Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33332d3333203d3e20323636333230.roa (raw, json)
Hash identifier:          JJAeejvrQs30qjfj9p5DfGhH7bO/mcJaqXRBJX24Qnk=
Subject key identifier:   A9:75:24:C5:E3:38:B0:C0:7C:1E:85:6F:9C:BA:5C:AD:22:D1:BF:77
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       0C564F88584608AB13FB23DE89A55C965D1CD7EE
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa
Signing time:             Wed 03 Apr 2024 18:31:06 +0000
ROA not before:           Wed 03 Apr 2024 18:26:06 +0000
ROA not after:            Wed 02 Apr 2025 18:31:06 +0000
asID:                     266320
IP address blocks:        2804:3600::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:56:4f:88:58:46:08:ab:13:fb:23:de:89:a5:5c:96:5d:1c:d7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Apr  3 18:26:06 2024 GMT
            Not After : Apr  2 18:31:06 2025 GMT
        Subject: CN=A97524C5E338B0C07C1E856F9CBA5CAD22D1BF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:c6:2d:b8:6d:e0:6d:26:aa:77:4e:b7:e4:
                    17:f0:53:72:20:d6:10:25:b9:56:81:75:b1:e1:25:
                    6e:ef:b3:5a:9c:f3:78:02:fe:35:e4:f4:f9:2f:26:
                    df:b0:fa:a5:e5:02:c2:be:d2:ea:b4:ed:a7:90:33:
                    a0:4e:db:d1:39:39:f5:56:cc:3e:94:19:19:db:f2:
                    dd:ca:b2:b0:ec:8e:54:cd:45:f1:34:bc:2e:81:6c:
                    45:0b:65:46:9a:05:8c:82:28:c2:55:63:f8:b9:7b:
                    b7:51:7b:8d:33:33:45:66:3c:03:5b:1b:bd:c1:64:
                    52:69:21:90:97:7a:aa:d7:5c:ec:f1:6e:ba:38:08:
                    18:ce:95:55:08:85:17:a3:2f:98:cc:11:be:d7:f5:
                    71:44:9e:7b:e9:42:e9:56:02:a7:70:89:b6:cd:b6:
                    ae:04:3a:c2:e4:44:06:8f:8c:c7:ac:65:5e:82:46:
                    17:cb:e9:dd:2c:83:51:2a:62:e8:d8:14:5a:4c:0b:
                    e3:92:38:0b:52:b7:16:10:28:ad:4b:f3:1f:6d:6b:
                    3f:ad:5b:c4:43:70:6d:2e:c0:a5:b8:ba:24:48:54:
                    e5:d7:da:a6:50:a6:cd:d3:25:bc:7c:60:6a:79:66:
                    eb:86:63:4e:f7:d8:ab:01:ef:27:11:08:43:a9:ec:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:75:24:C5:E3:38:B0:C0:7C:1E:85:6F:9C:BA:5C:AD:22:D1:BF:77
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:97:dc:72:4d:21:67:0c:34:b1:c6:ce:86:83:e4:2a:a6:
         76:4f:8e:f0:55:3c:10:6e:10:9f:a6:48:6b:29:6d:59:c6:c9:
         0c:6c:a9:22:15:39:7a:71:d1:c4:70:49:12:6e:43:d3:a6:b4:
         ef:e1:a2:a0:f5:27:01:4c:10:a7:80:e6:ff:96:38:38:4a:11:
         68:3e:51:f6:42:0b:a2:3d:73:d1:85:62:20:5f:22:dc:5f:70:
         3b:34:b2:3b:a3:21:b3:8e:60:14:eb:44:dc:3c:62:5b:4c:69:
         57:f7:5a:12:fb:c1:bc:53:52:0c:c6:0a:3a:10:a5:86:dc:c6:
         30:1b:30:94:d0:a9:ca:85:41:5d:4d:50:90:f0:6e:88:35:89:
         fc:62:18:79:a4:e9:af:02:5a:83:f3:d3:80:68:8c:c0:a2:ae:
         56:6b:93:b1:70:85:c5:5c:d9:23:26:04:7f:f2:6b:b7:15:25:
         02:34:17:b5:ad:b2:da:58:a8:10:5f:52:02:a1:3b:cd:2c:a0:
         44:2e:b3:a4:dc:a9:cd:b6:12:62:6f:f5:21:9d:89:28:9a:f0:
         1c:f3:03:49:d3:32:0a:d7:96:c9:01:9b:5c:b5:9b:5a:f1:b8:
         5d:c6:dd:97:8a:9c:5b:93:f3:6e:ef:56:72:e9:c8:af:70:da:
         1f:ae:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:52 2024 by rpki-client on console-ams.rpki-client.org