Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
File:                     323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (raw, json)
Hash identifier:          85Wik1u9CMhP4N1Y1xqjIZAa3jqkviX+yahAbyRns30=
Subject key identifier:   93:00:48:49:1F:D0:30:F8:B6:E2:B3:22:D2:76:68:4F:9A:29:C3:24
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       794F47EF65F0996D152D48CD847084307E5EA0FC
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
Signing time:             Thu 04 Apr 2024 22:52:38 +0000
ROA not before:           Thu 04 Apr 2024 22:47:38 +0000
ROA not after:            Thu 03 Apr 2025 22:52:38 +0000
asID:                     266140
IP address blocks:        2804:3b4c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 16:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4f:47:ef:65:f0:99:6d:15:2d:48:cd:84:70:84:30:7e:5e:a0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Apr  4 22:47:38 2024 GMT
            Not After : Apr  3 22:52:38 2025 GMT
        Subject: CN=930048491FD030F8B6E2B322D276684F9A29C324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:2c:96:8f:2b:b6:ce:92:ec:d9:92:84:ad:
                    43:b1:16:04:db:07:1c:61:bf:af:84:e8:6a:8c:ea:
                    d6:76:75:cc:62:1f:f9:0f:99:51:3f:64:0e:a1:b5:
                    ad:d2:10:cc:db:ed:c2:6d:69:69:33:17:1b:b4:bf:
                    83:a7:51:48:a5:66:01:96:f2:72:1a:c9:43:95:fc:
                    ec:2a:bf:84:52:65:9c:30:60:04:06:f6:4b:1b:24:
                    fb:02:df:90:91:dc:3c:e2:d0:d0:e3:8a:f8:b7:ab:
                    71:24:e8:fa:8d:6d:a4:36:6a:07:6a:19:da:92:bd:
                    97:11:c2:24:64:f3:86:71:94:20:c1:f9:1e:67:f4:
                    fd:c3:d6:6f:5d:c8:38:17:b8:24:a1:4c:8f:fb:2b:
                    20:47:8e:40:06:f4:65:ea:25:19:fb:e1:97:15:10:
                    b4:30:1b:8b:94:5d:5a:3a:80:32:5d:cb:bc:de:31:
                    a5:56:5f:24:64:c0:8d:64:12:f6:2a:ed:e2:b7:e9:
                    52:67:2c:69:13:6f:1b:f6:09:c5:9d:c1:6a:13:1a:
                    e3:6c:3b:16:44:d5:cb:bc:ac:62:01:ee:5a:a4:f9:
                    be:c0:31:ff:1f:81:af:15:41:61:1c:c3:1a:58:91:
                    4d:ec:f7:6d:c4:be:dd:57:33:93:5f:b5:ac:8c:cf:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:48:49:1F:D0:30:F8:B6:E2:B3:22:D2:76:68:4F:9A:29:C3:24
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:fe:d9:a0:54:6c:10:fd:bd:db:30:9b:db:69:d7:bc:c4:af:
         b8:c4:42:93:b5:34:72:09:33:9a:24:d8:9b:a0:4e:7b:0b:7e:
         04:83:2d:d3:42:18:24:ff:fb:7e:96:56:70:4a:cc:57:66:73:
         19:21:df:8a:74:a7:61:c5:c6:41:8a:9d:9d:66:11:4a:e5:c7:
         40:97:6f:5d:02:fc:e1:ec:4a:b0:97:05:49:34:ad:aa:c9:1b:
         63:d8:11:dd:d5:fe:f2:f1:2e:7d:40:68:e8:47:a9:eb:6b:fb:
         2a:72:d5:cb:ae:30:df:41:3a:86:2b:e1:f6:17:0e:65:ac:ac:
         10:3c:9e:db:fb:2a:eb:f8:84:46:85:98:df:bb:9a:46:67:06:
         80:4d:a6:66:54:62:04:73:e2:c1:ec:f5:07:de:98:9b:e4:a7:
         a3:f1:d3:96:41:5c:f0:d6:c1:7d:bb:b6:43:e9:c9:25:1f:6a:
         e6:56:44:14:4f:43:20:25:9e:a5:e0:87:b6:b7:c6:d8:11:f7:
         ec:a0:b6:f9:c0:c8:70:7b:50:8a:5a:4d:19:ec:89:4c:d3:ec:
         dc:cc:f4:cd:98:79:b2:43:82:3e:e4:10:07:05:7e:5d:a1:75:
         ce:22:f4:a0:f6:f9:d8:b4:74:dc:c9:86:5a:cc:8b:06:7c:9d:
         e0:76:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:54 2024 by rpki-client on console-ams.rpki-client.org