Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa
File:                     323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa (raw, json)
Hash identifier:          eeV6ecFUyaMMjY8yiKyziHcYvPKc8wVQjmMRJ+9JFc0=
Subject key identifier:   85:B0:5D:0E:18:52:D1:0A:24:23:59:F1:8A:72:09:84:C9:0B:9F:F3
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       3D198909F669684711F6F3AC7D154121325B3C49
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266320
IP address blocks:        2804:3600:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:19:89:09:f6:69:68:47:11:f6:f3:ac:7d:15:41:21:32:5b:3c:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=85B05D0E1852D10A242359F18A720984C90B9FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:27:fb:f3:f6:3a:a3:91:56:da:8e:5f:d5:b6:
                    da:bb:2b:e3:ab:ae:89:41:e7:d6:24:1c:56:7c:0e:
                    1b:d3:0c:68:00:d6:01:72:6e:36:d0:69:d4:e9:96:
                    a2:dd:bd:1d:ea:b5:d8:ef:87:37:4e:37:7a:45:25:
                    ad:83:7f:e7:3a:07:8b:96:09:ec:5c:73:ad:63:68:
                    dc:23:f0:18:22:4d:82:1f:f3:45:a2:9d:2c:a3:75:
                    65:fe:3b:eb:47:c1:ec:f1:82:d2:f3:e2:65:d8:c9:
                    01:7b:25:28:3f:fc:16:08:35:05:4e:61:b7:84:6b:
                    2f:ba:ee:97:4b:b3:89:ef:54:9b:7e:1e:5f:c0:21:
                    76:1e:b7:dc:db:8f:b5:4c:54:60:7b:3f:c4:af:6b:
                    14:53:25:e0:2b:f8:c6:db:13:a1:74:e5:c1:60:61:
                    75:b5:3f:30:65:57:8e:bd:54:9c:28:2f:c0:9a:cb:
                    62:2f:cb:f5:8a:fb:54:b5:07:c1:20:f6:d8:4e:38:
                    9a:c2:53:15:53:1c:eb:2f:0b:65:ec:cf:6e:16:59:
                    35:69:2d:07:b9:49:b3:ce:d5:b9:20:f1:f1:7b:0a:
                    96:98:f4:50:af:ec:51:ee:d0:f5:b3:b7:0a:9b:8d:
                    d6:a7:c0:77:f5:9a:88:61:e1:b8:07:f9:b3:16:b2:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B0:5D:0E:18:52:D1:0A:24:23:59:F1:8A:72:09:84:C9:0B:9F:F3
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:a8:97:46:46:00:97:79:f7:7e:85:64:db:60:7c:48:de:aa:
         96:d5:cb:c0:52:63:fe:b0:d3:e4:79:b0:3a:ae:ab:91:00:94:
         76:76:ce:ce:34:be:ba:12:97:09:e2:19:70:43:58:c0:cc:8e:
         a3:1b:d7:9f:7d:be:05:a0:c4:0b:f0:e3:3e:47:59:b8:88:a0:
         26:7d:85:3e:60:1c:92:9b:2a:cf:07:ae:cc:e0:cf:24:07:20:
         5f:c4:d4:56:35:6b:24:4e:55:0a:dd:0b:ac:b0:0f:1b:4f:b3:
         5f:33:d4:53:68:e4:47:5d:0c:57:13:87:83:2d:de:13:10:06:
         66:dd:ec:93:ef:f1:d9:52:88:9b:53:0f:33:2b:22:61:b3:db:
         0d:a3:a7:38:53:20:6a:bc:68:90:26:15:55:5d:f0:80:34:26:
         5c:8a:3b:ec:c2:3a:29:0d:ca:95:75:35:39:fa:f6:a4:1b:88:
         5e:06:3c:00:b8:62:16:69:b2:2e:a5:5d:52:39:16:06:b2:98:
         73:f6:10:e4:3b:b5:8f:50:ce:4f:16:e2:ae:07:05:8b:4a:e8:
         f5:a6:7c:95:ec:af:03:9c:8b:9f:2c:4d:3c:40:6c:66:a5:a5:
         e4:02:f5:5e:ba:67:15:9d:7c:ff:1e:03:95:cb:d7:25:cc:88:
         31:d5:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:32:02 2024 by rpki-client on console-fra.rpki-client.org