Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa
File:                     323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa (raw, json)
Hash identifier:          qrmKbpB2f9pTLZcgRRKPAHx8mQqhcGf8wE+eMXI+ehY=
Subject key identifier:   D7:FE:64:0D:4C:A8:A8:4C:E2:DF:67:BC:61:40:0D:71:6E:BB:4A:39
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       797E80A7A8688F0459657CD457090D3CBD7DA2F9
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa
Signing time:             Tue 27 Aug 2024 16:42:51 +0000
ROA not before:           Tue 27 Aug 2024 16:37:51 +0000
ROA not after:            Tue 26 Aug 2025 16:42:51 +0000
asID:                     264996
IP address blocks:        2804:3124:c016::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7e:80:a7:a8:68:8f:04:59:65:7c:d4:57:09:0d:3c:bd:7d:a2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Aug 27 16:37:51 2024 GMT
            Not After : Aug 26 16:42:51 2025 GMT
        Subject: CN=D7FE640D4CA8A84CE2DF67BC61400D716EBB4A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:63:c4:fe:ca:ea:f8:cb:6b:70:4c:56:cb:31:
                    c1:f5:fa:57:04:45:02:c1:34:c2:a1:14:62:00:da:
                    43:12:7a:07:ef:1b:07:7a:0e:c4:c4:1a:74:fc:b5:
                    13:71:41:04:98:a4:31:5e:79:e6:ff:77:d3:b4:21:
                    a6:0e:b5:59:01:6d:c6:76:43:fd:53:15:43:ae:48:
                    67:d3:8c:a2:1a:8d:3c:76:ed:27:ba:c2:f6:bf:75:
                    c1:53:69:da:d3:cb:88:1c:86:85:ad:cb:ae:2b:b9:
                    6e:8a:ab:0b:75:f3:f0:7c:48:de:03:4b:30:38:4b:
                    7b:be:39:98:16:25:31:b2:ad:ec:2b:61:99:7a:8c:
                    b0:74:07:8a:74:2c:c6:1a:27:b5:ec:ed:92:8b:e5:
                    1a:47:7e:23:62:3d:6f:d3:2b:f6:44:ff:70:f6:d3:
                    91:30:b5:ed:71:64:df:5b:cd:81:3a:7a:0f:e9:31:
                    e2:2b:ab:75:69:03:fe:49:08:50:06:62:65:7a:dd:
                    a9:47:7b:ad:37:9a:ad:ed:0c:31:e2:6c:5b:a7:95:
                    78:f0:d9:20:15:b1:ee:4e:14:70:1c:87:b2:b3:d6:
                    a3:89:f1:92:6f:b0:36:c6:61:ff:13:a0:19:93:13:
                    21:bc:21:13:37:54:e8:30:5f:8c:46:49:77:a4:c3:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FE:64:0D:4C:A8:A8:4C:E2:DF:67:BC:61:40:0D:71:6E:BB:4A:39
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/323830343a333132343a633031363a3a2f34382d3438203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3124:c016::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:07:98:d5:f2:08:12:1d:80:11:eb:17:13:0f:77:ed:07:
         37:f9:ec:ef:6a:ee:8f:55:10:57:3f:0c:1b:a2:29:0d:2d:8a:
         b5:94:9e:01:8f:ba:b5:6d:d9:b7:82:7a:31:eb:2b:bb:73:ec:
         a0:4a:7d:33:a8:0b:3f:22:ad:4b:1f:f3:03:89:43:e1:93:26:
         16:d2:0f:b2:5d:82:3a:a6:65:f5:65:64:26:ec:bf:3c:8f:41:
         d2:ba:83:ea:c5:95:64:f3:a3:f3:72:1e:dd:e9:a3:92:5c:86:
         66:c3:0a:00:3b:12:d6:6c:33:30:fa:8d:9b:58:bd:04:e2:a1:
         01:84:6f:76:61:59:20:81:d3:b8:56:ee:df:fb:a2:c9:7e:76:
         40:50:0b:3c:c7:85:a4:7b:1f:61:ed:a6:46:82:42:07:8d:53:
         66:e7:b4:64:4b:46:74:52:ce:4d:e6:6e:c2:f3:21:a8:cf:3c:
         9f:40:e2:81:84:56:05:83:41:26:cb:af:54:15:87:2a:82:06:
         34:5e:ba:1b:91:36:af:50:1b:f4:4d:6e:89:0d:31:a1:b5:a6:
         71:9b:1e:7e:03:15:47:93:70:0b:7c:96:95:2a:35:10:cc:4c:
         bc:0e:18:fe:9b:b8:fa:f2:a1:cc:8c:04:58:6c:18:61:dd:8f:
         2f:60:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:15 2024 by rpki-client on console-fra.rpki-client.org