Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          DeTG0MidnXU+dqZnEtIMY5RvWDP+RJbhk8phb8Dfgs4=
Subject key identifier:   43:87:F1:6B:BF:AB:0A:26:76:88:34:91:C8:F4:51:D8:5E:60:A1:3D
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       6739FC491A50E7EF6710070A0E7B091B628E55F8
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 04 Apr 2024 07:21:07 +0000
ROA not before:           Thu 04 Apr 2024 07:16:07 +0000
ROA not after:            Thu 03 Apr 2025 07:21:07 +0000
asID:                     265935
IP address blocks:        2804:401c::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:39:fc:49:1a:50:e7:ef:67:10:07:0a:0e:7b:09:1b:62:8e:55:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Apr  4 07:16:07 2024 GMT
            Not After : Apr  3 07:21:07 2025 GMT
        Subject: CN=4387F16BBFAB0A2676883491C8F451D85E60A13D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4c:97:25:13:e5:82:ad:4b:a2:d8:b8:a3:dd:
                    9b:25:45:7e:db:fd:4b:97:ab:10:75:6d:bf:d3:d5:
                    81:b2:0a:9e:4a:0a:76:c5:9a:0d:b5:af:fa:f0:f3:
                    c6:7f:f6:8b:7d:47:c5:a3:6e:79:1e:a8:87:08:b3:
                    7e:7b:b5:d1:a5:88:62:c8:01:6c:9f:5b:c7:16:39:
                    77:ad:71:65:d7:8e:b0:8d:4b:34:c3:fb:59:08:54:
                    53:16:7f:27:bc:7f:e0:ac:c4:cd:0f:d0:b1:85:69:
                    f1:1c:b6:6a:0a:89:ae:f1:c2:ef:f1:31:0f:15:90:
                    82:f6:13:ad:9b:0f:7f:98:ab:bd:08:f9:42:21:1a:
                    b2:ce:1a:d3:fe:8d:8b:0f:94:1b:45:c9:0c:c9:c6:
                    d0:45:97:a5:c0:6b:e3:d0:e4:12:c3:60:14:09:2c:
                    82:a0:6c:fb:93:5f:83:65:ac:42:74:10:c2:50:22:
                    88:57:8f:ea:8f:da:ce:95:1a:15:0e:d6:2a:0b:b4:
                    f2:cb:e7:2f:df:55:0f:c8:4d:a9:d3:88:13:7a:36:
                    3b:e2:1e:b7:e8:75:b6:d0:40:88:75:32:bf:cb:65:
                    1f:0b:81:29:8d:3a:2d:b1:34:8f:d1:31:a8:d0:d1:
                    79:1e:d8:8c:14:42:cc:7d:ec:f3:f1:8e:61:68:26:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:87:F1:6B:BF:AB:0A:26:76:88:34:91:C8:F4:51:D8:5E:60:A1:3D
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:03:d6:44:21:d8:0e:46:cb:d8:22:52:79:b7:07:34:7d:
         65:f9:54:9f:4c:dd:d2:c3:11:b5:2b:1b:62:f6:85:77:7c:e2:
         3f:a7:60:67:df:5a:fd:75:74:40:7a:7c:27:dc:46:f4:0f:b4:
         8c:2c:4b:c3:6a:63:27:71:53:d1:2b:04:7e:5a:9f:e3:07:3e:
         4d:52:98:e0:38:1a:f1:ed:6a:19:f7:52:26:1f:8a:6d:9e:94:
         b5:6d:61:58:44:43:1b:33:79:0d:ea:7f:cc:8c:2d:fb:e8:32:
         52:ba:3d:c4:45:31:40:a5:bc:0a:1d:ce:0a:db:e3:f8:34:68:
         67:52:54:3d:af:99:fd:80:45:b0:73:d2:f0:85:4c:00:8a:79:
         ef:26:10:02:be:a9:5f:df:e2:56:24:c2:27:60:cc:c9:de:f4:
         3a:84:89:be:b0:b3:25:fb:37:36:15:97:27:b7:e6:b5:e6:e5:
         e4:0e:34:ba:fa:d8:3a:71:76:3a:bc:59:04:09:49:18:66:ae:
         d5:d2:09:3c:33:8c:b4:78:c5:d1:6f:f7:07:6d:4a:43:0c:6b:
         c8:7e:a7:06:2c:ca:66:01:fb:5a:10:04:31:46:77:08:5e:06:
         94:0e:e0:5c:b0:ed:b0:12:99:37:82:2e:ec:8a:eb:56:e1:39:
         a6:37:4f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org