Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          EfWPu78tsPgrQlKIEcAQeAE4qEexhLyMRLWodqeZe5M=
Subject key identifier:   B5:B2:A4:2F:38:E0:24:57:D5:13:10:00:9B:38:C1:C1:5B:47:C0:99
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       781F5129EA383DCEF7634D1F33843CF64C9A7943
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 07 Aug 2024 14:53:06 +0000
ROA not before:           Wed 07 Aug 2024 14:48:06 +0000
ROA not after:            Wed 06 Aug 2025 14:53:06 +0000
asID:                     264996
IP address blocks:        2804:3124:c00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:1f:51:29:ea:38:3d:ce:f7:63:4d:1f:33:84:3c:f6:4c:9a:79:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Aug  7 14:48:06 2024 GMT
            Not After : Aug  6 14:53:06 2025 GMT
        Subject: CN=B5B2A42F38E02457D51310009B38C1C15B47C099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ee:b2:30:cd:c5:e5:21:ba:f5:fb:2d:25:81:
                    de:17:93:ae:d4:5b:68:73:ad:66:ce:48:60:22:f3:
                    9b:09:ed:6e:78:90:97:54:e7:40:a7:f9:c8:c3:1e:
                    0e:b4:ca:4f:85:69:31:83:b6:97:00:cc:f7:a9:4a:
                    7f:cf:e5:df:9d:ba:b7:3a:c8:5e:bd:85:fb:e7:75:
                    1c:dd:a7:8b:3f:65:6c:21:44:a2:7e:8d:24:f4:aa:
                    b0:17:a2:af:51:5b:e1:99:e9:ae:79:9c:7f:a7:34:
                    4d:f3:ea:9e:06:27:0c:57:be:14:42:a8:d2:d4:9b:
                    89:02:5b:06:7a:3c:ca:86:55:5a:d0:dc:59:60:6e:
                    6a:94:e7:e6:b9:a2:29:d8:65:38:14:e8:a7:94:ac:
                    6a:01:41:21:51:50:09:e7:b6:25:c9:07:55:e3:0d:
                    ec:67:fb:50:15:d2:01:c3:35:2a:c2:7f:fd:cb:4f:
                    04:4e:ad:66:1c:5d:40:23:98:57:cd:9f:64:7b:d9:
                    37:0e:11:53:71:fa:55:31:99:80:f8:4d:a7:6a:a6:
                    e0:1d:10:f9:87:fe:f4:79:45:65:56:aa:29:4d:58:
                    69:27:53:ae:79:f8:8c:f0:52:28:a8:1e:25:ea:f8:
                    46:56:4b:6e:84:a4:ff:9a:33:d3:53:29:0a:b4:85:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:A4:2F:38:E0:24:57:D5:13:10:00:9B:38:C1:C1:5B:47:C0:99
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030623a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:6e:fd:72:c4:d8:1d:8b:fc:eb:22:f0:66:c9:c9:f7:38:
         92:cc:0a:4c:b0:ca:a4:97:bb:bc:bf:2f:35:0f:31:92:a0:71:
         37:7c:0f:d3:04:bb:ae:ae:b8:05:4d:20:f6:34:80:4a:27:55:
         92:47:85:6d:eb:18:bb:aa:1d:10:69:e7:a0:e0:99:69:44:d3:
         1e:a9:eb:ba:c2:5a:a3:f0:8f:32:ef:97:aa:d7:28:8d:00:5d:
         99:6c:10:06:37:63:87:1f:d1:b2:37:58:18:69:98:4c:2f:83:
         79:ac:9d:37:9a:83:90:97:02:f6:a1:14:b7:8e:ff:e8:0a:a1:
         60:1e:7c:c2:7f:df:c4:14:ea:1a:16:9f:38:bb:85:55:09:b8:
         57:11:0c:87:b0:52:af:ac:33:f0:91:7b:79:ad:78:f0:05:7a:
         76:a7:83:ef:f7:ed:a8:c8:8e:1e:e3:f5:5c:93:36:b2:f6:ae:
         a7:01:96:25:28:c2:d7:c6:8d:46:2c:7c:76:61:76:3b:6c:8e:
         e4:0b:5c:21:20:4d:1e:5f:e6:0d:b0:fa:88:eb:29:4a:9a:94:
         79:25:48:dc:e9:40:89:5b:d1:0b:7d:dc:e7:cf:3a:8b:7e:d5:
         5c:90:f2:ce:72:56:d2:1d:f1:45:60:75:8c:c8:d4:a2:06:b1:
         c6:55:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org