Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/323830343a323834343a3a2f33342d3334203d3e20323633393531.roa
File:                     323830343a323834343a3a2f33342d3334203d3e20323633393531.roa (raw, json)
Hash identifier:          i2y3xyZSZCxM8uAdt7hbwrb/RTMXVQDHErHLKkoeLGI=
Subject key identifier:   ED:F2:47:C1:4A:8E:FA:69:FF:38:C3:2F:AD:65:FD:93:C8:A8:0D:86
Certificate issuer:       /CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
Certificate serial:       339113626AB19B490858AA653D638E40F67408E7
Authority key identifier: 3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/323830343a323834343a3a2f33342d3334203d3e20323633393531.roa
Signing time:             Sun 21 Apr 2024 19:28:09 +0000
ROA not before:           Sun 21 Apr 2024 19:23:09 +0000
ROA not after:            Sun 20 Apr 2025 19:28:09 +0000
asID:                     263951
IP address blocks:        2804:2844::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl
                          rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:13:62:6a:b1:9b:49:08:58:aa:65:3d:63:8e:40:f6:74:08:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD
        Validity
            Not Before: Apr 21 19:23:09 2024 GMT
            Not After : Apr 20 19:28:09 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f1:27:62:68:e3:18:ca:3c:16:dd:b4:f9:ba:
                    c0:36:4e:4b:0d:46:66:ec:62:21:cd:76:c9:4f:70:
                    1c:ef:3c:7a:b0:2f:0b:13:bf:87:be:64:d9:24:d8:
                    9c:e6:40:b4:8f:42:7a:11:34:d9:b8:57:03:40:4d:
                    1b:34:98:7e:f5:cc:ca:02:85:e3:ab:df:b2:f3:a6:
                    df:9b:5c:f9:86:51:57:ce:a0:87:5c:87:87:5c:6a:
                    78:ca:3f:64:94:e0:41:9e:a4:0f:ec:f4:25:3a:8e:
                    2e:26:8b:9d:21:2c:7a:bd:1c:f4:4f:35:7b:73:56:
                    1b:5f:b5:ba:a6:42:fb:87:d0:ea:b4:4d:24:a8:54:
                    68:51:4a:e3:91:f9:22:ee:c4:f9:a1:9d:62:ae:0b:
                    46:a3:c9:56:80:02:9d:86:37:96:f8:62:9e:45:0a:
                    fa:c9:43:d6:d6:5b:d7:53:47:64:fa:88:08:a2:89:
                    de:ad:ee:49:a8:26:3b:e4:c8:cc:55:b2:67:a6:f5:
                    16:33:45:5f:a2:b4:98:af:81:90:02:4e:7c:06:14:
                    bb:b7:6a:b1:e5:0b:38:2b:b5:4c:bc:2e:70:e4:a0:
                    1d:b6:94:35:cd:24:c9:27:95:02:74:5c:93:0d:41:
                    6c:62:af:b9:49:a1:9a:87:66:99:32:b3:ea:60:7c:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F2:47:C1:4A:8E:FA:69:FF:38:C3:2F:AD:65:FD:93:C8:A8:0D:86
            X509v3 Authority Key Identifier:
                keyid:3E:0B:06:DA:52:F7:E7:DF:A9:E2:8E:3E:56:40:8F:89:6C:C0:7A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E0B06DA52F7E7DFA9E28E3E56408F896CC07AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/1/323830343a323834343a3a2f33342d3334203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2844::/34

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:8d:75:9e:7d:f4:5a:5d:42:6e:c4:c7:a3:cb:e3:30:74:
         be:65:42:32:16:59:5c:c4:2e:24:89:d0:03:1b:fd:76:ce:9f:
         fa:8d:b6:cc:98:0b:43:32:bd:ac:ab:98:c2:86:68:79:1e:27:
         a7:ac:f9:b8:35:cf:25:c4:a1:5d:ca:c3:4c:cf:10:9e:bc:1b:
         01:ec:15:4f:4c:03:61:e1:6e:84:3a:65:5f:13:9f:03:dc:59:
         0b:8e:fa:b7:ce:6c:04:40:31:24:07:bd:9b:f1:27:64:b1:6c:
         25:3d:10:8e:9b:17:21:c5:5b:9e:0f:31:15:2e:9b:a5:da:30:
         02:9d:c6:ee:15:25:4b:96:93:a3:77:d9:64:fb:b0:eb:12:fd:
         1f:95:23:6b:61:82:06:59:4a:75:4c:0a:a1:f4:58:fc:8e:28:
         81:bc:2d:65:45:0f:c5:71:61:1b:f9:26:51:3e:a3:07:cd:ba:
         9c:38:a5:d8:a6:63:9c:6f:1d:03:8f:81:ac:1b:fe:8e:e0:9d:
         7b:f7:56:44:d9:51:a0:00:84:d2:dc:1a:cf:cc:5f:b7:d7:8b:
         88:93:5a:a5:87:df:2b:40:90:93:39:23:0b:aa:15:82:b7:29:
         eb:21:62:3f:c5:18:4c:52:91:c9:be:51:e8:de:cc:59:a6:77:
         73:04:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:42:22 2024 by rpki-client on console-fra.rpki-client.org