Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa
File:                     323830343a323262633a3a2f33322d313238203d3e20323634313139.roa (raw, json)
Hash identifier:          AF0teN75PLhXc0NXXkYv5crHuVMW3I7yOm5v3vrxZ9w=
Subject key identifier:   2D:03:B6:38:0F:3F:70:31:99:FA:AC:AC:00:EA:F7:FA:72:4D:CD:46
Certificate issuer:       /CN=632856CEBE252EA19070F50AFE7804C74E32D51A
Certificate serial:       7CC91E69AF4312F3BE58201E4839A294875ED248
Authority key identifier: 63:28:56:CE:BE:25:2E:A1:90:70:F5:0A:FE:78:04:C7:4E:32:D5:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa
Signing time:             Mon 11 Nov 2024 12:00:39 +0000
ROA not before:           Mon 11 Nov 2024 11:55:39 +0000
ROA not after:            Mon 10 Nov 2025 12:00:39 +0000
asID:                     264119
IP address blocks:        2804:22bc::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 01:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c9:1e:69:af:43:12:f3:be:58:20:1e:48:39:a2:94:87:5e:d2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632856CEBE252EA19070F50AFE7804C74E32D51A
        Validity
            Not Before: Nov 11 11:55:39 2024 GMT
            Not After : Nov 10 12:00:39 2025 GMT
        Subject: CN=2D03B6380F3F703199FAACAC00EAF7FA724DCD46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:17:f0:15:65:c5:65:92:07:3f:9d:8c:db:
                    39:5b:3d:b8:cf:10:f0:00:49:4d:b9:de:55:00:50:
                    8b:cc:41:98:91:28:4c:de:88:9a:da:61:cc:0b:71:
                    0d:d4:42:b5:85:a9:1e:28:91:fb:2d:25:4a:d5:15:
                    5f:fd:63:63:b7:ae:57:07:94:4a:64:95:06:f8:d6:
                    68:ec:13:4e:32:9e:8e:7e:86:98:0b:c8:b3:c1:3e:
                    da:25:71:71:aa:95:6f:7c:e9:83:d7:f6:58:cd:3a:
                    e3:8c:28:c6:99:d5:a3:d3:2c:44:51:54:12:4e:ec:
                    9a:1b:01:05:4d:00:01:cf:15:7c:f9:a4:35:6d:12:
                    2c:da:fc:89:2c:f2:76:54:f2:59:7c:d7:96:6d:aa:
                    43:50:42:e8:d9:1b:2a:69:ee:de:2f:42:4d:93:21:
                    3d:68:48:09:8a:19:17:4f:9f:bb:c5:60:dd:ae:f1:
                    a5:a2:5f:16:23:f9:76:a7:2b:78:9a:fc:26:92:5b:
                    20:19:ca:ea:45:d1:8b:a4:2b:71:70:2a:26:4d:3d:
                    ef:41:24:4b:e9:45:63:6f:12:19:66:bd:70:e7:8d:
                    f0:d0:cf:12:98:d1:b8:07:0b:23:d0:6e:06:40:23:
                    65:07:61:35:1e:1e:3c:48:ab:6b:a9:5f:5e:29:3a:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:B6:38:0F:3F:70:31:99:FA:AC:AC:00:EA:F7:FA:72:4D:CD:46
            X509v3 Authority Key Identifier:
                keyid:63:28:56:CE:BE:25:2E:A1:90:70:F5:0A:FE:78:04:C7:4E:32:D5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/632856CEBE252EA19070F50AFE7804C74E32D51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632856CEBE252EA19070F50AFE7804C74E32D51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:2e:1a:cd:f8:51:1a:c7:fd:6a:68:67:01:9a:1f:d9:c3:bf:
         2d:be:8f:c9:32:ad:9c:c2:d6:43:27:3e:41:6a:dd:3c:19:c0:
         04:4c:e3:2b:f4:48:0b:7c:56:0d:89:39:e1:37:b1:f8:1d:c2:
         9d:f4:52:ea:de:fb:d6:9e:df:4d:1b:7f:04:70:ca:ce:a9:74:
         ae:cf:7c:0d:8c:6d:60:d5:21:b6:81:93:b4:e5:a0:1b:bb:41:
         62:b3:01:88:f4:ed:2e:d2:6d:f8:fa:c8:45:ef:24:e9:b2:a8:
         a1:a6:dd:41:c8:ec:0b:ec:1d:5a:7d:71:1d:be:29:d8:91:41:
         be:4b:3d:c9:73:a4:7a:b0:93:89:69:53:00:38:55:c3:ba:e2:
         38:19:61:ef:95:23:3e:60:b3:c4:35:52:c0:76:ee:0c:09:72:
         cd:40:cf:59:33:e9:25:31:1e:bc:6e:44:7a:46:e6:63:1c:28:
         50:41:19:40:48:63:a0:b1:28:34:45:24:6f:0a:4a:8d:03:7b:
         96:a5:1c:ae:da:6f:14:3b:4f:56:aa:81:94:58:5f:de:b7:3c:
         a3:fb:ad:57:db:d4:53:14:b7:6f:35:5e:a9:f0:b2:19:5d:22:
         8d:8d:c1:b2:90:5a:17:9c:88:57:f3:ac:c9:4a:f6:8c:53:c4:
         db:b4:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:55 2024 by rpki-client on console-fra.rpki-client.org