Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          ldS0rWAVn0nnXGrQ0KgmEoeFuz9Cllu2MGEh/NivPTM=
Subject key identifier:   BB:BC:42:4E:5B:F7:12:B9:10:92:F7:1B:61:11:3F:F3:43:89:B7:D9
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       6B0194711B1911DAC7C7E415858C95B02F863C4F
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:03:02 +0000
ROA not before:           Wed 31 Jul 2024 01:58:02 +0000
ROA not after:            Wed 30 Jul 2025 02:03:02 +0000
asID:                     266165
IP address blocks:        2804:3bb0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:01:94:71:1b:19:11:da:c7:c7:e4:15:85:8c:95:b0:2f:86:3c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:58:02 2024 GMT
            Not After : Jul 30 02:03:02 2025 GMT
        Subject: CN=BBBC424E5BF712B91092F71B61113FF34389B7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:a0:7b:f3:e9:e6:f5:ba:c8:d1:9d:64:cb:
                    82:34:e0:e1:b3:62:4f:e8:b0:58:7f:1f:84:35:38:
                    b3:a9:32:d3:ad:72:6d:e6:4d:24:46:7f:18:7b:6c:
                    6b:16:04:c8:3e:50:bf:e4:38:1d:67:17:cf:9b:6f:
                    2d:52:bd:3f:2d:cd:94:f6:8c:e4:75:f3:71:92:64:
                    5e:5a:ea:7f:ae:6a:2e:c6:9e:1e:da:49:57:0c:e2:
                    d5:30:a2:75:94:97:ec:e8:14:25:46:02:27:f0:ed:
                    f2:37:5d:7e:1c:bd:09:f4:68:36:f3:fe:aa:4b:9c:
                    83:f3:4e:c5:0d:30:1a:ea:ff:ca:56:90:cc:42:fb:
                    61:a2:46:0f:33:2a:55:d1:f1:03:81:60:0e:c2:d9:
                    e3:78:c9:80:6c:17:10:f0:64:b8:ed:00:a6:ab:8c:
                    82:8d:1a:b8:94:d0:be:d6:12:c0:94:e5:0f:3e:34:
                    de:ea:e8:8e:92:bc:34:fc:89:a4:cd:f4:98:3d:74:
                    f3:de:7f:cd:0a:79:85:47:3b:5a:f7:f9:c2:45:92:
                    28:bb:74:37:18:92:a2:20:17:e5:1a:fc:09:f6:6d:
                    f6:b2:f6:34:1d:35:c6:24:31:9d:65:29:50:c9:a2:
                    31:7a:29:f2:1f:2f:2c:0b:2b:19:c1:6d:07:88:c1:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BC:42:4E:5B:F7:12:B9:10:92:F7:1B:61:11:3F:F3:43:89:B7:D9
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a343030303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         50:73:6f:d3:ae:c6:ce:e4:dc:dc:68:f6:2a:58:d7:fa:04:4c:
         e1:0f:fc:e1:a7:9d:7d:ac:4a:e9:ca:7f:a7:c9:a0:e9:a4:a8:
         a5:70:4e:5e:d0:38:8c:72:c0:87:b7:98:1f:ae:cc:74:ab:f2:
         ad:30:4a:d1:31:b0:12:d1:e1:0e:88:b5:5b:8a:9c:4e:99:0f:
         07:e4:a0:8b:18:d9:d7:32:39:7f:36:32:b3:4d:74:e7:57:de:
         0b:3d:8c:36:c2:9e:b5:fd:85:a2:3f:57:63:5d:59:06:fb:e3:
         8f:f9:ef:f3:a9:70:18:c7:4d:9d:cf:b0:05:d3:b1:a2:ee:67:
         1d:ef:16:5c:7a:74:40:33:24:54:b4:76:c7:02:36:da:35:3b:
         5e:de:fc:15:18:b1:7e:ed:f2:7c:86:05:ca:02:52:7d:4b:99:
         d4:c1:02:ce:74:0b:85:5f:ca:2d:f1:ef:fe:85:e7:a8:19:0b:
         bf:7f:ff:d9:80:68:d0:bb:23:68:06:c9:c0:11:23:8a:db:de:
         b4:dc:2e:9e:a8:1b:4c:ad:3b:52:45:f5:cb:15:21:13:ed:aa:
         6e:77:7d:b7:bb:38:6f:db:18:9c:02:9d:54:77:d3:07:30:1c:
         52:26:2b:9d:55:c3:75:1b:f8:fb:50:f4:82:e9:2a:2c:99:94:
         09:ec:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org