Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          K1dq9j88/1ybXF5q1Pa/IpRJ1qn2Gv6syJBvPZsZRdY=
Subject key identifier:   71:7B:43:29:A5:24:9F:96:04:E8:9B:27:69:AF:7B:D6:C6:4D:43:6C
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       7E87C6243B6FD298855B54EF7F5D301825A7953F
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:59 +0000
ROA not before:           Mon 24 Jun 2024 17:39:59 +0000
ROA not after:            Mon 23 Jun 2025 17:44:59 +0000
asID:                     265141
IP address blocks:        2804:2b38:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:87:c6:24:3b:6f:d2:98:85:5b:54:ef:7f:5d:30:18:25:a7:95:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:59 2024 GMT
            Not After : Jun 23 17:44:59 2025 GMT
        Subject: CN=717B4329A5249F9604E89B2769AF7BD6C64D436C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:81:43:a2:6a:52:a9:9f:2b:4a:a3:94:3c:
                    9f:b7:80:37:04:97:1c:ff:25:52:3d:fb:08:94:14:
                    1d:31:3a:7d:83:c4:0b:1e:01:e3:6f:0b:41:91:ad:
                    03:29:22:a2:8a:f4:36:df:73:5e:f1:80:bf:2d:99:
                    4e:59:e0:ae:60:e8:e9:c3:2c:71:7a:fc:50:64:f8:
                    bd:a2:57:0e:7b:bf:50:65:71:a6:20:16:6d:bb:52:
                    d9:8f:ed:2c:5f:6b:e6:cc:78:0c:30:60:3a:47:19:
                    0a:f5:db:e7:08:f3:c5:b2:b3:3c:e7:16:72:8c:be:
                    bc:21:13:de:7e:d7:65:6e:dd:87:ad:f0:be:00:71:
                    cc:ef:aa:48:8c:f2:5d:15:c7:a2:2a:99:ce:0a:8b:
                    46:94:e3:62:4c:7d:d2:72:bd:ec:e9:87:3e:58:6d:
                    74:4f:64:25:9c:84:8c:52:6b:2b:77:f3:7f:96:98:
                    28:79:8a:9e:43:ec:b0:8e:23:9e:62:d1:ec:6b:b0:
                    74:17:ea:be:12:cb:de:66:36:2c:2f:be:1c:60:8a:
                    4f:0a:35:33:08:87:7b:f7:57:b5:f5:bb:16:3f:20:
                    3d:84:de:27:a2:7f:5e:11:96:25:bd:1f:ad:cd:9e:
                    40:98:4b:e7:6b:93:75:bd:1c:4f:41:97:8e:d0:7f:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:43:29:A5:24:9F:96:04:E8:9B:27:69:AF:7B:D6:C6:4D:43:6C
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:17:eb:02:c9:22:9f:7c:6e:85:73:3c:69:dd:e0:7d:32:35:
         79:d9:68:ab:0f:11:21:ca:57:41:62:02:bc:86:3f:71:75:57:
         40:8f:7e:37:dd:f2:9a:3b:eb:e4:33:2f:42:03:38:79:ed:98:
         62:59:3d:ef:08:59:6b:80:03:2e:d4:f1:d2:09:fd:35:02:ee:
         96:20:a1:97:41:9e:8a:f1:cb:c1:6c:8d:c5:87:98:ce:98:bf:
         8a:d9:96:49:9f:4b:c0:6c:d0:c1:ce:1a:e8:e5:91:e8:0b:90:
         0f:4c:5b:2d:8f:e8:ad:52:d3:a8:f4:be:ed:6d:83:6d:58:78:
         11:b6:99:d2:25:f8:ad:9d:bf:22:87:16:1b:df:8a:0b:82:72:
         c3:6f:48:a5:b7:4a:4b:d6:66:48:cc:e9:af:c9:4b:05:86:ab:
         40:54:9e:e9:02:d8:24:8b:36:db:60:1a:51:a1:6c:63:09:92:
         db:f8:82:b2:34:24:72:ee:0c:df:3e:9a:31:70:07:cc:09:a4:
         5d:82:6d:a4:bb:4b:87:01:ae:1b:f4:6b:e3:05:db:36:8c:3a:
         88:5d:7d:ea:d9:e5:4b:cc:4c:8e:73:33:6a:6d:97:1f:5c:cb:
         a4:ea:58:af:b3:c5:65:4f:32:34:0b:bc:d8:d5:a8:ce:57:f9:
         87:b3:4b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:10 2024 by rpki-client on console-fra.rpki-client.org