Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa
File:                     323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa (raw, json)
Hash identifier:          v/RDTRAuwan9201R6GhQAlJAJxjfSXFo3p4DJPc8WkU=
Subject key identifier:   38:B2:00:73:82:8D:66:36:1F:DA:FF:CA:EA:89:2E:92:86:47:D4:A0
Certificate issuer:       /CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
Certificate serial:       29CB753D98F7525CBFC3D5A2F599409E6112B76C
Authority key identifier: 95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa
Signing time:             Fri 21 Jul 2023 18:43:34 +0000
ROA not before:           Fri 21 Jul 2023 18:38:34 +0000
ROA not after:            Fri 19 Jul 2024 18:43:34 +0000
asID:                     269261
IP address blocks:        2804:61dc:c000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl
                          rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 10 Jan 2024 11:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:cb:75:3d:98:f7:52:5c:bf:c3:d5:a2:f5:99:40:9e:61:12:b7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3
        Validity
            Not Before: Jul 21 18:38:34 2023 GMT
            Not After : Jul 19 18:43:34 2024 GMT
        Subject: CN=38B20073828D66361FDAFFCAEA892E928647D4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b2:2b:c6:db:c2:22:d5:15:0a:c4:2b:82:7e:
                    c7:15:ae:3a:7d:74:e2:3d:de:ac:7c:68:92:7a:29:
                    bf:94:e2:3a:a1:bb:1d:9f:e5:bd:5f:b4:ed:3a:8b:
                    a3:aa:5e:b9:5b:64:e2:12:c8:e0:52:95:bc:3f:90:
                    a1:a6:13:48:e0:12:3a:a4:5d:ca:82:46:7d:2f:1a:
                    21:7b:e0:1d:39:2f:69:e7:04:ae:fa:1a:50:fc:38:
                    8b:19:7e:28:08:aa:a4:7b:a1:46:21:47:96:81:2c:
                    53:ba:5e:3e:d2:eb:39:6f:e6:c1:df:28:85:72:15:
                    a0:62:23:5c:2c:d4:25:7d:40:61:8a:ba:55:88:82:
                    c6:c1:b6:a9:36:22:6e:8f:16:21:09:5e:13:b3:d4:
                    ff:c9:ef:24:05:23:8a:48:4e:fb:c4:66:4a:24:14:
                    a3:61:c6:4b:bd:ed:94:05:3d:c5:7d:4d:f3:1d:bc:
                    b2:68:bf:28:d5:24:55:65:a4:30:49:06:86:5b:3e:
                    13:30:36:b6:90:6c:c7:a3:61:ef:51:6e:e4:d1:9a:
                    64:f8:39:85:61:a0:9b:f7:52:df:9a:5b:4a:5c:b1:
                    4c:d1:ba:a4:64:f0:cf:54:9b:23:25:5d:d7:cd:3a:
                    b2:e7:09:67:9c:87:bf:1f:bd:7c:db:e5:a2:33:d2:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:00:73:82:8D:66:36:1F:DA:FF:CA:EA:89:2E:92:86:47:D4:A0
            X509v3 Authority Key Identifier:
                keyid:95:F1:E3:4D:9E:98:C4:BD:C4:C9:35:1D:8B:C9:3C:26:B1:67:D9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95F1E34D9E98C4BDC4C9351D8BC93C26B167D9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/0/323830343a363164633a633030303a3a2f33362d3336203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61dc:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:82:cf:36:41:d3:5d:bb:b2:b3:d5:5e:32:a9:18:89:b9:78:
         ff:0f:b8:b9:12:a6:ea:50:68:4a:05:03:ad:99:5b:a5:50:f2:
         23:8e:80:68:c1:74:5e:27:6d:cf:52:7d:6b:f1:09:0c:c6:74:
         c3:bd:0a:3f:0c:96:60:c7:96:0e:22:7f:bb:19:a0:b1:51:ba:
         0c:6d:db:31:29:4d:ea:5c:2b:67:b7:3a:fd:bb:07:ed:40:d2:
         c5:c7:54:e3:23:cf:27:4d:73:f4:65:90:81:53:5b:9e:86:8c:
         fa:52:32:7c:b2:0e:c1:b5:43:30:a9:c0:10:50:6a:2c:4c:bf:
         ad:32:52:4a:ec:cc:b6:a6:e8:87:68:cc:94:24:57:9d:72:6c:
         b9:35:fc:97:59:0f:6a:01:cb:6b:3d:c3:03:e5:06:6f:ec:e8:
         e6:78:5b:57:13:ac:f2:91:b0:51:57:3d:95:34:a6:92:07:17:
         b3:53:4e:1d:ae:7c:de:d1:e4:e5:6e:4a:d5:58:2f:e9:20:87:
         c8:c0:9b:6c:79:01:28:ac:d5:2f:4a:b7:80:a2:ea:18:a2:14:
         eb:21:c0:9f:35:ec:19:9b:5b:7a:6c:fe:f4:26:aa:1f:8e:d5:
         0d:fa:9d:63:66:39:04:b3:0a:af:39:2f:8b:04:49:d6:2f:b3:
         5d:01:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:43:34 2024 by rpki-client on console.sobornost.net