Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/323830343a313466383a3a2f33322d3438203d3e20323633333632.roa
File:                     323830343a313466383a3a2f33322d3438203d3e20323633333632.roa (raw, json)
Hash identifier:          CiknFJAy1hLlH97iMLjsEIBQqCTbs+YlJAn6isQkuEs=
Subject key identifier:   3B:40:E2:18:76:6F:0A:0C:F8:C9:5C:C2:2A:60:3A:1E:83:70:57:F5
Certificate issuer:       /CN=D04A2BA80F368597BB2029B3E31276E45382A900
Certificate serial:       3E0FD64449E68777FAC105ABC09BD1CE30DA753F
Authority key identifier: D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/323830343a313466383a3a2f33322d3438203d3e20323633333632.roa
Signing time:             Mon 13 May 2024 22:18:24 +0000
ROA not before:           Mon 13 May 2024 22:13:24 +0000
ROA not after:            Mon 12 May 2025 22:18:24 +0000
asID:                     263362
IP address blocks:        2804:14f8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl
                          rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 06:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0f:d6:44:49:e6:87:77:fa:c1:05:ab:c0:9b:d1:ce:30:da:75:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04A2BA80F368597BB2029B3E31276E45382A900
        Validity
            Not Before: May 13 22:13:24 2024 GMT
            Not After : May 12 22:18:24 2025 GMT
        Subject: CN=3B40E218766F0A0CF8C95CC22A603A1E837057F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:16:fc:d2:9f:59:9d:fd:af:24:2a:9f:55:af:
                    5f:b8:fa:44:b7:c3:14:79:85:5d:a1:e2:1e:74:ae:
                    b0:d1:8f:9c:8a:f8:ff:c6:6a:1c:af:96:56:06:95:
                    78:e4:ac:ae:43:02:82:7f:74:31:50:d9:14:4c:22:
                    3a:48:76:70:d9:36:e3:f5:ff:28:58:b7:e0:60:7a:
                    ff:23:28:18:0e:ac:e0:97:49:d9:62:e8:6c:2e:8c:
                    80:f0:2c:96:e9:a1:89:29:a5:5b:0a:cb:58:92:49:
                    e9:e7:eb:52:cb:df:74:91:f8:30:9f:b3:9c:85:e4:
                    31:86:87:01:c0:fb:29:24:56:11:b0:59:6f:22:e3:
                    38:8a:dd:99:75:35:a4:de:17:76:a4:40:f1:de:2d:
                    77:c9:02:b1:52:84:44:7e:94:17:50:5e:84:10:38:
                    15:06:53:41:2b:7b:05:23:68:1c:42:b8:f0:86:d3:
                    22:f7:0e:dd:4a:7a:8d:1e:3f:12:ff:e0:43:46:74:
                    6f:8b:e1:25:aa:e2:1f:3b:aa:7b:6d:01:73:24:80:
                    2e:b1:d2:c8:a6:57:54:e3:bb:45:9e:f8:c2:7f:ac:
                    a0:b0:5a:2a:e5:52:59:0d:6c:eb:76:03:8a:14:27:
                    e6:45:24:e1:08:1a:36:95:5e:23:f9:80:a3:32:92:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:E2:18:76:6F:0A:0C:F8:C9:5C:C2:2A:60:3A:1E:83:70:57:F5
            X509v3 Authority Key Identifier:
                keyid:D0:4A:2B:A8:0F:36:85:97:BB:20:29:B3:E3:12:76:E4:53:82:A9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/D04A2BA80F368597BB2029B3E31276E45382A900.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04A2BA80F368597BB2029B3E31276E45382A900.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/323830343a313466383a3a2f33322d3438203d3e20323633333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:95:dd:9e:0b:51:b0:94:d9:72:48:d3:a0:a1:44:d8:dc:08:
         d1:13:89:73:93:c7:be:e1:4c:34:e2:c1:c7:08:dc:7d:44:b2:
         ea:05:0f:56:6f:5e:18:2e:2a:69:ac:03:61:b8:e9:e9:1d:e8:
         30:54:25:d4:e6:8f:cc:64:42:18:8c:c0:c5:ae:75:6b:fe:6f:
         67:cc:ad:e3:99:1d:5b:98:13:60:03:d2:ec:4d:57:3a:12:06:
         d1:c3:c5:33:27:1f:8c:5b:6b:ba:eb:de:32:73:04:b2:6c:7d:
         91:94:df:86:0c:cb:5c:41:c9:0a:1c:0c:ae:a1:8b:2c:04:e2:
         28:f1:48:63:4b:15:dd:35:02:7e:e8:4e:95:9e:39:ad:b5:4a:
         d8:ed:9e:c3:b3:37:04:85:29:08:a2:f6:02:2c:85:89:13:9c:
         f2:06:4b:7d:e0:cb:70:b9:b9:c1:14:1e:af:bc:58:f8:6d:0d:
         99:df:43:3f:dc:0f:27:2f:25:08:3a:b4:d7:ab:46:53:56:0a:
         39:6d:0a:13:b0:8b:03:44:e3:30:f2:20:0f:cb:21:09:49:6f:
         17:30:f9:70:74:fc:1c:45:41:a4:70:c3:1b:7b:9f:6f:94:31:
         f9:42:3c:e5:d3:c3:aa:4d:1d:f7:e6:1c:09:d4:45:60:20:54:
         0b:53:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:31 2024 by rpki-client on console-ams.rpki-client.org