Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          NPAiiTAojXB19HKPCVMi33GbqceZMZNsrK/HL5SXrcY=
Subject key identifier:   B8:DE:7C:36:D6:34:FB:07:83:49:EA:0A:D7:55:9F:E9:3C:63:9E:BC
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       14C3C4BCA0CACA0B6645D7F14AA70045F980976B
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Wed 03 Apr 2024 18:32:19 +0000
ROA not before:           Wed 03 Apr 2024 18:27:19 +0000
ROA not after:            Wed 02 Apr 2025 18:32:19 +0000
asID:                     266129
IP address blocks:        2804:3b18:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:c3:c4:bc:a0:ca:ca:0b:66:45:d7:f1:4a:a7:00:45:f9:80:97:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Apr  3 18:27:19 2024 GMT
            Not After : Apr  2 18:32:19 2025 GMT
        Subject: CN=B8DE7C36D634FB078349EA0AD7559FE93C639EBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:0a:21:2b:3d:42:f6:29:6d:3b:3f:c0:db:
                    ed:ec:93:63:78:97:40:76:dc:73:a8:f1:44:0a:71:
                    b9:da:95:79:fd:18:96:21:38:23:dd:8e:03:b1:31:
                    71:a1:d1:7c:05:ed:03:94:59:ec:47:70:2c:32:0a:
                    a2:cd:b6:d6:1e:70:a4:1e:a1:26:17:14:08:1b:23:
                    01:4a:00:7b:7e:f1:86:9b:83:1f:04:79:e6:81:d8:
                    47:57:18:f0:ab:ed:de:8f:55:03:34:12:a9:a3:6b:
                    3d:0a:e9:87:dc:89:56:03:ee:ef:a3:bf:99:68:a3:
                    f8:b3:1c:e3:25:4f:c1:01:d7:53:5e:69:c2:59:1d:
                    8c:19:e8:2e:b8:6d:1c:12:09:e4:3c:1e:c6:65:3c:
                    64:af:4e:f2:ad:44:78:93:35:85:68:32:11:cf:54:
                    71:36:b5:a0:61:af:38:19:da:48:f5:77:b3:66:e6:
                    fc:c4:61:d2:7d:7e:1e:9b:19:3e:2f:dc:b7:26:66:
                    5f:c0:08:5e:fb:19:cb:e8:ce:a4:c5:d6:3d:32:d6:
                    20:a0:9a:9f:64:33:85:e1:62:cf:c0:a7:fc:f5:8c:
                    e3:af:b4:81:87:a9:5b:01:3b:20:1c:92:41:09:46:
                    a3:7f:9a:88:3b:3f:df:26:9d:c0:f3:70:bd:93:3b:
                    c1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DE:7C:36:D6:34:FB:07:83:49:EA:0A:D7:55:9F:E9:3C:63:9E:BC
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a343030303a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cf:5b:a1:b4:28:80:32:1f:55:ca:13:ba:ea:2c:3c:aa:87:db:
         17:9a:62:22:3c:c5:ef:56:fb:40:a1:61:a0:1b:95:e4:f2:e7:
         e5:8a:e3:f9:23:cd:42:61:d9:89:84:61:66:7d:f6:1c:c3:8f:
         40:1d:a7:5f:2b:fc:b7:f0:43:49:f2:7f:cf:6d:d8:4c:3a:a7:
         fd:6c:77:95:a0:bd:d3:55:14:9f:80:b4:ae:4e:8b:48:15:06:
         39:b5:9b:a7:2c:c3:4b:35:84:7f:f1:5e:c8:0c:dc:ca:bf:0a:
         1c:47:49:40:d7:7e:15:f8:11:2f:45:55:fe:58:7e:dc:47:cd:
         26:26:e8:f2:88:92:ae:d3:01:67:7f:75:a6:fe:bd:49:52:a7:
         1b:17:47:5d:be:f4:6b:3a:35:12:01:82:cb:8d:0f:83:34:a3:
         86:a8:51:42:90:53:5b:4d:04:5d:ec:46:2f:b2:41:5f:00:70:
         fd:f0:ff:aa:47:39:2b:8c:1e:b7:93:69:85:7e:32:9a:1d:d5:
         e9:da:32:fe:44:f8:49:9b:eb:29:57:91:9a:22:f6:4b:5d:bc:
         19:4c:27:98:15:a9:51:f8:86:c9:ec:9a:66:43:03:5e:dd:b6:
         2a:06:42:ea:56:0e:10:fe:40:c9:b5:af:12:88:b0:b0:5e:22:
         d3:16:ba:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 08:30:08 2024 by rpki-client on console-ams.rpki-client.org