Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33342d3334203d3e20323636313635.roa
File:                     323830343a336262303a383030303a3a2f33342d3334203d3e20323636313635.roa (raw, json)
Hash identifier:          463r0ljiWJ0BmP67767DsjGjONAK0pZWhghh/cSmvn4=
Subject key identifier:   BE:3E:A2:23:60:F1:6F:FC:7D:A1:BB:D2:A1:1F:FC:C4:05:50:0E:1E
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       6BE95D7B3D52DA6724A23F848CF2780C9B87CEDC
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33342d3334203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:03:00 +0000
ROA not before:           Wed 31 Jul 2024 01:58:00 +0000
ROA not after:            Wed 30 Jul 2025 02:03:00 +0000
asID:                     266165
IP address blocks:        2804:3bb0:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e9:5d:7b:3d:52:da:67:24:a2:3f:84:8c:f2:78:0c:9b:87:ce:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:58:00 2024 GMT
            Not After : Jul 30 02:03:00 2025 GMT
        Subject: CN=BE3EA22360F16FFC7DA1BBD2A11FFCC405500E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:10:d9:7a:cd:66:37:ac:de:53:ce:8d:4e:
                    7a:91:31:7c:38:f8:af:ac:b9:9b:cf:12:cd:81:54:
                    d0:5d:25:93:5f:e4:36:1e:43:17:15:28:ec:5b:00:
                    89:87:44:42:c7:cd:b3:41:42:7a:91:f2:02:50:8b:
                    bd:e7:b2:a0:f8:c6:39:0c:fe:bb:08:7e:93:b3:20:
                    4d:55:3b:9c:ff:83:2b:4f:c9:bd:53:a4:53:83:3f:
                    3a:0b:4b:7c:29:c2:9b:70:00:86:99:95:ce:dc:33:
                    22:84:f6:38:9d:e9:a8:e2:ff:90:d7:2d:87:8c:04:
                    b1:c6:b8:6b:a2:c5:2d:47:6d:61:36:b6:b4:40:89:
                    74:35:a5:10:91:99:28:a6:52:84:7d:82:72:d2:53:
                    cd:4a:cb:a6:69:8a:3c:40:54:b7:09:3e:83:17:06:
                    9b:03:78:f1:04:a7:8c:6b:71:eb:54:f4:8b:36:31:
                    d6:28:4a:36:46:3d:60:32:e7:de:38:41:69:d0:f2:
                    b4:a0:83:db:76:aa:04:18:33:96:47:28:1f:dd:3f:
                    ea:b1:db:96:5c:62:4b:c6:e6:27:1b:5f:b3:b9:74:
                    85:c8:ae:ec:5b:fe:b5:09:ce:49:54:01:4e:1b:6f:
                    3e:6e:0e:12:bd:5d:59:a2:f6:fa:5c:ce:53:22:7f:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3E:A2:23:60:F1:6F:FC:7D:A1:BB:D2:A1:1F:FC:C4:05:50:0E:1E
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a383030303a3a2f33342d3334203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:d1:fb:38:a2:0f:1e:6a:57:4b:cd:a4:04:f0:8e:6d:62:
         1e:4d:e5:0d:e0:27:96:cf:62:9d:6a:25:24:db:65:cc:fe:c0:
         1d:ae:4e:68:77:3e:4d:e8:91:88:a2:08:f3:a2:01:52:e2:f4:
         cb:0d:39:ca:47:df:21:38:db:f7:b5:cf:3a:a4:8c:c6:5e:be:
         e2:d6:7d:99:c3:52:36:67:c2:dc:5b:7f:16:31:c8:2c:18:f0:
         ca:79:63:67:8a:b1:45:38:de:b0:0f:5b:ad:b7:df:4e:e8:31:
         58:c7:7a:61:02:cf:bf:70:d5:07:63:a7:f5:6a:d4:c1:8d:97:
         78:d9:04:c6:61:a7:89:29:4d:a8:86:c1:3f:a0:91:8d:64:f6:
         c1:d0:67:82:5d:b3:7c:2c:ac:0b:a3:80:fe:56:da:cb:8c:14:
         c4:83:db:55:90:db:ac:bf:c0:cb:5e:89:91:e8:c2:77:d9:0b:
         96:44:83:eb:32:58:20:c5:b8:13:fe:2a:76:b4:e9:8b:93:ec:
         95:d8:e6:8e:bc:fe:d7:84:7c:a6:77:7f:89:89:78:f6:f5:a2:
         59:92:61:ac:40:ba:b2:c8:c0:df:80:d7:e3:18:fb:bf:de:a7:
         2e:ae:6c:dc:20:d6:86:76:e4:85:5c:66:ef:fd:6a:2d:58:83:
         5e:32:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org