Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          nOKihko+HX0FP5QW6eFC4h7Pwhubr54YdLiizMymZaQ=
Subject key identifier:   6D:63:FC:1F:80:AF:C9:FB:85:1F:6C:58:3F:16:03:60:2D:DA:09:F6
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       311D64AA8E4803EA0752C4EA34D5FEDD4CE267A3
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:27 +0000
ROA not before:           Fri 21 Jul 2023 18:38:27 +0000
ROA not after:            Fri 19 Jul 2024 18:43:27 +0000
asID:                     269261
IP address blocks:        2804:61dc::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1d:64:aa:8e:48:03:ea:07:52:c4:ea:34:d5:fe:dd:4c:e2:67:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:27 2023 GMT
            Not After : Jul 19 18:43:27 2024 GMT
        Subject: CN=6D63FC1F80AFC9FB851F6C583F1603602DDA09F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ea:67:01:af:e1:8e:91:82:6d:a8:7f:04:47:
                    25:e3:44:14:c0:5f:f1:79:1a:fd:a0:63:bb:67:ab:
                    e8:d7:68:97:90:1f:3f:37:f8:df:54:60:d0:b6:5d:
                    3f:01:2e:4b:d2:26:4f:c1:8b:16:6c:f3:55:3e:21:
                    10:9e:d6:67:65:88:19:33:0f:7e:40:02:72:a9:52:
                    94:51:f1:59:ff:ab:03:d4:de:66:68:86:1e:49:73:
                    1c:c5:b3:98:39:db:04:9b:2c:34:84:b9:dd:0f:bc:
                    f8:a7:26:64:96:98:a1:b0:9b:8f:1d:16:1f:3c:ce:
                    d8:05:c4:d1:88:36:0b:05:c9:37:84:12:45:ba:3e:
                    99:65:54:66:fc:1f:66:e2:16:68:b7:e4:b6:f2:64:
                    69:e6:22:52:00:91:46:6f:bb:59:6c:b9:07:fc:b5:
                    a2:62:b3:14:92:39:f7:7b:3f:cf:1a:ca:28:47:79:
                    2b:a2:94:d7:45:02:e2:f0:3c:9c:3c:c5:91:4c:86:
                    45:e9:11:79:e4:9b:6c:92:cb:0b:b2:41:15:fc:6e:
                    cb:e3:b2:57:bb:d5:62:1e:6f:40:c2:35:6d:38:6b:
                    1b:16:15:40:c1:65:c9:0e:dd:13:d8:b2:7c:52:f3:
                    0c:b3:86:7e:b9:15:17:31:b2:6f:ad:12:ec:04:77:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:FC:1F:80:AF:C9:FB:85:1F:6C:58:3F:16:03:60:2D:DA:09:F6
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:8a:df:67:35:a9:5f:72:40:96:8a:7e:d8:10:df:f9:4b:
         88:e8:75:11:90:b9:d3:0d:d4:74:dd:3f:4f:fb:6f:af:25:8d:
         76:55:61:49:11:c4:f8:ae:31:d0:05:29:7c:2b:bb:0a:3c:19:
         be:4a:a4:23:f7:7a:3b:2d:5d:ce:d1:61:44:d3:ba:ae:70:33:
         17:e1:05:16:54:ec:58:6a:ab:5c:03:94:0f:83:cd:b2:d4:82:
         9c:c0:f0:a8:f3:84:a9:8d:10:86:7f:4c:26:a6:d2:f2:1a:0c:
         26:66:8c:ab:4e:73:15:d5:8f:af:14:e1:50:e5:ef:3d:2a:37:
         0b:fe:ee:2d:a3:26:80:3a:91:ee:ed:f7:18:14:fd:ad:cc:71:
         f3:6c:d5:2f:9f:49:65:49:a3:be:9e:2b:d9:36:58:26:01:26:
         49:ff:ac:eb:aa:b4:cc:a6:4e:e8:40:f3:27:a6:db:07:66:b8:
         72:58:e3:ff:f4:b5:9b:32:0d:73:c8:2d:74:99:61:7d:ac:e8:
         d2:2a:6a:01:ab:aa:ab:ca:3b:92:05:41:9f:62:61:7f:df:c4:
         26:f5:53:93:a1:ff:5e:f1:93:f3:a9:43:97:d4:ba:d6:4d:ca:
         7d:2f:9f:7a:59:4b:a3:a7:8c:81:15:4b:af:7b:b8:93:c0:bd:
         90:f9:89:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:34 2024 by rpki-client on console.sobornost.net