Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa
File:                     323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa (raw, json)
Hash identifier:          Z5C5/v4ugwNpm9jJsOo/atkvpsd7E6yQ54lflGRY434=
Subject key identifier:   9F:31:7E:CA:DA:B3:1E:AD:AC:CE:A6:CC:91:CF:D8:7D:38:B8:AC:4D
Certificate issuer:       /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
Certificate serial:       39102925FFDB4C18E0B53D0C43973DA62B7113FF
Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa
Signing time:             Thu 27 Jun 2024 17:02:13 +0000
ROA not before:           Thu 27 Jun 2024 16:57:13 +0000
ROA not after:            Thu 26 Jun 2025 17:02:13 +0000
asID:                     266166
IP address blocks:        2804:3bb4:100::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:10:29:25:ff:db:4c:18:e0:b5:3d:0c:43:97:3d:a6:2b:71:13:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Validity
            Not Before: Jun 27 16:57:13 2024 GMT
            Not After : Jun 26 17:02:13 2025 GMT
        Subject: CN=9F317ECADAB31EADACCEA6CC91CFD87D38B8AC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:9e:db:34:b3:aa:01:f7:bb:18:f7:4a:0c:
                    2a:22:99:a3:e2:84:e2:53:13:75:c0:d6:64:c5:32:
                    0e:5e:65:6e:2b:24:26:c1:86:a8:c5:2e:76:f9:f0:
                    e6:66:95:98:b1:55:4b:5d:11:e6:bf:d6:3b:58:73:
                    a4:85:d0:f5:64:91:73:0e:5b:86:d9:2c:a9:7c:52:
                    bf:2a:54:a0:9b:d5:f2:58:96:14:f7:97:11:1b:20:
                    da:4e:81:50:ac:30:80:68:99:c0:81:5e:e1:02:ed:
                    26:b8:12:19:6c:ea:13:9d:0b:10:12:70:37:f7:de:
                    e2:7e:a1:e4:5e:37:c8:80:3e:bb:2c:26:8f:35:eb:
                    c0:19:5b:3b:3f:39:a0:e4:5d:f8:8d:f5:64:b8:6a:
                    e1:e8:c1:de:f1:80:24:46:e6:95:fa:81:b8:84:8a:
                    5f:79:ff:4f:ec:c3:16:6f:b1:60:e6:3b:26:2a:75:
                    9d:3c:97:20:fb:25:38:60:2d:da:14:d3:3a:78:47:
                    33:5c:1a:88:7d:2e:d6:98:2c:90:e0:aa:1f:79:02:
                    05:62:27:75:10:6e:40:12:c8:bd:2f:5f:da:d7:43:
                    d4:ae:14:b1:8b:ec:c8:06:29:1a:6f:97:be:ab:7e:
                    db:f5:4e:70:c6:d0:a7:a0:8b:a4:e5:95:68:75:e4:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:7E:CA:DA:B3:1E:AD:AC:CE:A6:CC:91:CF:D8:7D:38:B8:AC:4D
            X509v3 Authority Key Identifier:
                keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3130303a3a2f34322d3432203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:e1:4f:9a:d9:2a:ab:fa:0f:1e:8f:11:bd:4c:22:57:ac:
         46:71:5a:ec:01:40:ba:a3:1a:7c:d5:0f:a9:a4:44:40:a4:e4:
         00:ed:56:9f:b4:09:ba:6b:4d:90:5b:d8:60:75:59:09:ef:f9:
         87:a1:a5:93:cf:70:b2:9a:48:c4:67:19:d1:09:a8:53:46:61:
         ce:fd:59:59:9f:9e:ad:94:86:51:5b:dc:86:51:d8:b0:de:0f:
         cf:06:25:b1:60:08:75:26:e0:68:63:df:19:c9:22:53:3c:8d:
         97:fa:ee:1e:d6:1b:79:c4:d8:db:59:d8:73:25:35:b0:ce:78:
         61:93:d0:31:83:99:74:3f:2d:7f:03:1c:80:74:c8:5f:2d:f8:
         79:8b:77:35:e6:ff:ed:09:f3:d4:7b:13:12:67:cb:36:62:2a:
         f1:77:8f:40:f8:63:45:27:f0:3d:70:0d:4c:42:57:f2:57:07:
         a5:65:4a:52:c8:68:0d:a7:f7:43:52:48:5d:57:f4:11:fe:da:
         cf:bb:b2:80:8b:93:14:6d:95:0f:0e:93:a4:6c:ae:79:fd:0c:
         34:2c:9b:cc:d0:fd:42:76:2a:1f:53:25:a4:29:da:22:e9:6c:
         9c:9a:b6:6f:90:a6:75:54:1a:3e:80:9e:2f:64:3f:9e:1b:b9:
         a1:e4:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org