Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/323830343a386639343a3a2f33322d3430203d3e20323733343939.roa
File:                     323830343a386639343a3a2f33322d3430203d3e20323733343939.roa (raw, json)
Hash identifier:          c8Jbs0I8Vm32q5LF3JLIr4/lRS5Uacui/tTZPn+mFYI=
Subject key identifier:   B0:36:CF:9A:3D:D6:17:5B:54:8D:9F:42:C0:FC:68:31:4F:3B:DE:FA
Certificate issuer:       /CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
Certificate serial:       7C2BC91D242FC84EF0C789C418CAAF7AB520FCBF
Authority key identifier: 87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/323830343a386639343a3a2f33322d3430203d3e20323733343939.roa
Signing time:             Mon 15 Apr 2024 18:31:11 +0000
ROA not before:           Mon 15 Apr 2024 18:26:11 +0000
ROA not after:            Mon 14 Apr 2025 18:31:11 +0000
asID:                     273499
IP address blocks:        2804:8f94::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl
                          rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2b:c9:1d:24:2f:c8:4e:f0:c7:89:c4:18:ca:af:7a:b5:20:fc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DB2D42F6AA2757F3821F45CED8747B0B68A929
        Validity
            Not Before: Apr 15 18:26:11 2024 GMT
            Not After : Apr 14 18:31:11 2025 GMT
        Subject: CN=B036CF9A3DD6175B548D9F42C0FC68314F3BDEFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:c9:00:03:53:fb:d1:3d:83:a2:57:ef:7b:
                    78:81:0d:a3:72:23:21:5a:34:bc:15:a3:78:e2:c1:
                    08:40:8f:0a:64:03:c8:18:f1:f2:4e:ad:f4:7d:82:
                    e1:a5:5d:c4:c8:65:d8:cd:28:19:7a:1b:49:62:26:
                    23:2d:5e:34:26:21:37:77:44:1c:0a:b1:e5:96:2b:
                    8f:a4:1f:2b:d3:68:99:ea:1d:e3:c7:91:97:10:32:
                    c8:0a:87:6c:fc:c5:ea:c7:e5:51:9e:67:26:1c:70:
                    12:1c:b0:e2:bd:7f:2d:ca:ae:4f:21:d8:97:d6:00:
                    25:24:4d:0b:e7:2e:90:39:29:fc:80:7d:b3:5a:ae:
                    d3:6e:f5:28:e3:e3:1d:34:70:03:94:30:48:21:c3:
                    b0:9c:c8:a0:08:fe:14:86:40:b0:52:e5:87:b7:fa:
                    8b:4e:02:b7:8f:ff:8b:98:10:89:ff:50:92:f1:d2:
                    13:31:8a:b2:26:39:8b:ce:7c:b5:7a:cf:c5:8a:45:
                    38:71:78:99:cd:43:91:83:d8:5d:30:63:8b:1b:d9:
                    eb:5c:90:b6:77:95:21:7e:1d:6b:3a:28:fe:49:0a:
                    46:c7:db:be:5b:8c:2a:61:07:e2:c6:30:36:be:91:
                    af:fc:bd:c4:0d:30:10:ff:61:51:d8:f2:01:f2:78:
                    0d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:CF:9A:3D:D6:17:5B:54:8D:9F:42:C0:FC:68:31:4F:3B:DE:FA
            X509v3 Authority Key Identifier:
                keyid:87:DB:2D:42:F6:AA:27:57:F3:82:1F:45:CE:D8:74:7B:0B:68:A9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/87DB2D42F6AA2757F3821F45CED8747B0B68A929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87DB2D42F6AA2757F3821F45CED8747B0B68A929.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBRK9pHuBPJrBUUoo4U2hs1QYtJuMS7GZTNYimSLXYiL/0/323830343a386639343a3a2f33322d3430203d3e20323733343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f94::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:de:6b:d9:08:3d:b7:65:97:a6:e7:2e:8b:63:3c:5c:1b:22:
         5d:7a:29:84:d9:0a:cb:4e:44:e9:e4:e8:28:dc:e5:4b:37:7b:
         46:c1:93:fd:e1:19:a1:26:52:c9:1b:13:f5:38:11:5a:2f:7d:
         e3:ee:d0:ea:bb:f7:91:c7:88:0d:41:60:63:34:e6:ce:48:90:
         62:b8:df:f9:98:88:54:37:13:6d:a2:50:42:89:58:d6:d3:ce:
         55:3e:f5:40:7f:c4:9d:f6:f6:7b:5a:42:d1:41:68:7f:06:7c:
         55:27:22:f9:d5:56:84:1a:bc:54:46:5a:60:d0:5e:97:c3:13:
         77:85:e7:fc:f3:82:ac:e7:12:2a:fe:83:a7:79:6f:9e:0c:73:
         8c:ec:fe:da:95:6b:ba:58:d1:38:a2:56:8e:e6:72:ce:38:da:
         c4:bd:89:41:54:b4:5d:46:f3:de:0e:7c:8c:a6:a8:7a:dd:07:
         77:9e:6f:14:13:85:7e:96:38:6f:71:51:e4:04:66:f2:13:85:
         a7:89:49:21:0d:60:79:6e:9e:6a:37:39:3e:92:37:df:b6:99:
         48:a9:78:b0:73:f2:09:ec:04:b2:bf:77:70:3f:d3:f2:0d:5a:
         ab:94:54:b4:04:13:67:6c:65:7f:4b:d1:42:03:47:0f:7b:16:
         a1:93:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:49 2025 by rpki-client