Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa
File:                     323830343a336262303a3a2f33332d3333203d3e20323636313635.roa (raw, json)
Hash identifier:          835v0A/XutSP+SaM9UayyE5e0dM21tpb4ZYRtOgYmoY=
Subject key identifier:   3A:A1:F4:11:E6:FC:2B:63:1C:95:20:FD:CB:A6:F2:6A:4B:F2:A3:AF
Certificate issuer:       /CN=103266039FE0E42654222D6D1D326D5613C32C2E
Certificate serial:       588E4EBEAA6E93E129C0583A3847D0328BB00EFF
Authority key identifier: 10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa
Signing time:             Wed 31 Jul 2024 02:02:20 +0000
ROA not before:           Wed 31 Jul 2024 01:57:20 +0000
ROA not after:            Wed 30 Jul 2025 02:02:20 +0000
asID:                     266165
IP address blocks:        2804:3bb0::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl
                          rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8e:4e:be:aa:6e:93:e1:29:c0:58:3a:38:47:d0:32:8b:b0:0e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103266039FE0E42654222D6D1D326D5613C32C2E
        Validity
            Not Before: Jul 31 01:57:20 2024 GMT
            Not After : Jul 30 02:02:20 2025 GMT
        Subject: CN=3AA1F411E6FC2B631C9520FDCBA6F26A4BF2A3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:53:30:b6:a2:5a:fe:d8:fa:62:be:96:19:
                    71:30:f0:5b:81:a0:0b:4b:e8:cc:b2:15:67:60:82:
                    bd:b9:09:63:3a:e5:19:58:0d:16:e3:67:3b:3d:a8:
                    7b:b4:9f:40:30:71:03:f3:e9:43:74:00:ae:33:af:
                    56:c8:b2:2a:f7:d5:1c:92:a9:d8:5c:ce:37:c7:d7:
                    3a:b2:7a:12:59:7c:67:61:d9:4e:b5:c1:62:b1:2f:
                    07:50:5c:95:2b:ad:b0:ba:27:df:38:18:50:70:c4:
                    8a:aa:4d:d6:a6:45:be:5c:7a:a6:3c:38:b3:28:38:
                    94:0f:ff:67:19:8b:7c:b9:96:b9:fa:59:b2:43:b9:
                    00:38:9b:d2:70:8d:93:d8:d6:1f:ed:14:62:05:1c:
                    bc:f2:57:43:f6:19:22:a2:83:92:0d:36:02:d9:79:
                    8c:ae:b5:9d:79:c1:72:27:b1:c4:87:f6:d6:48:db:
                    fd:13:f7:ef:2b:67:07:a1:ed:64:ca:8f:ee:65:89:
                    9f:d3:79:dd:64:db:90:1c:82:b3:c1:09:10:ae:fe:
                    c8:9e:e7:43:24:fa:d0:18:3c:e9:a4:6f:73:de:96:
                    47:e3:d2:ad:0f:7f:31:95:ce:a2:79:f9:72:18:3e:
                    9b:70:a2:c5:a3:a5:7f:43:7f:e1:63:1a:77:ae:13:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A1:F4:11:E6:FC:2B:63:1C:95:20:FD:CB:A6:F2:6A:4B:F2:A3:AF
            X509v3 Authority Key Identifier:
                keyid:10:32:66:03:9F:E0:E4:26:54:22:2D:6D:1D:32:6D:56:13:C3:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/103266039FE0E42654222D6D1D326D5613C32C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103266039FE0E42654222D6D1D326D5613C32C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4hsUgRH8mocXDA5BwSH2TTpDvsBdwqST43BEBJgEqj2/0/323830343a336262303a3a2f33332d3333203d3e20323636313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb0::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:c2:a8:31:fc:c5:f6:c8:0d:a2:8b:79:d5:44:e7:39:ed:
         8f:ae:d0:5f:41:14:ec:30:dd:87:78:51:e3:25:d2:b6:14:fa:
         c9:c6:01:2a:5e:ff:b3:97:a5:17:34:4d:b4:3f:12:9d:de:ab:
         53:97:db:8d:f5:d4:09:57:2c:7c:04:37:07:bc:bf:1e:0e:5a:
         86:c8:e2:d4:14:f5:b0:67:b8:1f:2c:1f:4a:af:32:98:ae:c7:
         e9:b6:70:82:6c:1d:a4:c8:f1:ec:e9:cd:fc:77:8c:bc:ed:ad:
         a9:71:2d:2a:80:e7:7c:79:4a:71:a6:ba:eb:1c:58:96:a7:d3:
         61:6c:58:e6:77:91:3b:7e:9c:28:5c:67:c2:da:5e:be:d7:c6:
         90:12:71:07:4a:b7:9e:7c:2b:45:63:fe:46:b7:17:7f:bf:62:
         c0:b9:bd:a2:67:65:9e:7c:0d:f0:da:80:8f:be:42:52:d9:10:
         f0:05:0a:95:48:08:3d:00:82:18:a4:67:4f:67:e5:d6:cb:a5:
         be:06:e9:c8:41:c3:ed:38:f6:da:b5:e5:c9:d5:38:99:0b:8e:
         18:7f:e8:a3:05:e2:bc:f4:26:da:08:7f:1f:70:44:46:98:ef:
         25:cf:53:8a:9d:f0:2e:28:f6:69:0b:10:22:8e:a0:da:bb:f0:
         14:ee:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:02 2024 by rpki-client on console-ams.rpki-client.org