Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
File:                     323830343a363338383a3a2f33322d313238203d3e20323639333637.roa (raw, json)
Hash identifier:          dRbH2MUBSLS/p5q3PB6xnKFK8TAOVNDBsbcnxfqOd+0=
Subject key identifier:   9B:60:D4:1A:82:5A:39:B5:D0:52:41:3B:68:E3:9B:1A:56:2B:C1:E0
Certificate issuer:       /CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
Certificate serial:       3914E318E786E965BC5695930AD08DEE52C34ED5
Authority key identifier: 11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa
Signing time:             Thu 04 Apr 2024 00:09:01 +0000
ROA not before:           Thu 04 Apr 2024 00:04:01 +0000
ROA not after:            Thu 03 Apr 2025 00:09:01 +0000
asID:                     269367
IP address blocks:        2804:6388::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl
                          rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:35:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:14:e3:18:e7:86:e9:65:bc:56:95:93:0a:d0:8d:ee:52:c3:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110BEE0AC24D6678F28E9522A64E0A2D9C666A15
        Validity
            Not Before: Apr  4 00:04:01 2024 GMT
            Not After : Apr  3 00:09:01 2025 GMT
        Subject: CN=9B60D41A825A39B5D052413B68E39B1A562BC1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:3d:09:19:68:8a:75:c2:d7:3e:15:c8:36:
                    c3:87:96:e0:0d:fd:4c:cd:cf:50:3c:f5:2b:82:1d:
                    cb:27:8f:73:83:46:cb:df:37:ea:96:ca:6c:aa:ee:
                    8b:dc:f7:ac:30:1f:e0:4c:41:fa:94:d5:92:8e:8d:
                    4b:28:20:85:dc:7a:d4:f5:f5:e1:10:16:b1:39:3f:
                    f2:76:73:ee:fa:b8:c7:61:66:44:a3:5e:77:f3:d1:
                    84:27:13:ab:98:b6:71:ce:0e:f0:1a:de:f0:3b:96:
                    59:23:1d:21:84:1b:60:fd:1b:4f:12:f4:3d:ef:de:
                    13:23:e2:ff:bc:06:83:dc:f5:a5:01:85:25:2d:1d:
                    95:80:90:f5:82:ba:22:a7:1d:00:72:bc:5b:05:a3:
                    60:d3:88:74:e7:a9:11:b8:9b:14:f6:0c:85:fe:bf:
                    90:fb:db:1f:98:ef:f0:fa:bd:ee:8c:6d:1e:d7:b2:
                    f0:64:2b:ec:8a:65:9f:68:f2:9a:3e:69:ae:bf:a6:
                    3c:aa:f0:92:89:43:7b:78:fb:f0:39:77:4b:00:b2:
                    dc:cf:9f:0f:36:3f:68:14:bd:72:5f:bb:b4:3f:01:
                    83:ea:08:22:f7:0e:bb:1e:58:69:6d:4c:44:0f:dc:
                    bc:24:7f:4b:dd:ee:f9:88:40:81:df:7b:2f:1a:d4:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:D4:1A:82:5A:39:B5:D0:52:41:3B:68:E3:9B:1A:56:2B:C1:E0
            X509v3 Authority Key Identifier:
                keyid:11:0B:EE:0A:C2:4D:66:78:F2:8E:95:22:A6:4E:0A:2D:9C:66:6A:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/110BEE0AC24D6678F28E9522A64E0A2D9C666A15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/1/323830343a363338383a3a2f33322d313238203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6388::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:db:c2:99:37:6b:d8:97:e5:aa:67:cc:bc:cb:eb:0a:60:
         14:a5:7e:b7:79:17:30:5a:65:9b:47:47:66:0c:e3:16:bf:b8:
         f5:5e:f2:61:fe:24:dd:5a:0d:64:33:59:9a:e4:fd:52:03:51:
         6e:46:9a:61:07:b4:44:bc:43:fa:6d:b7:7f:e0:5d:68:61:54:
         13:3e:d6:24:40:c9:59:a2:e3:20:87:30:70:dd:eb:95:69:ee:
         e9:64:53:65:2b:aa:bd:75:e2:01:51:28:e0:d8:4a:28:ea:a6:
         f3:88:ae:ac:6d:c0:c1:94:9b:0a:2b:6a:67:c3:67:c2:0b:40:
         ae:8b:77:92:9a:09:90:9a:9f:62:4c:99:28:7f:18:e1:52:7d:
         87:22:fa:85:9c:87:31:56:81:c8:26:7a:13:b0:c6:73:ae:b4:
         e4:c6:a8:89:a2:ca:95:12:13:b0:e0:15:10:d8:f8:2a:d5:cc:
         ee:b7:c1:a7:b5:b0:ad:24:ed:09:0d:28:21:bd:06:0e:ee:a1:
         49:48:49:c1:d7:91:b4:a0:6c:85:38:fc:c3:99:0e:87:6e:fa:
         c8:87:4a:be:eb:b1:46:1a:75:85:f5:33:df:f3:4c:3b:bf:66:
         de:ff:e6:0d:50:2d:09:92:b5:64:d7:c3:a0:8c:9f:10:19:71:
         68:fd:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org