Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33342d3334203d3e20323732323636.roa
File:                     323830343a383438383a3a2f33342d3334203d3e20323732323636.roa (raw, json)
Hash identifier:          jPWTAeA5NhpM1rQecjQ0YGFlBtXq+l7fhXVGXpG8634=
Subject key identifier:   38:D8:B6:61:54:2F:A3:39:C1:7A:32:63:96:77:18:6B:6E:96:46:2E
Certificate issuer:       /CN=38FE18896AECE3BD6039FDE15B16BBD8242089FB
Certificate serial:       34DDAC1F1344E58C143BFC579EFA8FC8E8984808
Authority key identifier: 38:FE:18:89:6A:EC:E3:BD:60:39:FD:E1:5B:16:BB:D8:24:20:89:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FE18896AECE3BD6039FDE15B16BBD8242089FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33342d3334203d3e20323732323636.roa
Signing time:             Mon 26 Aug 2024 18:26:13 +0000
ROA not before:           Mon 26 Aug 2024 18:21:13 +0000
ROA not after:            Mon 25 Aug 2025 18:26:13 +0000
asID:                     272266
IP address blocks:        2804:8488::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.crl
                          rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FE18896AECE3BD6039FDE15B16BBD8242089FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:dd:ac:1f:13:44:e5:8c:14:3b:fc:57:9e:fa:8f:c8:e8:98:48:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FE18896AECE3BD6039FDE15B16BBD8242089FB
        Validity
            Not Before: Aug 26 18:21:13 2024 GMT
            Not After : Aug 25 18:26:13 2025 GMT
        Subject: CN=38D8B661542FA339C17A32639677186B6E96462E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:46:cc:e9:d7:fa:77:6b:d3:23:fa:86:eb:
                    2a:28:ba:cc:9c:af:c8:8c:d7:59:a8:05:13:58:aa:
                    56:27:3a:62:7d:8a:cd:aa:ba:9f:29:e7:43:4a:2e:
                    bd:ce:16:7f:35:fc:96:77:88:43:88:5b:cf:54:87:
                    8e:62:a9:bb:fd:b2:9b:a1:25:93:d0:ee:73:fd:19:
                    8d:c9:28:60:c2:07:5c:1d:50:d3:31:74:cd:81:7c:
                    e7:9c:bd:73:c2:75:0c:d9:bb:c1:9f:82:4d:6c:82:
                    e7:44:71:3c:26:68:26:89:f5:a2:df:e3:7b:b9:84:
                    17:d7:4a:5b:6e:64:45:d7:f2:24:1d:d6:88:21:5b:
                    9b:9a:3d:79:ff:22:d1:51:76:2f:01:01:cb:52:01:
                    b0:b0:5e:9a:7f:c3:62:2e:f4:80:69:85:9f:6c:1d:
                    e2:aa:e6:71:a3:6d:7f:27:fa:c7:f1:40:f7:fd:37:
                    c1:aa:2d:b8:6e:00:40:e8:11:f3:68:e9:00:6e:b4:
                    21:7f:d4:d1:d1:66:ce:35:31:c6:c1:b2:97:51:80:
                    e0:ed:d5:9d:07:44:2c:03:40:d5:f4:33:e3:84:d7:
                    eb:fb:c7:62:f9:4a:53:17:28:87:e4:08:f6:89:f2:
                    a8:b0:09:5b:e7:4d:d1:f6:2d:35:cc:e9:60:2a:93:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:B6:61:54:2F:A3:39:C1:7A:32:63:96:77:18:6B:6E:96:46:2E
            X509v3 Authority Key Identifier:
                keyid:38:FE:18:89:6A:EC:E3:BD:60:39:FD:E1:5B:16:BB:D8:24:20:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/38FE18896AECE3BD6039FDE15B16BBD8242089FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38FE18896AECE3BD6039FDE15B16BBD8242089FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7udFUBbzxoQN5gQ6PxiRJzXcc5KTWgjh79BncQxnfSo/0/323830343a383438383a3a2f33342d3334203d3e20323732323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8488::/34

    Signature Algorithm: sha256WithRSAEncryption
         07:eb:e9:1b:7e:52:40:e1:f5:92:da:30:b1:cc:e4:db:17:7a:
         b8:80:cc:4c:bd:11:1e:a3:5f:b0:0c:40:3f:4a:73:93:6a:83:
         b4:8e:9e:d0:a0:56:1a:c4:23:d0:b1:f4:f4:32:97:77:b8:9a:
         18:f7:69:69:9c:a9:e4:ca:a1:94:00:fa:e0:aa:b6:84:9b:4d:
         2e:b0:bc:69:10:ef:4f:82:3e:49:1d:5d:06:4a:98:f4:82:7c:
         b9:48:57:52:36:d3:8e:8c:b9:07:96:7e:4c:8d:63:d0:06:c0:
         fa:cf:c5:01:f6:c2:5f:6e:15:c3:80:b7:f8:f9:15:01:bb:f6:
         85:25:b7:30:9c:90:1b:06:29:a0:86:7e:01:a4:f6:a4:63:00:
         32:d2:a1:9a:ae:da:76:f9:9a:8d:e9:ea:f6:9a:3b:c5:ca:e5:
         1d:e4:fb:99:98:4b:94:f9:b7:03:64:6d:fc:cd:39:42:b4:a6:
         c6:eb:a2:3c:b9:d2:ee:9c:1a:98:c8:fc:68:3a:3f:81:9b:a4:
         53:78:5b:66:88:e8:94:df:a0:ff:b2:ab:61:58:c5:aa:e3:5d:
         01:2a:9b:95:6d:1e:77:65:2c:87:58:e3:b0:ea:64:73:ce:c3:
         84:a0:a2:e0:8a:6e:8e:26:fb:10:eb:85:01:ca:b7:57:84:9a:
         e3:90:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:53:02 2024 by rpki-client on console-ams.rpki-client.org