Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa
File:                     323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa (raw, json)
Hash identifier:          Dgj3aTnukJt79XBBZ642MSZ2/eQ2RLeYj6Gks0gbzKQ=
Subject key identifier:   E3:8B:FB:E0:B1:DB:E5:7F:28:AA:BC:4A:EB:69:D7:40:2D:A4:3E:00
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       650D4D59A89B7EDBB5587B5D9E79040CB59EEB47
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:07 +0000
ROA not before:           Wed 03 Apr 2024 18:26:07 +0000
ROA not after:            Wed 02 Apr 2025 18:31:07 +0000
asID:                     266320
IP address blocks:        2804:3600:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:4d:59:a8:9b:7e:db:b5:58:7b:5d:9e:79:04:0c:b5:9e:eb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:07 2024 GMT
            Not After : Apr  2 18:31:07 2025 GMT
        Subject: CN=E38BFBE0B1DBE57F28AABC4AEB69D7402DA43E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:4f:e7:b2:41:5b:d5:5b:4b:2d:08:c0:6b:
                    9c:3e:49:46:5f:fa:0f:95:ce:d6:44:31:b5:94:92:
                    47:a2:af:fd:74:48:b6:15:a6:59:f6:9e:d8:79:3e:
                    8e:0a:dc:20:83:c0:cd:c5:28:92:e8:2c:09:82:90:
                    6f:47:02:c3:e8:fd:c2:76:41:47:5f:14:4f:ba:13:
                    cb:3a:96:a7:e1:90:ae:1b:92:d4:4f:f8:8c:d3:4d:
                    e8:98:81:5e:48:bd:68:04:c4:91:e2:63:a6:f8:be:
                    f4:36:b0:fe:16:af:eb:a5:27:fb:99:34:40:9e:15:
                    e2:c1:3e:af:db:18:9e:e1:49:83:04:8d:d7:d6:67:
                    95:58:ba:e4:4d:d4:24:e5:4d:4e:65:8b:94:30:04:
                    5c:13:3c:9f:49:93:0c:d8:c6:81:08:88:95:30:98:
                    82:07:cc:8b:b1:e7:21:8e:2b:98:9f:6a:04:f8:99:
                    20:61:00:11:62:02:7d:97:10:f6:66:d5:34:a1:ed:
                    af:39:10:4e:2f:94:c1:96:06:b0:de:7b:af:6f:14:
                    3b:c9:91:b2:fd:d5:c7:4b:03:45:9f:c2:eb:38:bf:
                    c4:6e:79:41:50:b0:eb:e7:47:be:1f:01:bc:36:16:
                    71:aa:c3:c0:57:9e:99:60:25:de:07:0b:28:bb:56:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8B:FB:E0:B1:DB:E5:7F:28:AA:BC:4A:EB:69:D7:40:2D:A4:3E:00
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33342d3334203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b5:0b:b0:45:44:d4:bb:80:27:75:7a:03:aa:f2:17:87:68:9e:
         49:47:b9:8c:68:35:27:ec:00:41:2c:60:45:be:8d:d4:48:66:
         fd:fd:02:8e:80:20:55:63:4e:41:be:79:aa:77:f8:ac:25:24:
         3d:d8:b6:29:9c:10:51:32:b7:ed:8e:46:8b:1d:88:4d:f1:dd:
         91:99:4e:ef:9c:cb:df:c5:5e:d3:f6:73:63:5b:cb:e4:d2:2d:
         a6:c4:08:5c:92:18:cf:3f:64:7a:a3:2a:c6:f9:c4:9b:36:44:
         ed:94:37:34:71:a7:7a:ca:7d:23:71:29:bf:4d:2f:1b:91:30:
         3d:22:3a:34:5e:35:a4:f2:66:fd:b9:0c:88:69:60:06:4d:d4:
         3c:8c:d9:6c:79:4a:45:3f:0f:05:55:03:b8:7f:c3:5b:b0:dd:
         c6:0a:b9:72:c9:00:99:30:fd:08:01:46:74:9f:df:dc:a6:ac:
         90:80:bd:98:24:e8:b2:ea:ac:75:b2:3e:ef:8c:3d:f6:fc:79:
         60:36:4d:dd:dd:d2:53:33:e6:33:4d:c8:e3:29:55:0f:10:d8:
         1b:f8:23:52:b5:d7:e0:ba:a0:37:1c:e8:8e:b9:e4:38:60:63:
         96:71:c4:df:8e:51:09:3d:1b:08:d4:5e:49:45:09:63:0e:61:
         86:d4:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org