Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          XajqVl8NFRUYFgeFosWtiysndSjfQuKmE0Cfu5ih27I=
Subject key identifier:   66:DA:8B:EF:14:D7:C6:BA:64:52:2A:BB:5F:26:C9:86:1C:4B:87:6C
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       0334712BEDC11D5BA9AF7ACDCA5C9C1A41AE622F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 04 Apr 2024 01:52:35 +0000
ROA not before:           Thu 04 Apr 2024 01:47:35 +0000
ROA not after:            Thu 03 Apr 2025 01:52:35 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:34:71:2b:ed:c1:1d:5b:a9:af:7a:cd:ca:5c:9c:1a:41:ae:62:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Apr  4 01:47:35 2024 GMT
            Not After : Apr  3 01:52:35 2025 GMT
        Subject: CN=66DA8BEF14D7C6BA64522ABB5F26C9861C4B876C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:f6:55:d8:c6:de:2a:7a:d6:de:d7:c9:8b:
                    05:cc:00:63:b0:c9:23:56:80:fe:42:d7:63:51:d6:
                    25:06:c0:06:c2:17:e8:8b:d5:c9:8c:40:3a:cf:a7:
                    c3:1b:60:b0:b4:38:15:f8:19:89:85:c9:4d:99:85:
                    35:6e:d7:a1:ce:5b:3d:c5:d3:4d:e0:89:8d:49:53:
                    87:d6:03:50:bb:f5:96:fc:f5:fe:16:11:a0:8e:5a:
                    9c:1f:9e:ba:da:f8:8b:c8:0a:18:e5:6b:0e:99:06:
                    86:09:10:ec:14:7b:c9:84:d5:93:04:2a:9b:5e:ca:
                    e9:3e:d6:d6:02:68:cc:d8:69:28:c2:f3:b3:e9:01:
                    04:05:8b:c1:4a:b0:97:35:c2:ae:13:5a:c6:b1:3c:
                    4f:20:23:da:c1:12:78:c0:8e:b3:3b:2e:ff:a9:d4:
                    6a:09:28:5e:f3:98:03:25:a3:13:d3:29:65:a4:ac:
                    cd:97:bf:06:3d:c5:25:6c:68:d6:4c:62:f5:66:76:
                    20:a3:f1:1b:0b:59:08:5c:2e:2c:fa:f1:de:2b:14:
                    f5:0f:d4:8c:e9:ed:40:63:ca:59:0c:17:f8:4c:7a:
                    a1:7e:5c:c6:c4:7e:02:9d:bf:60:75:cf:38:f4:33:
                    a6:71:86:57:3d:42:1a:1f:8e:a6:05:1c:c4:b3:ac:
                    52:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DA:8B:EF:14:D7:C6:BA:64:52:2A:BB:5F:26:C9:86:1C:4B:87:6C
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:f5:d3:16:15:61:d4:ee:24:41:62:99:a7:21:5a:23:68:
         22:6e:8b:f2:8e:0d:7a:f3:0f:06:45:5a:98:55:47:05:bc:8b:
         48:26:13:33:2b:c4:b5:99:ab:53:04:45:08:c3:36:ca:f3:4a:
         36:54:74:08:24:17:e3:5e:c6:df:a8:00:8e:8b:09:12:d5:90:
         af:80:6d:ba:2f:64:8c:c0:7a:25:34:1b:b7:c7:99:d2:fc:b8:
         4e:b4:ba:5b:d9:59:f4:a8:51:b3:22:f6:88:47:e9:4d:d2:36:
         5c:bd:19:37:d5:38:41:75:c5:88:fe:85:e7:04:ea:74:c3:9f:
         19:fc:bb:4d:f5:c2:d8:e7:ab:5f:8a:33:71:8d:c6:03:c3:ce:
         60:96:13:26:bc:1e:c9:cd:20:a9:5b:f9:76:5f:87:5d:36:84:
         44:d3:0c:c1:e4:72:07:5f:f9:ba:9e:4d:93:61:5a:6e:7e:3a:
         da:5f:a0:3e:39:10:18:3a:7e:d1:3d:97:fe:ba:79:b9:6a:08:
         ed:bb:a6:ad:66:dd:b4:16:9e:45:19:8f:2d:84:21:ad:ae:ce:
         2d:d5:f1:76:f5:43:b6:b2:8e:7a:9d:cf:bb:ff:eb:80:62:3f:
         6b:c0:01:7a:4d:91:b2:85:aa:22:20:ad:af:1b:1c:d0:d0:8f:
         40:7d:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:44 2024 by rpki-client on console-ams.rpki-client.org