Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653030303a3a2f33372d3337203d3e20323635313431.roa
File:                     323830343a326233383a653030303a3a2f33372d3337203d3e20323635313431.roa (raw, json)
Hash identifier:          xGKuCz34b+7dElQCks+Q9ivWjXSl9J0bUsTn7JCnvyo=
Subject key identifier:   96:7A:40:05:C4:25:CF:18:4D:64:F6:3C:08:DF:28:E8:47:28:1C:42
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       57BAC0FE6717F90E2C96E265ACA9DCD975F25B12
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653030303a3a2f33372d3337203d3e20323635313431.roa
Signing time:             Mon 24 Jun 2024 17:44:53 +0000
ROA not before:           Mon 24 Jun 2024 17:39:53 +0000
ROA not after:            Mon 23 Jun 2025 17:44:53 +0000
asID:                     265141
IP address blocks:        2804:2b38:e000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 01:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ba:c0:fe:67:17:f9:0e:2c:96:e2:65:ac:a9:dc:d9:75:f2:5b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Jun 24 17:39:53 2024 GMT
            Not After : Jun 23 17:44:53 2025 GMT
        Subject: CN=967A4005C425CF184D64F63C08DF28E847281C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:6b:40:a9:0b:0f:d6:41:5d:7b:a4:b1:ac:
                    cd:05:ad:7e:57:76:5a:5a:66:25:de:d1:95:3f:5e:
                    ff:2a:dc:05:80:96:7e:70:e4:79:68:b5:27:2e:69:
                    7e:70:0a:29:7a:89:66:c1:ce:d0:b9:27:1a:79:4f:
                    1c:8c:dc:be:ae:9d:a2:fa:97:78:2a:95:b3:8b:4c:
                    82:ef:f9:8d:a8:d8:10:79:85:ed:28:2c:cf:9d:09:
                    36:82:c0:11:89:a8:25:a1:9b:36:d2:c0:28:2b:9e:
                    d0:9f:b1:f4:26:32:03:d8:5c:48:68:1d:33:70:96:
                    45:90:da:35:d9:e5:2e:53:c7:0b:c9:cf:8e:56:95:
                    21:a1:32:70:4f:66:8b:f4:ca:06:3f:07:54:56:04:
                    af:49:58:fb:00:9d:6c:2a:23:84:fa:55:aa:f4:a4:
                    0f:40:98:33:41:b2:ac:28:bf:37:b7:33:6b:35:fb:
                    4f:90:88:cb:b9:4d:e0:ea:ee:fd:42:72:c1:25:dc:
                    a8:ad:4a:63:38:25:fd:e7:bc:0b:70:de:1c:21:51:
                    ee:98:cf:23:d3:5d:1b:f7:99:d9:82:03:7c:d4:de:
                    a1:9e:80:92:ba:d8:47:46:2d:00:7d:66:a7:3f:ee:
                    db:bb:ad:db:2f:90:80:d5:69:7c:9a:28:61:53:25:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:40:05:C4:25:CF:18:4D:64:F6:3C:08:DF:28:E8:47:28:1C:42
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a653030303a3a2f33372d3337203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:e000::/37

    Signature Algorithm: sha256WithRSAEncryption
         0b:c2:d3:bb:6d:91:e4:d3:59:04:79:ee:94:13:ff:98:e9:87:
         3c:38:c3:ae:2f:08:78:81:4a:6d:8d:5e:da:32:9d:de:08:fe:
         55:2b:8b:1c:b3:cb:1d:c7:c1:f1:cd:57:e5:dc:d0:5a:3a:13:
         b4:41:5d:ba:ef:eb:5d:09:75:ec:b0:fa:3f:f5:27:49:14:99:
         f4:74:54:8c:9e:e7:6b:8b:11:7f:f9:44:fa:21:f6:29:8d:30:
         f6:15:29:51:1a:be:f3:1e:ad:e4:57:53:d0:c2:12:9e:4a:9c:
         ff:29:50:3d:15:ce:b0:4f:b5:3b:f1:85:4e:f6:84:47:d8:a4:
         f9:7f:8e:5f:ba:4c:17:20:12:7d:99:e1:91:fb:31:70:f4:fb:
         66:75:79:0a:2b:40:12:8a:ae:20:67:b1:c8:01:73:e2:01:fa:
         6f:7f:4b:ff:f0:c0:a3:07:fa:db:5e:ba:bd:65:b8:61:01:68:
         26:ef:bf:a6:48:d7:d6:31:49:6e:b5:22:ca:05:7c:96:b0:df:
         e8:1a:a5:f7:8d:1c:ed:a8:a4:36:9f:9a:59:76:42:9a:e8:59:
         40:85:e6:8d:68:aa:d5:cb:c5:cb:26:36:33:84:14:d2:1e:c2:
         4e:15:56:cc:e9:23:f0:5a:fb:22:17:d8:e4:37:da:4b:32:c9:
         08:d8:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:59 2024 by rpki-client on console-fra.rpki-client.org