Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3130303a3a2f34302d3430203d3e20323637343538.roa
File:                     323830343a343164303a3130303a3a2f34302d3430203d3e20323637343538.roa (raw, json)
Hash identifier:          XT107lukWkkSryPMn5P7UUzvt/mbIIqGHJMdECJZdk0=
Subject key identifier:   2A:F1:A1:D3:69:E2:46:7D:B4:FC:4F:E4:16:5D:BA:6D:6A:A5:73:3A
Certificate issuer:       /CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
Certificate serial:       32042B605B8ED0B0FE2C077DCFC4D924D70CF548
Authority key identifier: B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3130303a3a2f34302d3430203d3e20323637343538.roa
Signing time:             Thu 04 Apr 2024 02:07:16 +0000
ROA not before:           Thu 04 Apr 2024 02:02:16 +0000
ROA not after:            Thu 03 Apr 2025 02:07:16 +0000
asID:                     267458
IP address blocks:        2804:41d0:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl
                          rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:04:2b:60:5b:8e:d0:b0:fe:2c:07:7d:cf:c4:d9:24:d7:0c:f5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C39F223BEC24B86B77E49B462362F62DB24BE4
        Validity
            Not Before: Apr  4 02:02:16 2024 GMT
            Not After : Apr  3 02:07:16 2025 GMT
        Subject: CN=2AF1A1D369E2467DB4FC4FE4165DBA6D6AA5733A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:d5:af:02:08:24:9d:ca:9a:43:8c:c0:ba:
                    a3:06:29:76:27:ed:f6:b5:44:66:f4:57:47:60:ce:
                    6b:5d:8d:c9:e7:ec:e3:5b:a1:69:2c:3f:a0:96:4a:
                    21:b9:08:c9:2c:24:09:c2:f2:31:31:d8:88:66:b0:
                    eb:18:1a:7c:90:ab:f1:75:8b:a0:97:95:f4:85:3e:
                    d1:c6:a0:96:7f:82:03:f3:2b:51:30:35:85:b5:b7:
                    1b:f3:fa:d9:65:34:4f:4f:de:6b:bd:01:72:51:57:
                    5c:4d:40:7e:af:f9:b3:4a:83:b4:d2:a4:d2:d4:d8:
                    3f:88:04:69:bf:22:64:80:5f:2f:37:05:6e:1b:3b:
                    a1:7d:cf:b2:e6:19:f5:cf:3a:e8:44:80:e0:0d:15:
                    e9:21:c6:c2:4d:50:59:29:51:52:40:f8:a6:13:6a:
                    2c:cc:25:0a:9a:39:b8:27:f4:f8:2e:72:77:d6:58:
                    fe:ec:c3:f3:f6:df:80:a4:22:ef:b7:03:21:7f:ac:
                    6b:86:3c:a2:8e:94:1b:6e:fc:4c:78:15:a5:9a:4e:
                    a1:c3:c8:8f:36:95:35:0a:12:37:de:67:75:d1:1d:
                    aa:7c:f6:9a:d9:5a:eb:f0:69:3e:7f:6e:99:56:51:
                    80:e4:e5:56:af:f0:cc:8d:80:fa:dc:1b:0c:fb:c2:
                    e6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:A1:D3:69:E2:46:7D:B4:FC:4F:E4:16:5D:BA:6D:6A:A5:73:3A
            X509v3 Authority Key Identifier:
                keyid:B3:C3:9F:22:3B:EC:24:B8:6B:77:E4:9B:46:23:62:F6:2D:B2:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C39F223BEC24B86B77E49B462362F62DB24BE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaQfa3u8B8AdaJd8kA5VAUNy8ocRaAckBycfrHUqAaYv/1/323830343a343164303a3130303a3a2f34302d3430203d3e20323637343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41d0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:cd:97:84:3b:67:47:44:17:02:c8:47:1d:b0:aa:c4:a7:
         a5:62:7d:7b:c3:70:2a:ca:e2:21:56:66:1c:15:3e:e9:ce:c4:
         6b:48:e2:d7:76:99:22:df:bc:fa:ea:12:67:5e:a6:a1:82:73:
         fe:9f:2f:c4:73:4b:b3:1d:80:c4:61:9d:70:98:66:01:2b:45:
         e8:52:cb:04:19:a4:1f:a5:49:5f:2c:0f:2d:63:a3:8e:44:cb:
         60:08:eb:82:44:be:b9:d2:0f:1f:36:26:1c:36:7d:de:18:f4:
         cd:46:fa:e0:b7:95:a6:e7:14:12:6a:1a:71:8b:7f:f7:6d:bc:
         99:66:b4:e7:35:31:b6:06:b0:f3:83:57:60:96:ba:04:f3:0f:
         85:c9:df:12:db:9e:fa:ca:27:24:23:72:1e:3e:b4:7f:c5:55:
         8b:ac:cc:22:f6:61:2a:3d:35:b1:f1:a4:75:e7:68:12:71:e1:
         fa:f4:20:78:9c:a6:45:b6:fe:7b:f6:86:9e:53:99:ce:99:b8:
         ce:a3:39:21:79:1d:7b:ea:e9:67:75:e0:63:70:47:ed:e0:b3:
         7e:c4:99:f8:6f:c7:dc:93:24:81:90:19:3b:5b:94:f2:bc:6e:
         04:bd:72:78:ec:28:c3:a1:dc:86:6e:2b:34:46:9d:b4:00:f3:
         34:e0:4d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:46 2024 by rpki-client on console-ams.rpki-client.org