Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130313a3a2f34382d3438203d3e20323636353332.roa
File:                     323830343a336437343a3130313a3a2f34382d3438203d3e20323636353332.roa (raw, json)
Hash identifier:          usRShXZgfxyPdG5HOwQa+SXyCZ7QBAnlqM1g2No2lY8=
Subject key identifier:   4F:34:01:5F:2F:A0:68:4A:9A:0A:02:8D:63:63:B1:3A:83:72:68:40
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       52E6CC94A28D9F9BFE7E79B1A11949712794FFC9
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130313a3a2f34382d3438203d3e20323636353332.roa
Signing time:             Thu 04 Apr 2024 18:18:26 +0000
ROA not before:           Thu 04 Apr 2024 18:13:26 +0000
ROA not after:            Thu 03 Apr 2025 18:18:26 +0000
asID:                     266532
IP address blocks:        2804:3d74:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 03 Jul 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e6:cc:94:a2:8d:9f:9b:fe:7e:79:b1:a1:19:49:71:27:94:ff:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:26 2024 GMT
            Not After : Apr  3 18:18:26 2025 GMT
        Subject: CN=4F34015F2FA0684A9A0A028D6363B13A83726840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:8e:8e:d3:e2:ca:98:83:ce:24:b8:95:1d:
                    9e:e4:47:ae:9d:1b:59:9e:e1:5b:ff:64:c9:65:1d:
                    29:ae:48:c2:ab:70:44:18:5d:24:b3:91:4c:10:74:
                    24:7d:c0:cb:dc:cb:a6:57:91:39:87:70:71:0c:8e:
                    65:c2:71:61:b6:42:bb:eb:62:ad:79:a6:7a:9f:8e:
                    a0:2c:1c:0c:1a:eb:73:7d:c7:df:a5:92:59:1f:2e:
                    b4:fc:fa:14:b4:73:df:89:fa:2a:38:a0:b3:70:64:
                    d4:48:b8:cc:b0:ad:85:77:37:bb:e0:36:49:2f:1a:
                    47:20:ad:09:72:a3:49:8c:b5:fd:fd:f9:b3:f8:37:
                    26:88:d6:e6:a0:f8:45:3e:e3:37:23:89:1f:3e:4d:
                    cf:25:6c:4e:6c:54:9e:a6:63:1e:b5:ea:9e:30:33:
                    5b:4c:fb:50:55:2f:eb:3b:e7:a7:93:c4:16:eb:c3:
                    1d:2c:56:66:7a:1d:d4:0f:5c:45:48:0a:0e:6c:ad:
                    17:75:23:dd:55:59:25:c5:9b:bb:45:8b:e6:00:f6:
                    80:7d:b3:f5:67:3d:35:db:03:06:6f:8c:a6:9e:71:
                    b1:e1:d8:b5:27:9c:61:46:97:ff:55:6a:61:2f:a8:
                    d4:42:7a:f3:4c:25:16:09:fb:f4:49:b5:a7:d2:0d:
                    78:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:01:5F:2F:A0:68:4A:9A:0A:02:8D:63:63:B1:3A:83:72:68:40
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a3130313a3a2f34382d3438203d3e20323636353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:15:da:0f:ca:ef:68:e8:f7:19:50:93:34:ff:b5:fb:b7:56:
         0b:43:87:4d:61:87:5b:83:b9:4e:96:11:fe:4a:ad:c9:e9:dc:
         17:aa:2a:a5:68:25:a4:70:00:58:00:6a:50:15:cf:76:f0:c0:
         b3:dd:a2:86:00:ed:82:9e:57:86:03:56:55:d9:0c:49:68:c1:
         c8:8c:ba:6d:bd:23:71:24:c4:4c:5b:53:8d:11:43:26:fa:27:
         c3:c9:18:16:af:0b:b9:01:10:32:b2:d1:ac:73:d8:c0:20:1c:
         e2:0b:b9:ad:4d:72:7e:36:4c:87:c9:10:bf:fd:67:e0:c8:3e:
         c3:ae:21:9b:2b:e5:19:78:a8:b0:7a:14:cf:9e:d2:11:a8:8f:
         2d:85:9c:20:ed:df:14:f4:b5:9f:d1:73:b3:db:2e:92:52:0a:
         6e:e4:dd:21:08:01:f7:93:db:e6:22:72:8f:55:08:fd:14:27:
         49:95:7f:62:8e:98:1f:a7:b7:5c:d1:33:cd:c1:a2:13:5f:57:
         9b:d7:1c:84:90:24:43:7b:f3:0f:df:f9:49:68:54:9f:d2:cf:
         d1:43:24:1e:a9:25:3c:2b:21:a3:12:b8:e4:11:98:58:8c:9e:
         60:68:34:97:11:5d:d4:67:36:6a:ba:e3:03:96:2a:56:26:f3:
         c6:56:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 08:49:46 2024 by rpki-client on console-ams.rpki-client.org