Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa
File:                     323830343a333137633a3a2f33322d313238203d3e20323635303138.roa (raw, json)
Hash identifier:          HjttF278tdvBzyumsyWz3FthS/QTFAlBikxhS8gF/Ow=
Subject key identifier:   34:01:68:0D:D1:95:6F:7D:5E:80:8F:1A:AA:41:BB:05:A6:11:FB:DA
Certificate issuer:       /CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
Certificate serial:       40266C06A28852DE01DA226C83D08D07C4C68E8D
Authority key identifier: 3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa
Signing time:             Thu 04 Apr 2024 22:55:52 +0000
ROA not before:           Thu 04 Apr 2024 22:50:52 +0000
ROA not after:            Thu 03 Apr 2025 22:55:52 +0000
asID:                     265018
IP address blocks:        2804:317c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl
                          rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:26:6c:06:a2:88:52:de:01:da:22:6c:83:d0:8d:07:c4:c6:8e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C
        Validity
            Not Before: Apr  4 22:50:52 2024 GMT
            Not After : Apr  3 22:55:52 2025 GMT
        Subject: CN=3401680DD1956F7D5E808F1AAA41BB05A611FBDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1b:e1:07:89:19:a2:e0:5e:ae:72:90:f1:fd:
                    2c:72:a8:d0:49:bc:5a:9b:85:9d:62:41:37:ad:dd:
                    f2:4e:4d:a9:f2:ef:0f:0d:6a:59:51:63:12:42:20:
                    aa:af:e6:c3:5a:b4:e2:91:5d:18:a6:68:9f:5b:e5:
                    70:74:d1:5b:53:4e:78:c8:00:d9:d2:24:df:4a:5d:
                    f2:37:fa:32:ee:35:b8:4c:82:06:85:08:00:59:a0:
                    c3:81:b1:0c:6c:32:af:e1:9f:48:28:87:bf:95:00:
                    48:4c:4b:d3:c7:41:9b:ff:65:f5:b9:6f:90:f1:b8:
                    ad:79:a9:6a:ed:5b:77:3f:e3:5c:d4:eb:09:a4:91:
                    35:ad:24:13:23:14:12:c3:85:df:cf:22:67:ec:d1:
                    d2:b1:2a:15:8d:25:d9:c8:8b:23:3f:85:09:e7:5d:
                    af:34:fd:83:ec:2a:be:67:0f:c1:d8:3b:d1:58:2f:
                    e5:50:01:32:af:5a:ac:77:99:ad:55:41:a5:c0:52:
                    e3:6f:49:2c:0f:b4:1d:de:78:a3:6f:e6:56:b4:7e:
                    57:13:18:b5:36:e4:08:d2:e7:bf:8a:13:28:2e:35:
                    68:03:21:5d:9f:9c:c6:90:ca:9f:72:8c:36:9c:66:
                    8f:b3:76:99:f3:72:8e:8c:0a:26:ad:ef:9d:18:7c:
                    2d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:01:68:0D:D1:95:6F:7D:5E:80:8F:1A:AA:41:BB:05:A6:11:FB:DA
            X509v3 Authority Key Identifier:
                keyid:3C:3C:E7:B9:0A:2F:2C:00:5B:0F:DE:3D:1F:CA:16:D3:8E:40:2C:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C3CE7B90A2F2C005B0FDE3D1FCA16D38E402C4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3jvYAq8YM7riRtxmbzYYs5T6365iEg9AieED6dUA4GkZ/1/323830343a333137633a3a2f33322d313238203d3e20323635303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:317c::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:0f:68:66:82:81:05:44:5c:7a:1c:09:a8:78:ba:29:60:
         0e:74:b4:d6:d0:f1:8c:cd:df:a0:f7:77:88:94:7d:66:5b:12:
         df:2e:5a:0d:be:3d:6a:cd:d9:e8:97:97:d6:cd:55:af:d9:bc:
         3e:80:da:f8:1f:35:34:dd:ce:a1:dd:61:b7:5d:42:28:cd:28:
         49:6d:5a:b6:d6:ad:86:2e:a9:c8:69:87:01:24:68:3f:c9:f7:
         c1:7d:94:46:ed:d6:55:4d:18:6f:8a:8b:3e:b0:2f:19:ba:3f:
         40:ec:f2:be:9e:bc:47:8e:81:ab:56:c2:56:0e:5f:e8:9a:a2:
         2c:be:42:ee:9d:c2:2f:68:9f:40:f3:e1:f2:f9:d8:58:8b:89:
         50:8a:07:e0:f4:5f:33:15:52:5a:fd:c4:e7:d5:ca:21:6e:24:
         b6:a3:25:d9:54:b6:8f:dc:3a:40:06:70:96:f2:99:32:02:49:
         50:45:20:ae:07:a0:28:d4:33:58:50:cc:b8:f4:3e:07:39:88:
         cf:82:22:4b:df:df:23:8c:f2:16:f2:b5:7b:39:38:20:34:1a:
         31:bb:ca:b6:a8:fc:25:65:7d:41:7c:29:cb:c9:b2:7f:1c:35:
         c6:64:77:77:c4:1e:a0:d5:96:27:ff:66:ca:4a:d5:fa:5d:ac:
         ad:e1:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:33 2024 by rpki-client on console-ams.rpki-client.org