Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
File:                     323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa (raw, json)
Hash identifier:          jnGydWjVuEsqRewh9gV43DMoAceSZmda9aRFEYlTqnY=
Subject key identifier:   9F:B6:5C:EC:7D:30:AF:A1:97:D3:FC:82:2D:62:71:98:64:E1:7A:CE
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       13B7045B853E168ED1D9DCCD6D0BA92601D4919B
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:07 +0000
ROA not before:           Thu 04 Apr 2024 08:17:07 +0000
ROA not after:            Thu 03 Apr 2025 08:22:07 +0000
asID:                     264996
IP address blocks:        2804:3124:4100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b7:04:5b:85:3e:16:8e:d1:d9:dc:cd:6d:0b:a9:26:01:d4:91:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:07 2024 GMT
            Not After : Apr  3 08:22:07 2025 GMT
        Subject: CN=9FB65CEC7D30AFA197D3FC822D62719864E17ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a9:d0:a8:bd:c6:70:dc:76:25:14:e1:f8:df:
                    b8:e9:34:57:ac:94:56:af:10:ea:b7:49:2f:3a:3e:
                    a2:78:2f:fa:b5:80:8d:bb:2f:cd:c3:31:8a:7c:6a:
                    a6:d6:a9:fc:ba:5a:dc:d6:24:06:c9:a8:9f:ec:d4:
                    1c:f5:e8:21:90:d4:0e:0b:a2:88:8f:76:49:b6:1a:
                    81:2b:ef:be:37:ce:61:70:f8:8a:7e:bc:ea:98:f9:
                    6c:3e:4c:49:04:e4:e7:a6:6b:2a:29:9d:d7:4d:2b:
                    e4:40:c1:db:ef:a7:d5:0c:ca:27:47:47:38:4a:84:
                    d6:67:fa:a5:53:42:ec:cf:04:74:5e:1c:7e:49:22:
                    dc:ed:cf:e1:86:a6:87:91:4c:61:63:b5:97:c2:10:
                    71:98:0a:69:e4:ce:af:52:f8:a6:1a:83:f9:a9:d0:
                    fa:5f:5b:92:6b:ff:80:a5:7e:95:53:e1:66:17:09:
                    f1:e2:9d:9e:d6:e9:f8:27:68:90:7e:b2:24:6c:ac:
                    f0:2c:1a:07:2e:93:fc:91:26:11:2b:6f:47:6c:78:
                    bd:22:9d:83:8e:d6:02:24:4f:97:86:48:bf:0a:b1:
                    63:8a:aa:df:15:8b:82:61:d4:36:6f:81:c3:0e:8d:
                    bb:d8:39:98:53:73:97:73:a1:7f:38:00:86:d6:c6:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:5C:EC:7D:30:AF:A1:97:D3:FC:82:2D:62:71:98:64:E1:7A:CE
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a343130303a3a2f34302d3430203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:54:1f:e6:de:01:63:ad:e2:45:f9:d8:07:4d:fe:29:48:75:
         e3:5f:37:b7:f9:bf:ca:19:47:55:7a:5e:b8:02:34:ee:1f:76:
         67:9f:04:b3:56:e2:b5:84:64:e5:7f:63:69:2f:ec:b7:fd:3c:
         ca:dd:bc:eb:9a:9e:82:f4:88:e2:87:34:fc:fd:d4:a6:5e:c4:
         26:33:e1:ff:f3:06:47:f7:dd:e2:2e:e3:1c:cd:e3:a1:80:95:
         d3:ce:ec:d9:5f:57:4a:a0:37:31:83:17:ca:99:4d:0b:dd:d2:
         6e:7c:b1:b3:e3:5b:8e:e7:32:e9:1b:dd:a8:95:cb:bf:70:66:
         51:96:a4:9f:1a:f3:da:25:31:6e:ed:3c:61:6a:83:ac:3e:0a:
         76:d5:26:16:3b:46:07:03:69:30:91:42:d1:97:06:54:54:d9:
         eb:58:a8:57:a9:4f:15:70:dd:06:78:9c:db:07:dd:55:c7:44:
         f1:d9:7f:25:67:ce:3c:a3:2f:ce:5c:5b:e9:46:47:67:13:64:
         a8:a5:1e:b6:7b:f0:da:1b:4c:02:1d:ff:ec:29:96:ad:83:a3:
         b0:1d:ee:01:10:71:ab:a5:06:1d:4a:24:55:11:8f:78:06:6f:
         e9:0a:83:80:79:58:1f:5c:1d:80:e6:52:94:26:9d:a7:9c:8d:
         c9:f6:04:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org