Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa
File:                     323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa (raw, json)
Hash identifier:          IztZjxNMOUVNVvJxQrV/SzBlfVFW14zAiN80x2avzfM=
Subject key identifier:   AB:2E:5E:D7:45:98:43:ED:60:69:FE:FD:E1:0D:C1:A8:15:AE:4E:57
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       2AFE08428655901DB2F4C16E3B5B8A2466461929
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:56 +0000
ROA not before:           Mon 24 Jun 2024 17:39:56 +0000
ROA not after:            Mon 23 Jun 2025 17:44:56 +0000
asID:                     265141
IP address blocks:        2804:2b38:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:fe:08:42:86:55:90:1d:b2:f4:c1:6e:3b:5b:8a:24:66:46:19:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:56 2024 GMT
            Not After : Jun 23 17:44:56 2025 GMT
        Subject: CN=AB2E5ED7459843ED6069FEFDE10DC1A815AE4E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:3d:e9:cd:05:87:46:84:46:5e:20:0d:fc:
                    21:56:f3:f4:3b:80:c8:7d:01:20:82:9e:67:35:3a:
                    f4:b3:7b:0d:05:7b:ce:23:b4:d6:db:c1:66:f3:05:
                    61:6b:de:3b:e3:4d:e8:c9:cb:93:a3:73:70:43:b4:
                    3b:d6:f8:0d:19:a5:82:40:19:c6:0b:fe:aa:33:f2:
                    11:94:0b:42:e3:f3:ad:a1:ab:82:73:1a:99:53:58:
                    1a:d4:e3:2c:fb:6a:d0:ce:fa:58:e3:f8:65:1f:d0:
                    df:e1:d5:a0:c2:8a:dc:25:e9:7e:0f:3a:0f:2c:ac:
                    50:11:97:d0:66:10:73:52:9f:34:4a:12:ea:95:a3:
                    2d:17:5f:d0:eb:02:18:33:47:9a:94:59:0b:06:93:
                    55:ea:5f:f2:2a:d9:c1:f8:6a:bc:57:b5:e1:50:5f:
                    91:d5:47:8f:4a:e1:3e:43:59:65:af:b4:b8:62:93:
                    c4:41:70:5f:1b:aa:e1:05:61:1f:95:9e:cb:ab:fc:
                    91:18:6d:55:49:35:ae:c0:fd:e6:b1:94:a2:f8:04:
                    10:04:5e:f4:33:ab:04:1e:11:e2:02:2d:09:dd:2f:
                    bf:94:01:8d:cb:aa:cf:78:22:91:fa:c3:f5:40:7f:
                    26:1b:88:35:51:78:a6:9d:42:f4:7f:cb:74:fa:d6:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:5E:D7:45:98:43:ED:60:69:FE:FD:E1:0D:C1:A8:15:AE:4E:57
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5e:72:26:9d:02:93:d2:e9:91:3b:f9:86:ee:a3:9f:9c:95:42:
         74:4f:04:b2:11:19:f1:28:62:5c:79:75:ec:77:c2:41:fe:59:
         53:f0:00:98:50:85:a8:33:97:63:a4:f0:a1:92:e0:98:08:d8:
         d8:be:ee:f2:e4:1d:15:3a:09:e5:f3:0d:b1:bb:d9:ba:98:04:
         57:95:26:ef:34:bc:b4:c8:aa:60:28:54:19:65:98:7e:6c:89:
         da:bd:fc:ad:e6:11:42:4b:b8:02:1f:65:96:3c:fe:44:79:ef:
         b1:89:c8:11:18:0a:bd:d4:56:98:90:5e:3d:ec:ae:64:85:a1:
         30:e4:a3:20:22:0d:1d:37:5a:e0:4f:37:c6:86:1a:87:b8:2c:
         e8:4d:58:15:c2:42:0c:33:f9:34:e5:9f:92:f0:e9:71:88:5f:
         8d:fa:9e:03:b5:be:74:51:cb:ed:38:82:e5:43:36:f0:67:a0:
         cc:57:1e:bd:6d:56:da:08:d4:d2:36:d7:72:e8:db:d4:72:88:
         1d:ef:3b:bf:e5:23:d0:df:c4:e3:4b:40:a8:58:10:86:0d:f2:
         c0:68:01:a5:a6:f0:ab:e3:27:32:07:c0:98:85:56:df:14:ca:
         cb:d1:fe:25:65:57:37:81:a3:6e:63:bd:b2:bf:8f:b6:56:af:
         7f:1c:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:13 2024 by rpki-client on console-ams.rpki-client.org