Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa
File:                     323830343a343235303a3a2f33322d3438203d3e20323637343932.roa (raw, json)
Hash identifier:          89HPt1P6jiQeoBWKVpAKDar2Pi5SO6fX1jBHx1bZkU4=
Subject key identifier:   96:E1:2E:DF:E3:05:89:31:75:C1:DD:E2:C9:4D:51:0D:84:3A:7C:22
Certificate issuer:       /CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
Certificate serial:       3087729A9F8843720893CE223F620CF6A3D2606F
Authority key identifier: 99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa
Signing time:             Wed 03 Apr 2024 18:38:32 +0000
ROA not before:           Wed 03 Apr 2024 18:33:32 +0000
ROA not after:            Wed 02 Apr 2025 18:38:32 +0000
asID:                     267492
IP address blocks:        2804:4250::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.crl
                          rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:72:9a:9f:88:43:72:08:93:ce:22:3f:62:0c:f6:a3:d2:60:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76
        Validity
            Not Before: Apr  3 18:33:32 2024 GMT
            Not After : Apr  2 18:38:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:8a:7c:2e:5c:65:49:c3:d0:22:9e:ab:6b:
                    46:75:0a:1b:8d:47:e1:98:8f:d0:0e:1e:3b:ae:c0:
                    23:6f:5e:01:82:ca:3f:d6:7f:d9:47:9f:0d:a3:49:
                    e4:45:e3:8d:7e:dc:0b:af:39:23:7b:9f:c6:89:65:
                    ad:90:4d:1a:02:a8:75:7b:6d:23:78:07:c2:70:80:
                    8c:83:51:d4:83:0a:c8:b1:a6:e2:ab:00:68:96:15:
                    1e:c8:ab:77:22:c2:61:6c:6a:e4:e8:ab:cd:38:23:
                    b3:27:0e:75:38:4b:1d:d3:48:28:e7:f6:28:1a:16:
                    87:17:fb:15:e6:7a:90:51:ac:cf:b2:3f:f9:80:1c:
                    e7:16:b5:0b:50:f8:11:02:80:a6:19:5c:3b:13:2d:
                    76:6c:f4:96:91:3e:10:ea:a9:67:56:4a:50:b1:d9:
                    15:27:fc:39:2c:68:75:67:d8:58:fc:ef:d6:9d:55:
                    85:85:b0:28:35:ab:bc:8e:c4:f6:ec:e2:34:18:ea:
                    f7:c3:8b:a5:8a:f1:1b:ff:12:e3:1a:8b:7e:c0:bf:
                    61:83:9a:73:0c:9a:a8:8c:9a:4c:9f:e9:c1:bd:26:
                    8e:46:aa:f9:28:b1:2c:1b:da:b0:f6:04:de:91:29:
                    25:8d:67:93:77:f9:e9:0f:08:5a:da:cb:bf:ba:d8:
                    bd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E1:2E:DF:E3:05:89:31:75:C1:DD:E2:C9:4D:51:0D:84:3A:7C:22
            X509v3 Authority Key Identifier:
                keyid:99:DB:82:7F:B2:B7:D3:2F:4F:4C:E9:31:CF:63:CA:A5:C6:B2:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99DB827FB2B7D32F4F4CE931CF63CAA5C6B2FB76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bh9CVnucY7JWszDGF8Wn1Ebx1yydq2oPrgziNv3Wx5y/1/323830343a343235303a3a2f33322d3438203d3e20323637343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4250::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:75:a4:43:e3:d1:58:54:54:fc:4c:7c:7a:71:88:bf:c3:
         b0:d4:ed:a6:88:35:ac:2d:cd:9b:cb:69:b3:33:96:d7:30:58:
         25:d4:23:99:c9:65:56:14:33:a3:6d:7c:d1:6b:32:cc:89:1a:
         08:e2:20:04:b6:01:d7:3f:fd:42:06:ad:48:42:69:64:f9:2c:
         7e:e0:08:f9:2f:aa:a2:b0:45:fc:01:c7:f6:b3:1a:b0:8f:4b:
         9e:42:31:32:46:32:ee:67:14:fd:2d:31:57:0b:14:e3:7d:5a:
         8e:cc:95:90:01:87:b0:97:6f:53:df:12:02:fc:48:2b:d1:29:
         a7:f4:63:ed:de:0d:dc:7b:93:70:23:55:55:b8:71:6e:67:44:
         fd:b1:86:80:ab:81:14:76:e7:f5:e7:eb:21:df:56:b5:5b:56:
         bc:8a:c1:b1:68:c0:f3:ce:9a:d7:43:e4:83:9e:c6:1a:35:7b:
         32:e9:02:cd:0b:8b:4f:d0:4a:43:f1:b1:c3:a0:d1:2e:45:10:
         ae:97:22:89:4d:96:74:5c:56:84:e0:08:04:23:5a:f0:16:02:
         f6:51:d2:7d:bd:7f:1b:8a:d8:dc:b0:eb:15:5e:46:a2:2c:25:
         d3:12:a4:dd:db:10:d5:7a:f0:af:91:12:51:f6:5a:74:c7:6e:
         9b:34:a5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org