Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
File:                     323830343a363164633a3a2f33322d3332203d3e20323639323631.roa (raw, json)
Hash identifier:          LdaLSGRwZmFy30YkaRqnlAYvJMwik0JT5EL+4Qx/JtE=
Subject key identifier:   18:51:D2:92:63:E0:11:64:6E:D7:5A:BD:CA:38:8E:F4:B3:B9:1B:D3
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       12C7A8213FC4E284E8BEB25A287741337BF3D91E
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:24 +0000
ROA not before:           Fri 21 Jul 2023 18:38:24 +0000
ROA not after:            Fri 19 Jul 2024 18:43:24 +0000
asID:                     269261
IP address blocks:        2804:61dc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c7:a8:21:3f:c4:e2:84:e8:be:b2:5a:28:77:41:33:7b:f3:d9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:24 2023 GMT
            Not After : Jul 19 18:43:24 2024 GMT
        Subject: CN=1851D29263E011646ED75ABDCA388EF4B3B91BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:68:5d:96:2b:49:bd:9b:e5:52:4b:d8:80:
                    ec:5c:36:3e:2c:88:e7:57:80:1a:2d:60:c0:31:c0:
                    d2:54:5f:82:b4:70:6e:a3:16:e2:c5:48:6f:11:32:
                    ee:1c:7e:af:ce:0a:e8:46:25:89:17:41:30:d9:3e:
                    24:43:99:86:1e:c1:53:b8:a8:90:e0:fc:13:25:11:
                    62:0d:a0:23:37:86:9b:68:b2:1d:e9:4f:da:86:c0:
                    fb:12:39:cc:79:f7:f4:aa:95:09:63:ce:03:56:b4:
                    87:fe:5f:db:cf:f6:36:13:04:a4:b9:59:69:7a:b5:
                    e7:98:ba:e4:dd:69:1b:88:00:95:aa:20:10:1c:52:
                    0b:ba:79:63:76:be:bf:35:ea:23:87:1e:dd:71:db:
                    37:19:e8:57:db:73:e3:97:77:b9:dd:93:7e:ff:38:
                    14:61:60:12:c3:be:d0:2a:a0:fb:04:c7:34:6c:61:
                    2f:1d:8e:d9:e1:e6:e3:db:ad:4d:a0:07:a0:53:84:
                    63:d1:d0:8b:3e:7e:ad:9d:10:61:de:14:a5:e6:f8:
                    1d:fe:bc:5f:8a:eb:44:8a:de:ec:ff:35:77:52:78:
                    69:fc:bc:85:e9:7e:23:38:ea:a7:2d:a6:0c:ce:f7:
                    a1:28:37:87:43:a6:38:91:28:ad:ed:73:9d:04:c4:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:D2:92:63:E0:11:64:6E:D7:5A:BD:CA:38:8E:F4:B3:B9:1B:D3
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33322d3332203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:37:0d:d4:29:e5:93:4b:4e:72:12:9e:04:6d:e6:d4:b9:9e:
         1f:3b:cd:1b:c5:17:5b:83:51:b9:a2:27:88:3f:74:99:73:4f:
         eb:e8:00:47:03:22:80:b6:a1:3c:75:26:37:2d:99:4b:5e:0f:
         61:f6:4f:9c:82:a0:7e:3d:a8:e4:59:a7:78:56:75:c6:0e:d6:
         fd:90:da:c9:a7:a6:70:57:91:6d:d7:0e:f8:d4:9c:80:c2:8d:
         ec:5e:d3:6b:7f:ed:f4:f5:ec:57:85:4b:bb:cc:7c:87:5f:aa:
         d7:2c:09:8c:07:e9:3d:d0:95:ac:58:e3:e3:cf:bf:72:90:46:
         04:0b:64:6f:62:a9:ed:f2:19:cc:32:88:78:2c:c5:fb:3f:33:
         ab:4d:bd:2f:9d:b7:d1:88:4c:5e:be:ac:d9:cb:cb:7d:0a:f0:
         6a:4d:f8:f4:44:cd:e0:a8:3a:3b:b5:16:98:e1:c8:97:65:17:
         6f:48:ad:3d:e4:48:5a:99:58:1b:85:0d:6a:55:de:20:06:e4:
         0c:ea:e1:91:75:2c:c8:e3:68:84:ec:4c:75:f5:f2:df:b2:5e:
         a1:6b:25:f0:f5:ac:df:38:d5:1e:28:de:b0:78:ef:6f:b0:a9:
         53:c7:d3:7b:5d:08:55:5a:7d:bf:1f:d5:3e:94:75:cd:70:dd:
         6a:be:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:34 2024 by rpki-client on console.sobornost.net