Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3438203d3e20323639313135.roa
File:                     323830343a356661383a3a2f33322d3438203d3e20323639313135.roa (raw, json)
Hash identifier:          2xeHKbMZbBdKJTt3xfmd2DWzBbLf33NhzXASqyTyTVA=
Subject key identifier:   6E:A5:01:0A:E2:27:8A:9D:75:8C:CE:0F:BA:D9:AD:24:2E:8D:39:A7
Certificate issuer:       /CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
Certificate serial:       6BD3366029691689CF3C0A99E7AC8401A78C6475
Authority key identifier: 37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3438203d3e20323639313135.roa
Signing time:             Wed 05 Jun 2024 18:52:56 +0000
ROA not before:           Wed 05 Jun 2024 18:47:56 +0000
ROA not after:            Wed 04 Jun 2025 18:52:56 +0000
asID:                     269115
IP address blocks:        2804:5fa8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl
                          rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d3:36:60:29:69:16:89:cf:3c:0a:99:e7:ac:84:01:a7:8c:64:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3731A0590985DE6CB86AAB65AB2D705079C5420C
        Validity
            Not Before: Jun  5 18:47:56 2024 GMT
            Not After : Jun  4 18:52:56 2025 GMT
        Subject: CN=6EA5010AE2278A9D758CCE0FBAD9AD242E8D39A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:5a:ac:e9:fc:68:ac:18:ff:c3:8e:44:9e:
                    07:16:18:53:9b:5d:48:d5:6c:3d:2e:06:c9:5d:4d:
                    fd:82:bd:4b:ac:bd:dc:92:53:46:8d:e1:ef:20:87:
                    ae:a7:46:e2:a6:a1:f3:83:c9:53:2e:48:32:5c:ac:
                    3a:af:df:50:e3:a4:b2:f1:5a:6d:22:74:c1:bc:5b:
                    a9:c2:25:39:9a:41:c0:0a:90:72:82:77:62:26:64:
                    ce:4c:dd:90:91:49:f2:f5:79:e0:64:98:84:4c:85:
                    a8:6a:26:b9:ef:ad:1b:25:19:3b:5f:c8:93:a9:2e:
                    3b:51:ee:39:97:f2:f0:0b:4f:aa:d6:bb:01:62:b4:
                    f9:dd:20:0e:c4:cc:55:2c:1e:60:d1:93:32:3a:34:
                    8b:9c:90:86:a2:d5:fa:f2:36:a8:e4:9c:cc:61:2f:
                    89:16:36:13:ee:bc:d8:30:62:9f:f4:c5:d7:47:b0:
                    c4:6a:5d:e7:1f:61:cf:7a:ce:ca:32:13:4f:1e:61:
                    4b:eb:60:0c:ee:58:cd:2d:97:2c:bb:bd:74:88:0a:
                    d0:86:3a:b3:b3:65:46:e4:1f:6d:15:b0:7e:2f:b9:
                    9e:b9:09:a4:3d:47:40:49:c6:b1:5f:af:e8:8c:fa:
                    08:27:9b:a9:3b:c4:4c:22:ef:a4:c2:44:99:30:1b:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:01:0A:E2:27:8A:9D:75:8C:CE:0F:BA:D9:AD:24:2E:8D:39:A7
            X509v3 Authority Key Identifier:
                keyid:37:31:A0:59:09:85:DE:6C:B8:6A:AB:65:AB:2D:70:50:79:C5:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/3731A0590985DE6CB86AAB65AB2D705079C5420C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3731A0590985DE6CB86AAB65AB2D705079C5420C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhhjGAZiaFja12qLZsgR9NGLqLZYhPrMHqoWS9G5TAPn/0/323830343a356661383a3a2f33322d3438203d3e20323639313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:e8:da:99:bd:7b:89:11:91:2b:71:21:f8:4e:55:b0:27:
         98:76:91:6d:d0:19:81:10:6f:2e:24:cb:36:76:e3:94:4e:06:
         93:cc:62:2c:20:c8:cd:fc:7c:21:bc:22:4a:f1:ea:b6:14:6d:
         06:f4:ca:ba:69:69:bb:ef:b2:38:4b:e0:4c:74:0c:24:dc:ab:
         51:f3:29:37:da:e9:1e:a9:81:5c:ec:b9:1c:93:71:e2:2f:31:
         1a:16:72:23:49:1e:62:18:e6:9b:ec:e7:0e:6e:16:5f:65:e5:
         1e:be:62:f6:c4:22:c9:ba:77:1f:fc:7f:64:0c:fe:a4:c0:bb:
         90:ae:30:10:62:3a:54:53:4d:0e:d9:a2:65:0c:99:3a:ea:9a:
         81:9c:56:28:1f:b4:6a:d3:2f:f5:b1:50:e6:52:36:d6:34:24:
         e1:b8:55:77:59:f8:a2:d1:e2:b9:65:75:b1:8d:2c:30:4e:d9:
         9a:c1:51:01:94:a2:58:f6:8b:d4:12:87:74:54:89:19:26:7b:
         0d:dc:fa:b5:87:fc:9a:38:ba:5e:0a:f0:72:53:36:65:b5:e8:
         81:ed:4e:28:08:a1:1b:35:78:d6:27:e0:a9:5a:11:54:a7:16:
         83:ec:c2:c6:a0:16:51:65:e6:bf:98:9c:25:8c:b1:81:2e:47:
         73:9b:eb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:52 2024 by rpki-client on console-ams.rpki-client.org