Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/323830343a326337633a3a2f33322d3438203d3e20323635323232.roa
File:                     323830343a326337633a3a2f33322d3438203d3e20323635323232.roa (raw, json)
Hash identifier:          r4bdzqFPAbOd5ADvjGpaSN6mr6j4AnypdT+fgRODFsY=
Subject key identifier:   F0:65:FC:D2:D2:C0:9D:70:0B:1C:0D:34:BE:5F:F7:C5:35:27:11:E5
Certificate issuer:       /CN=3BA0E4707E0361E96A25CFBC6104551202B34011
Certificate serial:       51746363739C46D8652D9AB72B6569C00D5CB8CE
Authority key identifier: 3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/323830343a326337633a3a2f33322d3438203d3e20323635323232.roa
Signing time:             Thu 04 Apr 2024 14:42:44 +0000
ROA not before:           Thu 04 Apr 2024 14:37:44 +0000
ROA not after:            Thu 03 Apr 2025 14:42:44 +0000
asID:                     265222
IP address blocks:        2804:2c7c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl
                          rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:74:63:63:73:9c:46:d8:65:2d:9a:b7:2b:65:69:c0:0d:5c:b8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA0E4707E0361E96A25CFBC6104551202B34011
        Validity
            Not Before: Apr  4 14:37:44 2024 GMT
            Not After : Apr  3 14:42:44 2025 GMT
        Subject: CN=F065FCD2D2C09D700B1C0D34BE5FF7C5352711E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:0a:29:97:ae:ff:ae:d5:51:5c:cc:07:9b:
                    cd:8e:96:4e:26:01:50:19:e6:66:aa:ee:e8:50:66:
                    54:19:a5:6c:5b:76:e2:91:c2:4d:d4:4b:07:36:9d:
                    83:9b:5e:a8:a3:99:ed:c9:1d:94:c5:51:d5:a2:5b:
                    b6:4c:a0:d3:4b:54:7a:65:8d:91:51:cb:53:6c:aa:
                    06:84:de:03:c7:91:e5:67:6b:de:2e:5b:ed:2b:4b:
                    ab:d5:58:b7:ba:23:06:b0:1d:75:dd:0c:86:8c:98:
                    75:73:f1:58:5d:ba:91:c6:92:76:20:03:78:0e:fb:
                    f1:68:75:35:46:ae:79:1a:f9:1e:53:76:8a:4c:bc:
                    15:6f:1e:99:c1:0c:c9:23:72:76:14:1f:29:f3:f3:
                    73:50:b2:49:b8:22:20:f8:1e:9b:aa:ac:60:10:44:
                    e8:8c:93:00:77:2c:17:c6:f6:59:1a:fe:e5:70:1e:
                    2e:dc:0a:e3:a4:b7:14:99:08:a6:f9:6c:76:27:75:
                    56:76:e3:12:15:5c:93:52:7f:ea:8d:11:fd:03:70:
                    14:f1:5b:62:e4:37:24:1a:29:fd:ed:cf:6b:3e:87:
                    8f:fa:2c:45:5b:20:34:93:00:40:ff:d9:88:cf:35:
                    c1:a4:b3:25:5e:7c:fb:11:98:74:c6:e2:10:db:36:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:65:FC:D2:D2:C0:9D:70:0B:1C:0D:34:BE:5F:F7:C5:35:27:11:E5
            X509v3 Authority Key Identifier:
                keyid:3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/323830343a326337633a3a2f33322d3438203d3e20323635323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c7c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:8d:d6:d2:45:2d:6e:3a:cc:8a:16:ea:65:a3:96:9f:f2:
         e7:f3:fc:09:c7:21:42:3d:0c:b7:52:80:36:19:3c:e5:17:f9:
         30:27:a5:33:af:b3:f1:bd:d1:30:91:3f:b4:76:ac:ff:3c:13:
         42:d0:34:52:ad:e3:f5:7f:b0:7f:28:c5:c5:44:83:84:c5:aa:
         10:0d:d8:3a:e7:7d:1e:a1:12:03:c1:23:26:3d:a2:45:bc:b1:
         d6:b4:44:10:3d:fc:3d:23:95:eb:ac:22:75:20:f2:ec:ee:92:
         ab:2e:6f:07:0e:8c:f0:ba:15:ed:b7:48:c6:df:dd:68:67:a5:
         3e:a3:90:47:08:95:45:8b:fd:3b:dd:25:9d:92:c8:e3:d8:0a:
         a0:ef:33:74:67:8f:e6:4a:5d:c2:46:93:17:6c:5e:6e:01:e7:
         92:d9:29:cf:ac:5a:98:f8:07:75:a4:1b:23:ba:49:b2:b0:bf:
         60:95:ba:16:2e:32:9f:f9:a7:fc:ab:74:0e:ea:0b:30:27:f0:
         00:f5:ae:a4:49:95:49:40:aa:b3:52:31:42:7d:13:f8:f2:76:
         69:d3:9c:61:12:cc:05:a8:24:dc:fb:c3:ee:78:58:c8:4d:2c:
         03:e9:fe:eb:ea:05:da:e4:88:51:9b:e9:4f:fa:45:12:be:72:
         d9:99:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:28 2024 by rpki-client on console-fra.rpki-client.org