Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          HUehPI3ECr2+jKaZAZDFM22PxtO3Jbn001B/B+CqqPg=
Subject key identifier:   2F:C4:AF:66:2B:F4:2E:AF:2C:39:89:FB:21:FC:2D:BE:34:F0:00:E6
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       5D1E1C3222139D22BFF3AAF1486C3E96F48D6F92
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Wed 07 Aug 2024 14:53:13 +0000
ROA not before:           Wed 07 Aug 2024 14:48:13 +0000
ROA not after:            Wed 06 Aug 2025 14:53:13 +0000
asID:                     264996
IP address blocks:        2804:3124:c00d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1e:1c:32:22:13:9d:22:bf:f3:aa:f1:48:6c:3e:96:f4:8d:6f:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Aug  7 14:48:13 2024 GMT
            Not After : Aug  6 14:53:13 2025 GMT
        Subject: CN=2FC4AF662BF42EAF2C3989FB21FC2DBE34F000E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:93:91:de:cc:5a:36:99:81:56:47:8e:a4:
                    46:9d:e0:64:7a:e6:59:ee:ab:9a:c6:4c:8d:ed:90:
                    e1:7e:05:2d:a2:40:c0:58:f3:83:9d:b3:c3:fa:30:
                    75:f1:b5:65:8f:0c:35:f0:ac:e1:57:c2:78:3a:86:
                    b1:24:d6:bd:1a:7c:bb:b0:3d:25:ca:54:c0:9d:19:
                    18:c7:5a:b7:51:f3:ad:8e:7b:29:70:c7:5d:ac:62:
                    3f:32:e5:15:b0:6d:e6:ce:30:d6:8b:3f:e0:0a:7e:
                    93:28:22:23:7d:3f:3e:83:d7:94:2c:85:e1:14:77:
                    2d:08:a5:87:b3:d1:16:36:72:1e:15:fd:31:7d:10:
                    39:f9:30:70:b3:8c:43:d2:36:a7:31:31:cb:0e:fe:
                    7c:3a:e2:a5:0a:4f:6a:fd:93:89:79:a8:7e:e5:a4:
                    9d:9c:5d:be:3d:55:06:97:8a:13:47:ae:e3:cd:b5:
                    64:20:12:55:4e:f1:ac:f1:f0:3d:ba:05:f5:42:ae:
                    cd:35:07:5a:61:54:12:4e:92:90:3a:70:83:e6:dc:
                    b6:b2:4b:13:24:94:da:b1:d8:34:d1:c3:fa:14:9e:
                    49:66:f8:8c:1c:09:9d:b8:b9:14:fa:a1:59:61:e9:
                    af:c1:c7:f3:f7:76:22:85:9c:6b:36:f0:91:bc:d8:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:AF:66:2B:F4:2E:AF:2C:39:89:FB:21:FC:2D:BE:34:F0:00:E6
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633030643a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:43:17:e2:81:cc:04:67:c6:ce:a5:5b:b4:2c:1b:32:72:1b:
         6d:07:b6:3f:a5:d7:f4:b2:43:af:6a:a2:1b:79:41:29:83:c5:
         17:81:c6:3e:00:28:68:8e:9b:32:fa:12:e0:cd:5f:34:84:88:
         c5:66:34:eb:5f:b5:3f:92:44:e0:84:1f:be:41:8f:98:97:22:
         0d:ac:49:e5:4d:11:28:2d:06:c8:c5:09:6b:2a:71:a4:d7:06:
         d2:32:d8:ee:89:ad:1a:b8:bc:cc:52:8f:49:18:84:07:dd:a0:
         34:fb:87:84:36:b2:45:7f:68:57:20:65:8b:24:18:7a:a5:f7:
         f1:ae:b5:3d:71:68:f5:e7:3c:3d:77:cf:fa:e6:a6:97:25:2b:
         3b:88:73:12:35:b9:83:28:78:6b:60:23:ba:db:cf:4e:e2:88:
         c4:77:ec:74:1b:42:a2:a3:db:18:17:cc:08:84:63:af:9a:bb:
         93:16:cf:49:67:47:67:6c:bc:0a:6c:71:16:80:a2:1e:6e:b5:
         83:a4:05:17:7f:32:1f:8f:12:3c:76:d6:25:94:20:01:68:a5:
         45:87:22:39:11:6a:b3:55:4c:f9:86:05:ac:49:15:63:9d:8c:
         44:ee:b7:6c:77:ce:04:1c:10:8f:00:b6:eb:d8:0a:66:19:cb:
         50:65:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:31 2024 by rpki-client on console-ams.rpki-client.org