Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa
File:                     323830343a313933343a3a2f33332d3333203d3e203631373738.roa (raw, json)
Hash identifier:          BYrafSDWw7cW4dCICVil6yUohrIzkymhPTKzvmZly2c=
Subject key identifier:   3F:6B:95:5C:A5:E6:3D:2E:84:2D:B2:E9:85:DD:FF:1B:CE:E7:98:31
Certificate issuer:       /CN=3496860CED46E82860498DD946601D168147920B
Certificate serial:       383E81B28680F508E0DA44EF4BAA8E27EAC21AAA
Authority key identifier: 34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa
Signing time:             Wed 10 Jul 2024 16:35:38 +0000
ROA not before:           Wed 10 Jul 2024 16:30:38 +0000
ROA not after:            Wed 09 Jul 2025 16:35:38 +0000
asID:                     61778
IP address blocks:        2804:1934::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl
                          rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3e:81:b2:86:80:f5:08:e0:da:44:ef:4b:aa:8e:27:ea:c2:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3496860CED46E82860498DD946601D168147920B
        Validity
            Not Before: Jul 10 16:30:38 2024 GMT
            Not After : Jul  9 16:35:38 2025 GMT
        Subject: CN=3F6B955CA5E63D2E842DB2E985DDFF1BCEE79831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:88:1e:5b:fc:38:26:31:5c:13:11:71:de:77:
                    d0:03:b1:ac:37:82:64:0d:44:0e:33:01:22:00:83:
                    3e:c9:4b:c9:56:6c:5e:f9:20:a7:12:0e:23:c7:26:
                    81:f3:a7:3e:34:2c:06:93:da:f2:51:fd:2d:09:e3:
                    d8:3c:b5:10:ca:f3:1b:15:be:75:5b:37:37:a7:b1:
                    9d:6e:26:15:b4:f9:83:b1:20:a9:ff:4e:66:c3:ea:
                    01:db:c6:bf:8b:33:a8:ef:04:9d:10:6e:52:91:d8:
                    81:04:41:28:bc:a5:10:28:b8:45:fa:87:b9:c0:0f:
                    19:a9:e8:8f:b3:42:9a:15:c6:86:46:da:ac:c1:b5:
                    c4:2e:77:83:2a:ba:0c:5d:06:1b:3d:69:91:06:1e:
                    6c:15:ca:b8:4d:62:a6:be:d1:8b:73:d2:83:1d:a7:
                    24:43:e5:e4:1c:01:f5:fd:88:8f:96:ae:e2:bd:dc:
                    12:46:76:10:cf:dc:35:f3:18:1c:3f:20:55:d6:46:
                    e9:46:cb:10:3b:f5:70:61:2a:6c:13:ef:7b:d0:c7:
                    ae:cd:08:b2:b9:2f:ae:77:e5:78:d9:c6:e0:09:8d:
                    96:19:0f:5b:63:d9:b3:c9:57:0b:49:44:bb:f2:7c:
                    5d:e4:a3:b1:27:bd:96:27:a3:bf:72:f4:fb:72:fb:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6B:95:5C:A5:E6:3D:2E:84:2D:B2:E9:85:DD:FF:1B:CE:E7:98:31
            X509v3 Authority Key Identifier:
                keyid:34:96:86:0C:ED:46:E8:28:60:49:8D:D9:46:60:1D:16:81:47:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/3496860CED46E82860498DD946601D168147920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3496860CED46E82860498DD946601D168147920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwqpwGfq75FubY6fzEnVRh1vANUExwvLBpZcD7twBiTS/0/323830343a313933343a3a2f33332d3333203d3e203631373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1934::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:d8:a2:58:8d:e3:39:42:73:78:e3:6c:1a:49:8b:d8:df:99:
         44:a5:66:d6:cf:ea:7e:a3:12:ba:0f:84:aa:70:38:65:ff:24:
         70:2a:a4:b6:25:cd:f2:91:55:d2:de:2a:04:aa:5d:43:61:16:
         7a:e5:ff:b9:e4:ee:56:b6:42:9d:84:aa:62:8f:fe:f8:0d:5d:
         3e:69:04:32:17:83:eb:12:3e:53:c3:e2:c1:b5:5e:3d:fa:8a:
         90:ce:59:5f:ac:59:57:92:47:1d:87:81:74:6b:c2:19:ac:d2:
         44:47:b5:91:f6:9c:7b:c1:b1:69:eb:70:c8:82:ed:93:a9:f4:
         3d:6f:ae:94:25:a1:70:20:1e:24:cc:a4:84:11:45:37:b3:eb:
         4e:aa:c7:52:45:bf:d4:22:bc:2f:40:7a:14:90:79:10:6b:66:
         4d:d1:ee:7a:7d:3e:e5:df:89:8b:84:06:f8:ed:b5:23:ad:cd:
         bf:f6:51:ce:50:92:27:d7:89:47:c7:8b:d0:2f:b9:82:95:8a:
         05:8f:b6:60:0f:5a:8a:9a:48:72:55:84:3c:53:f8:0c:65:88:
         82:2e:93:c9:46:d4:16:3f:5a:47:8e:52:a7:24:f9:21:d7:68:
         0e:36:95:78:49:2e:a2:90:f3:76:6e:d9:3c:d5:91:ff:d9:49:
         f2:6f:f3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:35 2024 by rpki-client on console-ams.rpki-client.org