Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
File:                     323830343a383762633a3a2f33322d3332203d3e203631363039.roa (raw, json)
Hash identifier:          ZOrS8fOqcIN1curGbF+IEdR4F85gCxDRtlt+GBAbkLM=
Subject key identifier:   34:50:B9:E1:AD:D5:15:2D:39:35:B5:BF:1C:2A:8B:E0:00:19:30:10
Certificate issuer:       /CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
Certificate serial:       6245774F0EA4DF4D287B163C5B9EC1593DF08F98
Authority key identifier: B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
Signing time:             Thu 04 Apr 2024 16:35:03 +0000
ROA not before:           Thu 04 Apr 2024 16:30:03 +0000
ROA not after:            Thu 03 Apr 2025 16:35:03 +0000
asID:                     61609
IP address blocks:        2804:87bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:45:77:4f:0e:a4:df:4d:28:7b:16:3c:5b:9e:c1:59:3d:f0:8f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
        Validity
            Not Before: Apr  4 16:30:03 2024 GMT
            Not After : Apr  3 16:35:03 2025 GMT
        Subject: CN=3450B9E1ADD5152D3935B5BF1C2A8BE000193010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:5b:1f:7b:54:cc:f7:fd:6a:3d:9a:f4:f2:
                    32:6c:2c:fb:21:86:cb:c9:b2:fa:b3:58:bf:91:e4:
                    ab:42:27:00:06:c2:54:b8:b1:a6:2a:e1:2e:fb:88:
                    7a:e5:70:7a:4f:35:15:57:ca:1f:b2:7b:a3:21:83:
                    1c:5f:f9:c4:9d:61:ae:9f:56:48:c5:fd:5a:57:88:
                    02:4c:b2:5e:80:6f:77:bc:71:f0:83:48:97:b2:df:
                    74:a9:af:dc:43:39:2a:12:77:50:99:d9:ec:bb:5d:
                    07:fb:37:86:21:e8:ca:2b:9f:47:99:b5:5c:39:38:
                    f2:54:76:9e:c2:5d:ae:c0:e5:a4:08:34:63:f6:50:
                    6e:4a:5a:f4:70:f2:28:e3:4b:e9:05:27:8d:c9:a9:
                    b7:a8:ea:fe:f9:17:60:2d:4c:6b:0c:07:8e:eb:78:
                    fb:49:31:eb:8b:2b:0e:6f:18:76:9e:62:9d:6f:c5:
                    f7:62:0b:ca:25:1a:c8:05:58:97:80:69:a1:7f:25:
                    ea:e5:ea:a6:fa:46:10:20:6d:14:7a:5b:49:71:80:
                    46:ea:76:ee:df:c8:90:af:b0:74:78:c1:81:19:e3:
                    8b:9d:c8:e2:16:80:72:d1:9a:77:6b:18:cf:a8:f7:
                    fc:85:0c:14:f2:a8:d8:e3:7f:c4:e1:2b:09:14:48:
                    50:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:50:B9:E1:AD:D5:15:2D:39:35:B5:BF:1C:2A:8B:E0:00:19:30:10
            X509v3 Authority Key Identifier:
                keyid:B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:7f:6f:10:d5:27:a0:cd:de:e1:e5:f2:ed:c0:83:51:82:12:
         0e:ca:73:68:6e:f8:a3:76:89:99:68:0b:27:d1:19:98:ab:a7:
         c7:2a:74:44:5f:86:54:fc:d4:80:06:17:a7:93:3a:b1:71:aa:
         4d:e5:d6:0a:7f:19:67:15:d5:bd:5b:95:2f:90:b5:3f:18:8c:
         06:ab:ca:86:07:21:15:db:e6:a9:47:91:94:e8:23:8a:19:c7:
         69:87:a3:43:8a:da:9e:c1:38:b8:e9:1d:36:d1:77:3f:f9:9d:
         16:27:97:5d:c9:48:60:1d:09:c9:fd:fe:71:f4:9c:8e:7e:ab:
         62:18:65:f5:91:7e:7f:d3:9a:90:58:c7:b9:b2:a4:ed:bd:ff:
         08:af:08:f5:70:ff:db:d0:ef:59:32:8e:6b:8f:b9:3e:33:02:
         ea:1d:cc:d9:a8:35:60:b4:b2:88:1b:a3:5f:9e:28:38:ca:9a:
         64:b2:55:13:58:7d:1e:34:c4:7b:d7:1b:2b:c0:95:45:d6:10:
         c2:78:3c:45:51:9c:8e:d0:9d:18:ab:95:cf:6d:0e:88:16:25:
         9d:77:5e:43:ee:3e:5b:c6:da:e0:68:ab:66:17:f3:34:7f:22:
         2d:d8:40:54:b4:1d:3f:b6:a1:ce:2d:4b:f5:aa:27:17:72:1b:
         21:b9:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org