Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa
File:                     323830343a343031633a3a2f33322d3332203d3e20323635393335.roa (raw, json)
Hash identifier:          u/t9U4wN6XRORzs04RTa703WvxIv90ENn4oaAULaniE=
Subject key identifier:   BC:69:51:86:D1:C7:81:41:07:99:7B:9D:F6:39:CF:29:4C:40:33:59
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       5A9A0E8E9BFE8A83C352C4421FA7381A942B20F3
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa
Signing time:             Thu 04 Apr 2024 07:21:07 +0000
ROA not before:           Thu 04 Apr 2024 07:16:07 +0000
ROA not after:            Thu 03 Apr 2025 07:21:07 +0000
asID:                     265935
IP address blocks:        2804:401c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:9a:0e:8e:9b:fe:8a:83:c3:52:c4:42:1f:a7:38:1a:94:2b:20:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Apr  4 07:16:07 2024 GMT
            Not After : Apr  3 07:21:07 2025 GMT
        Subject: CN=BC695186D1C7814107997B9DF639CF294C403359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:30:6c:82:4e:9b:89:d4:38:fb:ba:81:e7:
                    90:5f:76:f9:50:1c:1e:c3:5b:8a:b9:63:d5:1d:0d:
                    0d:80:53:43:8a:de:81:18:04:ea:18:9c:d9:95:ef:
                    62:1f:54:27:f8:2f:59:cc:47:d0:ab:19:23:fc:00:
                    3c:6c:2d:80:c8:ae:68:50:58:60:76:53:9a:0d:2a:
                    56:8d:a5:f3:8d:27:53:f4:8e:93:31:41:9f:96:a1:
                    82:0c:fd:4c:81:03:ee:1b:88:d2:fd:42:65:a2:92:
                    48:24:c1:75:67:f2:62:ad:30:b0:45:92:16:47:da:
                    8a:56:5f:74:4f:04:dd:7d:31:4b:40:8c:e6:0a:72:
                    e0:15:90:7f:e8:73:6e:13:8b:f7:5c:8e:43:6c:a9:
                    e3:ce:4d:66:e5:ab:88:1d:94:c3:6d:00:87:01:4b:
                    9e:2b:39:26:75:51:ec:62:5a:52:f2:49:95:1b:33:
                    a6:98:1d:3a:78:f1:87:81:33:5e:1c:30:be:3b:0c:
                    8b:5c:a0:6b:19:bc:1b:34:fa:47:2a:aa:7c:e5:ce:
                    f4:ed:51:11:af:13:d4:d2:6a:66:c9:02:8e:a4:50:
                    c6:b9:7d:e8:83:f2:4a:55:fd:66:fb:0b:07:c0:c9:
                    ac:7e:78:ae:cb:43:ef:cb:64:b2:50:16:07:7e:46:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:69:51:86:D1:C7:81:41:07:99:7B:9D:F6:39:CF:29:4C:40:33:59
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33322d3332203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:38:db:06:dd:b5:49:36:b8:6b:48:b3:a3:da:50:c8:c3:09:
         4e:08:83:ae:f9:9b:55:81:94:5f:a8:16:e5:05:56:7d:56:87:
         a5:13:91:d7:18:f1:c6:53:07:9c:66:5a:cf:92:ce:f4:01:36:
         8a:e9:55:91:93:a0:d3:d7:e3:97:73:03:7f:1f:0c:47:5e:1c:
         9e:6c:a0:6a:89:c1:ea:dd:94:dc:d6:5d:68:2e:4d:40:61:4a:
         6d:91:bd:dc:7b:d8:68:ce:8f:c2:3a:94:ac:33:13:ab:46:b5:
         ef:03:b0:e6:64:25:92:95:cf:44:a6:41:af:5d:7d:b0:90:61:
         ef:79:f8:0c:18:8e:fa:65:02:91:c1:71:2f:78:6a:b5:02:04:
         7b:c3:0f:d9:8b:9a:9f:29:20:42:96:bf:9a:b2:70:b5:2d:31:
         8e:09:e7:ce:28:25:37:d9:c7:0c:4d:1b:d0:e1:2b:b4:62:5d:
         2b:98:2e:76:0e:81:2d:6d:d1:65:43:b9:37:bf:c7:5d:40:c7:
         f9:0f:4e:58:d7:e2:35:6a:d8:0a:6e:80:68:88:5d:dc:8a:d0:
         3c:8c:10:28:fe:af:b6:35:1e:47:5a:bf:d5:43:41:7e:81:0a:
         bf:a2:ea:f6:0e:67:3c:1b:55:39:da:81:5f:24:69:bf:4f:1e:
         83:38:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:18 2024 by rpki-client on console-ams.rpki-client.org