Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          15UDY9/6boYYbq26O2zaEK0pOM+n0JHGfC46XcGS9NI=
Subject key identifier:   F7:E4:07:17:DD:1A:B9:7A:68:64:E3:2E:5C:74:ED:16:DE:38:B0:9E
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       6F1566CE5C867E5C4991C4712F770C626CE4B3C2
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:29 +0000
ROA not before:           Fri 21 Jul 2023 18:38:29 +0000
ROA not after:            Fri 19 Jul 2024 18:43:29 +0000
asID:                     269261
IP address blocks:        2804:61dc:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:66:ce:5c:86:7e:5c:49:91:c4:71:2f:77:0c:62:6c:e4:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:29 2023 GMT
            Not After : Jul 19 18:43:29 2024 GMT
        Subject: CN=F7E40717DD1AB97A6864E32E5C74ED16DE38B09E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:92:b7:35:69:0f:3e:2d:25:8f:c8:20:be:
                    52:75:a1:a1:fd:79:82:5f:ad:5e:b3:bb:8d:92:65:
                    03:e9:92:e8:9b:ef:8a:26:93:62:a7:75:98:9e:70:
                    f9:b7:ad:49:f8:c2:e9:9f:d5:4d:28:30:a5:30:ed:
                    78:b2:4e:55:49:fe:7e:4d:b2:ca:dc:95:dd:dd:77:
                    e5:c0:e8:d5:a0:21:8b:a3:27:70:f2:5d:e3:a8:8f:
                    76:12:a4:87:b7:b0:77:30:0a:60:90:2e:19:e7:c2:
                    63:03:71:3c:5c:0d:a8:96:5f:7e:59:3c:d7:74:42:
                    6f:e1:e1:cb:cd:14:39:0e:f1:7b:f8:4e:ce:d1:db:
                    a3:d9:cc:d5:47:b9:ef:15:23:22:e9:ef:be:cf:45:
                    ea:05:ca:b3:c8:fe:3f:f4:1a:a7:ab:b1:88:90:56:
                    21:55:7d:c2:ef:c8:f5:dc:09:88:7d:c0:67:c0:81:
                    9e:ec:7c:9c:ab:a6:9c:fe:44:ab:90:9e:88:eb:ce:
                    ef:55:d4:43:9d:07:bd:d5:ff:f1:90:8a:d2:48:eb:
                    db:70:12:0c:fc:64:9c:a0:74:db:f3:3d:75:05:ac:
                    53:9d:de:8b:ee:11:bd:02:3c:42:d7:f5:7e:88:9f:
                    18:04:5f:0b:49:65:aa:a5:d2:1e:25:e6:05:23:61:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E4:07:17:DD:1A:B9:7A:68:64:E3:2E:5C:74:ED:16:DE:38:B0:9E
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a343030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:cb:b8:c2:3a:42:c5:0b:66:f1:55:ce:2f:57:25:e4:0c:
         08:a9:f8:8b:e4:f1:6f:da:f0:8e:7e:28:87:18:e6:a5:d5:66:
         a0:21:51:d9:ec:47:95:f0:fa:6b:99:3a:f3:5f:df:db:12:6a:
         44:bc:32:22:f3:b6:2a:84:fb:59:12:3d:fd:fd:c2:8e:3f:a9:
         8c:e4:b6:1d:b5:1c:94:01:f5:f4:d8:96:62:a7:15:10:d2:3e:
         00:8f:d5:4d:77:c7:9d:0c:aa:e6:b8:21:a4:50:fd:a0:80:ea:
         11:77:9e:23:b7:dd:b1:5f:2a:7d:a9:57:31:f2:4c:cc:f9:67:
         5a:4c:8e:09:ac:71:a8:86:d8:87:07:bb:23:fe:1c:5e:d9:cd:
         e9:ab:16:0c:a0:24:6d:27:3f:2b:1d:6d:ff:87:39:8a:bc:c2:
         c7:22:31:4b:6c:d5:34:b4:60:62:09:19:02:4a:8b:61:a8:17:
         20:6a:27:4e:04:3b:17:a6:eb:e1:eb:d8:ca:b8:48:43:dd:b5:
         07:32:b0:0b:97:12:60:ee:ac:dd:ff:26:d4:83:51:6b:4e:89:
         c5:3a:8c:e3:e0:56:13:47:3b:a7:98:47:e5:6c:fb:6b:d7:0d:
         52:e2:c7:c7:4d:8d:bf:b4:c9:0b:34:a9:2e:c2:b0:a0:93:3e:
         60:fc:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:34 2024 by rpki-client on console.sobornost.net