Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          6QrAxieDcTwvntwxxz74GNXffImIpo8VKrsJzDHg7D4=
Subject key identifier:   C9:6A:5D:7D:53:86:C2:FA:84:A6:79:E4:30:6B:BB:07:13:6F:24:59
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       59F310E7771DDCCF7DB52B2D8B8E0AC413EDEC63
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 07 Aug 2024 14:52:59 +0000
ROA not before:           Wed 07 Aug 2024 14:47:59 +0000
ROA not after:            Wed 06 Aug 2025 14:52:59 +0000
asID:                     264996
IP address blocks:        2804:3124:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f3:10:e7:77:1d:dc:cf:7d:b5:2b:2d:8b:8e:0a:c4:13:ed:ec:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Aug  7 14:47:59 2024 GMT
            Not After : Aug  6 14:52:59 2025 GMT
        Subject: CN=C96A5D7D5386C2FA84A679E4306BBB07136F2459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a7:13:20:cf:5d:37:47:a7:7d:ea:d6:f6:28:
                    0c:46:ef:71:91:d1:69:4a:88:9e:40:a9:ba:27:97:
                    9c:5b:64:ae:41:e8:0c:c8:5b:13:33:a0:0b:d5:12:
                    5a:1f:26:24:41:58:e3:95:18:1e:f2:68:9d:fc:b8:
                    84:00:33:a0:19:1e:f3:cf:45:9d:bf:c0:4b:9b:86:
                    85:8f:b7:a6:54:9e:20:fa:67:43:a9:38:8a:e7:2c:
                    cd:f3:54:08:43:d5:60:bf:a8:7d:07:a9:bd:a7:00:
                    af:fb:a9:78:0c:51:38:41:af:7a:bc:00:97:d5:a9:
                    15:e0:b9:9e:3f:fb:cb:a1:68:f4:6e:67:b7:2b:ef:
                    4d:60:ef:4b:f1:74:d7:ef:fa:d3:b8:39:25:ce:9b:
                    b2:65:57:3d:50:a6:b2:d6:1f:5c:79:98:b9:93:9b:
                    d3:bd:e3:f6:66:0c:53:45:a5:54:b7:a9:fc:d0:5a:
                    d6:fd:65:76:4b:92:10:83:90:d3:37:cc:9c:f2:ca:
                    03:0e:9e:8c:7c:9b:35:f4:82:50:d0:75:6c:10:60:
                    2d:80:fa:50:3f:74:00:96:c0:bf:08:7a:63:b4:31:
                    66:4e:de:89:28:c1:31:8b:50:90:ca:db:a8:73:fa:
                    1f:a5:be:19:f0:d6:56:59:9d:a3:8f:ac:50:a9:a2:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:5D:7D:53:86:C2:FA:84:A6:79:E4:30:6B:BB:07:13:6F:24:59
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a373a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:50:e5:42:0a:c7:b2:30:11:d9:80:5e:fa:a5:be:b2:7b:
         89:f5:0a:7b:b6:ef:6f:c3:27:e9:5d:73:8d:a4:34:1b:74:9c:
         0f:d9:1a:4b:0b:80:9f:23:ac:eb:62:3e:9d:12:db:61:bf:7e:
         ba:46:24:74:a8:0a:1a:09:f7:81:f6:25:45:5e:16:15:8b:7c:
         78:23:65:08:30:a5:b5:48:47:4f:8f:62:fa:63:72:cf:c1:0d:
         f2:a8:1a:d4:d1:6f:b8:64:2a:9a:3c:67:09:bb:84:bf:8c:59:
         3f:6d:75:26:59:46:34:54:93:1d:2d:79:5e:ce:1d:b7:09:ba:
         e0:c2:16:ed:92:51:e6:4d:5f:72:78:66:34:4a:04:a7:18:ad:
         8f:2d:6b:7e:7b:c7:27:2a:48:ac:d6:a9:0b:9b:fc:bd:72:38:
         a1:10:d4:11:a4:a0:ec:ee:2c:94:3a:d5:c4:87:d0:35:2d:e4:
         52:5b:b1:f1:30:65:3b:15:d9:5d:2f:df:a6:77:27:7e:db:14:
         01:41:9a:98:b5:59:13:f3:94:a6:48:8f:e5:58:62:8a:ba:fd:
         bb:df:8c:d0:7b:9e:a5:bb:f3:da:c2:0e:b4:95:dc:96:31:e6:
         45:c4:a8:09:be:c5:07:77:69:a0:cc:9f:7d:9b:e6:07:5c:e1:
         52:c8:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org