Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          fnMjqT8FX/HbRZIXfRXqzwjbAEt9skB3BiPMxThtf/M=
Subject key identifier:   F3:8E:2C:3F:0C:E7:D9:0B:1B:AE:4E:DF:E4:48:2D:0A:50:69:C3:AC
Certificate issuer:       /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial:       7C614419FCC8F651A13F5293B1A763A82F803DEA
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 04 Apr 2024 18:18:25 +0000
ROA not before:           Thu 04 Apr 2024 18:13:25 +0000
ROA not after:            Thu 03 Apr 2025 18:18:25 +0000
asID:                     262617
IP address blocks:        2804:3d74:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
                          rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:61:44:19:fc:c8:f6:51:a1:3f:52:93:b1:a7:63:a8:2f:80:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
        Validity
            Not Before: Apr  4 18:13:25 2024 GMT
            Not After : Apr  3 18:18:25 2025 GMT
        Subject: CN=F38E2C3F0CE7D90B1BAE4EDFE4482D0A5069C3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:92:b6:ca:b9:b2:1b:b8:7f:ba:f4:14:e8:
                    2c:3b:20:2b:e2:85:25:ea:f1:00:66:12:db:e2:ce:
                    cf:86:97:cc:e2:a7:f5:d3:b8:2a:86:0b:17:fc:00:
                    39:e8:4f:f4:58:bf:72:08:40:df:d2:52:bb:67:1d:
                    76:32:2d:cb:3e:4e:b7:c9:00:94:bb:cd:e6:c7:19:
                    9d:e3:15:27:ce:83:eb:0d:8b:97:3c:d0:a7:64:f1:
                    83:4a:55:81:a1:6e:03:f1:68:bb:a6:d8:d8:da:81:
                    6f:a3:6e:5e:15:70:56:f4:16:cf:8d:ac:4a:e3:ee:
                    e4:59:cb:af:b4:37:77:52:a9:ec:bc:28:69:41:60:
                    55:80:19:13:fb:d0:6f:36:8f:c4:99:4b:97:d5:a5:
                    79:62:5a:e1:3b:43:d1:1b:af:89:39:fb:e8:71:03:
                    f3:ca:72:73:84:fb:f7:72:41:10:55:7a:5a:36:e6:
                    17:6d:e5:93:34:4c:6d:9b:5f:39:50:06:a3:24:75:
                    78:0f:24:69:19:f4:23:05:93:46:be:23:a3:b3:70:
                    47:b7:f6:f7:cb:f0:e3:e4:46:d5:ae:ab:e5:62:60:
                    1e:9f:7a:94:b0:e8:90:79:43:57:08:66:f1:d3:05:
                    63:fb:a6:0d:22:e7:da:64:38:e6:62:28:06:74:52:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8E:2C:3F:0C:E7:D9:0B:1B:AE:4E:DF:E4:48:2D:0A:50:69:C3:AC
            X509v3 Authority Key Identifier:
                keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d74:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:6e:aa:81:35:f6:ba:b0:8e:9e:82:e6:98:b0:5f:4c:20:df:
         4a:fd:61:d4:e5:ad:13:36:3b:bf:57:23:4a:fd:3b:98:d9:25:
         94:86:64:6c:ab:b7:a2:10:c7:96:83:66:62:93:5b:98:9b:86:
         e9:9a:cf:4e:80:4b:6c:55:71:65:48:71:0e:a3:40:ff:5a:d0:
         77:71:91:8f:d7:0f:8a:83:62:d1:37:87:9b:1d:75:1b:e0:b2:
         5c:19:bb:be:a6:ab:8a:d6:00:24:42:3c:43:50:6a:40:c8:20:
         89:b3:9b:8f:1a:dd:f7:92:5a:7b:c3:98:da:61:8b:e8:e5:1c:
         86:e4:16:f7:57:bb:65:9e:2c:4a:c0:f6:f4:e6:7f:ac:d4:80:
         53:3e:f4:4f:39:cf:79:6b:3e:f8:71:10:06:9c:d3:f1:24:4c:
         3b:c6:20:ab:9c:5a:ef:39:52:37:dc:d1:f6:2e:cf:4d:9e:e2:
         42:06:7e:87:58:e0:bf:4d:a4:94:5a:98:7c:43:b1:00:f2:84:
         4e:3c:18:7f:99:23:e7:7a:06:bb:a3:08:13:96:60:25:54:df:
         22:ba:b3:5f:46:4b:b9:08:04:c2:2a:12:39:82:39:25:29:d0:
         73:95:b0:63:3e:9c:a0:26:f6:3f:f5:1f:c3:48:50:ea:05:68:
         c4:92:55:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:19 2024 by rpki-client on console-ams.rpki-client.org