Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
File:                     323830343a333132343a3a2f33332d3333203d3e20323634393936.roa (raw, json)
Hash identifier:          4uHjrD+p6ZlZ/wDmUAdp1jXycsc7YzC+mDvnS0iZWiE=
Subject key identifier:   E7:A5:67:5C:C2:52:F5:9A:16:36:7F:23:0A:DC:5B:7E:BA:B9:C1:8D
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       202F0787084D885A78F885AE6D62072BB3FF34F4
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:06 +0000
ROA not before:           Thu 04 Apr 2024 08:17:06 +0000
ROA not after:            Thu 03 Apr 2025 08:22:06 +0000
asID:                     264996
IP address blocks:        2804:3124::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:07:87:08:4d:88:5a:78:f8:85:ae:6d:62:07:2b:b3:ff:34:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:06 2024 GMT
            Not After : Apr  3 08:22:06 2025 GMT
        Subject: CN=E7A5675CC252F59A16367F230ADC5B7EBAB9C18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b0:15:80:eb:e3:3b:34:fb:b4:6c:9d:a5:51:
                    64:72:ab:28:eb:69:dd:a2:2c:fa:ac:af:0a:2a:6d:
                    56:0c:65:5a:59:62:5d:d7:d1:5d:84:9f:fe:61:92:
                    16:2a:dd:59:55:18:44:c2:16:b6:fb:07:c4:5a:77:
                    3a:7a:11:31:d8:c2:12:9c:fc:19:0d:40:d8:8e:b4:
                    d4:57:cb:23:8d:54:b4:59:09:94:0f:54:b4:6f:ed:
                    b8:55:01:89:07:97:d1:58:8f:1b:10:2b:9f:b6:08:
                    b4:48:44:ce:f8:6e:6c:8d:83:f4:e0:37:80:26:6c:
                    88:6b:e9:d8:16:63:78:f2:46:88:df:d6:2a:28:51:
                    f5:98:c2:40:53:8b:4c:4d:18:ff:2d:5a:a5:21:96:
                    88:f9:3b:ea:64:33:47:41:40:0a:ec:a8:26:26:aa:
                    8e:63:f3:4d:0b:87:fe:4d:a7:be:ea:a9:e3:9d:69:
                    cb:46:c7:ba:57:87:c9:57:81:4a:b7:2e:b5:06:5f:
                    92:1e:46:21:70:fe:fe:7c:c9:9b:d1:5e:7f:6b:c9:
                    30:25:9a:74:56:2c:55:c0:a2:e9:a9:22:cb:d2:30:
                    e0:f4:c1:00:bb:ad:52:37:2a:68:bd:29:78:45:ca:
                    ff:57:67:4a:b0:82:4c:15:3f:1f:90:28:95:78:b4:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A5:67:5C:C2:52:F5:9A:16:36:7F:23:0A:DC:5B:7E:BA:B9:C1:8D
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a3a2f33332d3333203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124::/33

    Signature Algorithm: sha256WithRSAEncryption
         16:37:8c:fd:f8:cb:b8:45:b7:94:6c:1a:ac:77:fe:46:1d:a6:
         cc:8e:ad:e3:fc:40:b7:20:96:51:1b:66:49:d8:33:34:16:12:
         45:f0:9b:4a:8a:cc:84:f7:ef:ca:02:15:c1:4c:bb:29:e1:ca:
         e9:17:5e:7c:c8:4f:58:39:ca:2a:cf:37:18:8a:95:d0:49:2c:
         ec:0d:60:56:c0:dc:48:18:76:cf:78:af:35:70:81:6d:bc:4f:
         b9:6b:21:6f:6d:72:f9:b5:cc:7f:b7:cc:24:75:ba:3a:0f:b4:
         ac:d8:c1:2e:97:c6:5c:7c:e3:59:15:c0:00:83:2c:a8:97:2e:
         d5:8f:bc:02:e2:a2:d6:d6:1d:02:c7:01:36:e1:a7:bb:3a:3b:
         80:61:8f:03:e4:9d:88:32:13:da:29:1e:9a:60:dd:49:57:96:
         f4:9b:61:cb:24:6c:0a:f5:7f:42:dd:47:d4:27:f4:ed:51:a8:
         e3:c2:7f:b1:04:da:b7:e8:32:a0:f1:df:41:72:b2:0a:45:8a:
         3f:de:94:60:40:90:d7:7a:63:6c:f7:53:dc:8f:42:0e:fb:29:
         30:93:f5:ec:13:97:0d:4e:6d:45:53:b4:f3:d0:05:a1:26:a2:
         a2:f7:f2:74:1b:95:7d:a0:bc:36:93:1c:ff:b3:0b:69:d5:ad:
         78:c3:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org