Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
File:                     323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (raw, json)
Hash identifier:          6GYdIkLF43eOretGuZj8d2uqKCKHVIFJuPUGeAQd8uc=
Subject key identifier:   87:67:D9:09:BD:EB:65:AD:51:ED:39:32:6B:7A:A8:DF:F2:0F:CF:2F
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       213AB72279C33B34E1723B5D62FF921F1E63BDA9
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
Signing time:             Thu 04 Apr 2024 01:52:35 +0000
ROA not before:           Thu 04 Apr 2024 01:47:35 +0000
ROA not after:            Thu 03 Apr 2025 01:52:35 +0000
asID:                     52545
IP address blocks:        2804:e1c:fb00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:b7:22:79:c3:3b:34:e1:72:3b:5d:62:ff:92:1f:1e:63:bd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Apr  4 01:47:35 2024 GMT
            Not After : Apr  3 01:52:35 2025 GMT
        Subject: CN=8767D909BDEB65AD51ED39326B7AA8DFF20FCF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:59:5f:ba:48:fb:0d:51:f2:38:73:70:ac:
                    fa:2b:fa:38:e8:60:6e:ee:17:8b:df:3c:c6:c5:46:
                    74:e8:11:ab:71:54:96:0b:fb:8d:35:c3:97:0d:85:
                    3e:bc:5a:82:77:e1:03:aa:ea:ba:0c:18:ab:b4:36:
                    f4:13:27:b3:9f:91:e8:36:1e:63:a2:cb:62:a5:4e:
                    b9:3c:62:3a:95:9e:39:c3:34:fd:b9:64:66:8f:64:
                    1b:38:f5:92:e5:29:40:b0:4e:92:76:bc:ca:09:61:
                    39:75:08:dd:2f:df:ef:9a:59:50:74:0a:54:07:1b:
                    f5:9c:8a:6a:38:60:3b:7f:c3:09:b9:fa:e1:9d:fe:
                    b5:7a:1e:86:8c:dc:34:ea:d5:41:54:85:ad:64:41:
                    21:60:29:64:11:ec:b6:42:91:c0:a2:f2:02:e2:ec:
                    ee:b9:fc:65:77:50:ee:93:1e:d6:71:52:eb:b0:95:
                    01:36:25:9d:14:3a:e7:54:8e:50:d5:6e:e9:6a:74:
                    7d:40:6c:c1:5e:a6:85:f3:05:64:11:b4:83:34:19:
                    94:49:21:0d:81:11:0d:15:37:29:37:f6:b0:98:df:
                    e1:de:3f:de:43:20:95:89:69:f0:72:16:37:7d:67:
                    37:4f:23:eb:ce:b7:2e:0e:a5:a6:d7:0e:14:64:68:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:67:D9:09:BD:EB:65:AD:51:ED:39:32:6B:7A:A8:DF:F2:0F:CF:2F
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:06:1d:29:b4:fa:7e:24:0d:2d:f3:e4:fc:a3:36:39:11:
         d4:fb:80:12:29:1b:ef:28:d0:9f:1f:43:e5:07:ab:f2:bc:c7:
         9b:e7:8e:76:64:37:77:0b:76:5c:f9:09:0c:f5:09:84:88:37:
         3e:66:27:95:fa:0b:d1:6b:16:39:da:a6:29:70:e3:4a:50:6c:
         db:25:94:84:aa:3f:b9:8b:84:32:4d:17:86:6b:4e:8f:44:bc:
         b9:93:66:79:c3:cf:98:51:f5:c3:26:e7:ae:5a:3a:cc:e4:1b:
         37:09:64:70:7a:1b:53:fe:1d:59:dd:61:71:3f:7f:58:31:ba:
         f5:c2:36:e0:ee:6e:c2:2a:2b:c3:13:d8:9e:79:4c:06:cc:09:
         fb:58:90:89:13:b8:03:46:f6:7f:2d:70:66:30:e1:93:e0:9a:
         3c:76:4f:78:be:9f:0e:1d:32:ba:db:f1:07:50:03:22:af:c0:
         cb:b3:9a:70:af:67:cb:07:ef:8b:e1:8e:21:d7:e1:f7:78:8e:
         18:53:15:35:c5:65:2e:4f:fc:bd:11:49:68:63:50:58:eb:24:
         98:f4:41:d0:df:58:68:34:d5:6a:c2:1c:68:d2:64:0d:8c:9d:
         18:48:54:a7:6f:2c:20:1d:37:2f:7e:8a:ab:24:a3:6a:e5:05:
         a7:3a:e8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:08:29 2024 by rpki-client on console-ams.rpki-client.org