1a:27:b7:81:cb:e9:2b:f7:7c:a2:4d:37:fb:8c:7f:1c:a4:5c:
         40:ee:8f:fc:8d:f0:83:45:ca:d7:49:46:91:a7:5e:d2:29:1a:
         ea:b9:9d:64:c8:70:77:b0:4e:3d:eb:01:1b:2f:e5:20:43:2f:
         ab:35:5f:f4:7b:e1:ab:33:b1:2c:aa:81:e6:7d:25:5e:90:90:
         db:f3:f9:6a:06:4e:d9:e6:34:05:f6:cb:93:b6:6e:5f:b5:ef:
         a6:bf:fb:e7:ea:0a:a1:ee:c8:48:14:3f:8e:d8:25:ca:99:73:
         cc:6d:96:0e:80:7e:1f:44:d5:3b:ac:71:3f:4b:31:15:fd:4b:
         4d:46:43:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:18 2024 by rpki-client on console-fra.rpki-client.org