Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa
File:                     323830343a346330633a3a2f33322d3438203d3e20323637333435.roa (raw, json)
Hash identifier:          fzzZFMWj1rHiEyV6alQ3wuVb+6RFUr6naMvGAKengd0=
Subject key identifier:   DD:99:3C:B0:C1:A5:C3:CE:01:91:F0:29:C2:EA:31:E1:DD:A6:B1:EF
Certificate issuer:       /CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
Certificate serial:       07F0D188D7E891E7E3732C6BB50E1AA41FF53386
Authority key identifier: 69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa
Signing time:             Thu 09 May 2024 14:00:53 +0000
ROA not before:           Thu 09 May 2024 13:55:53 +0000
ROA not after:            Thu 08 May 2025 14:00:53 +0000
asID:                     267345
IP address blocks:        2804:4c0c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl
                          rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 14:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f0:d1:88:d7:e8:91:e7:e3:73:2c:6b:b5:0e:1a:a4:1f:f5:33:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690D626EAE0C4CC2FDC6767C62AA474C586B9D05
        Validity
            Not Before: May  9 13:55:53 2024 GMT
            Not After : May  8 14:00:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:45:f4:fc:3a:1e:42:73:ad:b8:05:cc:6f:ac:
                    46:6b:ae:63:7f:d7:c0:96:72:54:09:b7:46:38:23:
                    a2:82:a7:ac:9a:d3:69:25:7b:94:e0:23:d8:c3:d6:
                    3b:e6:8f:9c:97:cc:8f:7f:8a:ab:79:96:8f:76:9f:
                    64:8b:56:6a:1d:bf:77:6e:94:c4:0f:fb:00:7a:3f:
                    e1:ef:ab:6c:e6:22:a0:10:c4:bc:95:66:ae:fd:fc:
                    a9:30:0e:5e:db:63:5a:c9:e8:04:ed:23:63:2b:89:
                    0c:ed:16:a3:61:09:3c:96:e2:86:d3:31:43:ce:8e:
                    be:d0:de:20:e9:a3:54:d0:4d:14:94:79:21:ee:4f:
                    5b:5e:89:77:18:02:86:fa:fa:10:15:da:39:82:63:
                    7e:0d:ec:08:57:f4:9b:a5:50:da:6d:74:ca:f3:8a:
                    fe:1b:6c:b9:e3:d1:d0:a5:7b:31:27:eb:49:b7:f3:
                    68:9a:f1:b0:4f:84:ce:8c:44:f0:2c:b0:73:ae:8b:
                    4c:c8:01:e6:03:22:b4:3a:25:24:77:1e:c7:9e:43:
                    5f:89:e6:8f:7a:69:bb:78:da:8f:7a:c9:ba:fb:b9:
                    8a:0f:72:81:d5:85:65:0c:9d:19:d0:ec:d9:75:30:
                    c1:e8:09:79:eb:02:00:b5:c8:ab:a6:21:0b:ef:d0:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:99:3C:B0:C1:A5:C3:CE:01:91:F0:29:C2:EA:31:E1:DD:A6:B1:EF
            X509v3 Authority Key Identifier:
                keyid:69:0D:62:6E:AE:0C:4C:C2:FD:C6:76:7C:62:AA:47:4C:58:6B:9D:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690D626EAE0C4CC2FDC6767C62AA474C586B9D05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8yttiV8GtT1LrHSi3wx2ZxshvuacPh2KSEmHqFLQoHU/1/323830343a346330633a3a2f33322d3438203d3e20323637333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:a9:2c:5d:14:5e:7c:ad:38:e2:a0:0d:be:f2:f7:84:b4:eb:
         12:c5:d5:69:d0:9c:39:93:b5:09:87:a0:a3:6c:19:3e:b2:ec:
         01:45:ad:7a:40:bc:4e:94:20:4b:99:21:9b:15:2c:83:07:39:
         89:a7:43:47:46:91:dd:aa:71:03:a5:ae:43:71:60:c6:33:34:
         3f:ac:ce:fd:bc:65:78:a3:a7:f9:58:7e:71:0f:05:17:9b:c1:
         63:26:20:08:02:a9:95:cb:55:9c:38:7a:51:61:56:43:0c:0a:
         6b:f4:a2:2b:4c:13:7b:a8:a6:22:36:49:f9:90:5d:98:bc:85:
         06:74:9e:58:50:11:a6:38:73:3a:07:04:c0:35:a2:6a:75:22:
         d7:19:b5:52:82:5e:91:58:af:32:90:7b:4f:c0:f6:e1:9a:07:
         60:44:7c:b6:7b:1c:b7:34:0f:4f:69:c0:72:ee:41:ee:de:16:
         62:bb:77:5d:40:e2:e8:e5:fd:7d:e7:03:31:0a:ba:5e:41:c7:
         ad:74:98:37:9d:40:67:59:03:fa:4d:aa:c0:e9:f5:8f:d6:d7:
         cb:cc:b7:8b:a8:29:12:72:3c:1a:1f:d4:93:2e:96:8e:78:f0:
         c9:59:93:37:a7:81:bf:71:75:1c:fb:20:70:d7:b0:95:4a:d4:
         d2:44:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:15:25 2024 by rpki-client on console-fra.rpki-client.org