Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          bCJDrD+uXfQcF2rqsIH7R+xfWmqPF/HHDboAxQCNhQo=
Subject key identifier:   91:50:13:E3:AA:64:FD:90:F6:23:28:7D:6D:89:71:10:B7:A6:D0:5E
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       0774D8418275E13FC4BC411965C33E856942E2E2
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 04 Apr 2024 16:11:27 +0000
ROA not before:           Thu 04 Apr 2024 16:06:27 +0000
ROA not after:            Thu 03 Apr 2025 16:11:27 +0000
asID:                     263522
IP address blocks:        2804:1338:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 15:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:74:d8:41:82:75:e1:3f:c4:bc:41:19:65:c3:3e:85:69:42:e2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr  4 16:06:27 2024 GMT
            Not After : Apr  3 16:11:27 2025 GMT
        Subject: CN=915013E3AA64FD90F623287D6D897110B7A6D05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:23:4e:9e:ae:cb:e8:5f:a7:a2:1e:89:86:
                    14:a7:87:78:8b:a5:41:98:a5:9a:16:66:aa:f8:8f:
                    4d:be:ec:69:12:a0:93:5f:7f:c3:38:4e:a9:cf:dd:
                    5b:56:0f:08:a6:58:af:27:52:2d:ab:44:1c:c4:c4:
                    53:d8:ef:97:de:25:03:1c:1d:e5:23:a9:5c:7c:1d:
                    c6:12:45:40:be:06:e3:77:dc:60:45:5a:28:85:67:
                    b8:c6:fb:f1:4c:c2:61:47:05:db:c1:20:81:1f:f3:
                    bd:52:4f:4e:7e:10:47:72:8a:70:21:bc:bc:3b:fd:
                    fd:f7:9e:ac:85:1f:40:e8:40:c3:ae:96:6d:af:59:
                    d3:02:11:a4:eb:3b:e8:73:6f:ab:fe:da:20:c9:63:
                    0d:be:4a:b9:5a:7d:aa:da:6f:62:5c:ed:b0:9f:f1:
                    27:1d:af:a0:6c:de:0e:80:52:d3:2b:bc:ae:3f:4e:
                    a9:af:bf:dc:57:99:fe:34:56:30:1f:e0:aa:7e:2c:
                    a8:88:62:16:50:34:60:fc:6a:af:b4:cb:26:ac:cf:
                    49:55:8c:f0:f9:b0:2c:60:3d:a4:93:c2:02:d4:e5:
                    53:5a:41:bc:dc:4a:90:d9:6c:24:b8:f8:8a:7d:52:
                    3c:f3:99:af:e7:d1:c1:67:5a:ef:cf:51:a3:81:d0:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:50:13:E3:AA:64:FD:90:F6:23:28:7D:6D:89:71:10:B7:A6:D0:5E
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a363a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:ea:c6:44:4b:56:91:ff:13:e6:73:6d:78:52:9b:44:eb:9f:
         d0:ff:9f:a8:49:78:bc:d6:ea:fe:19:e2:d7:ca:8a:46:b7:67:
         16:93:16:03:46:dc:1c:a2:86:cb:28:d0:d9:bc:09:97:1b:92:
         70:0e:75:3d:46:90:bb:bb:77:92:81:33:83:ad:ac:3a:72:c8:
         ef:b8:71:f9:03:cf:0c:65:31:68:8b:29:4c:2c:3f:20:c0:35:
         f4:b0:d3:26:09:1a:ee:ee:a2:74:47:e8:be:77:c8:41:cb:12:
         bb:8c:4d:21:eb:0c:15:14:04:2f:16:38:33:c4:2c:0b:98:5e:
         ce:5a:b1:ca:8b:95:a3:2d:90:5e:10:c3:cf:c8:65:b1:22:01:
         25:20:58:ee:6a:3a:f9:92:41:d0:62:12:23:35:1c:06:fb:c3:
         05:45:a7:2d:66:65:ad:d7:05:7c:09:02:4b:3f:11:ac:f7:1d:
         50:3a:5e:15:ac:3b:57:0c:6d:36:20:e3:e7:d4:f8:d5:e7:4e:
         d2:f8:18:3f:e3:f7:5a:a1:d0:b7:d5:cd:d5:2c:b5:d4:28:a8:
         ae:21:72:2a:4c:c8:11:40:04:5c:a7:25:bd:2c:98:00:23:8e:
         96:01:9e:23:a3:d5:cb:2c:11:4e:30:85:86:65:48:b3:53:9b:
         3f:39:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 15:20:15 2024 by rpki-client on console-ams.rpki-client.org