Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa
File:                     323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa (raw, json)
Hash identifier:          EClFTOizMHSqzSQoiPIGxJErZCiJNMojGxpqy/DPOU0=
Subject key identifier:   98:C5:F9:F9:F6:5A:A3:62:F6:3F:05:7B:1C:73:53:BC:D3:41:56:0A
Certificate issuer:       /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial:       52176657AE1E617D89A43C941688E433A9058842
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa
Signing time:             Thu 04 Apr 2024 21:30:29 +0000
ROA not before:           Thu 04 Apr 2024 21:25:29 +0000
ROA not after:            Thu 03 Apr 2025 21:30:29 +0000
asID:                     264036
IP address blocks:        2804:29d0:8000::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
                          rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:17:66:57:ae:1e:61:7d:89:a4:3c:94:16:88:e4:33:a9:05:88:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Validity
            Not Before: Apr  4 21:25:29 2024 GMT
            Not After : Apr  3 21:30:29 2025 GMT
        Subject: CN=98C5F9F9F65AA362F63F057B1C7353BCD341560A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:9c:07:ec:eb:8b:9a:48:f3:e9:34:7e:7f:
                    16:de:68:5a:72:bf:fd:58:8a:b8:c7:4c:41:3c:48:
                    04:ca:f5:d7:e5:45:cb:97:7f:84:24:cc:46:51:04:
                    d9:20:e0:4a:d6:80:90:cc:db:74:63:90:e0:a4:da:
                    7c:12:73:76:7c:78:b2:b2:c9:eb:d5:19:43:e4:1f:
                    74:cc:32:cc:42:a4:c2:c4:75:fb:b3:01:b0:34:f4:
                    19:e5:9a:b9:13:5d:24:c5:a6:5a:4c:24:7a:4d:42:
                    34:ba:39:42:f3:55:47:28:eb:ea:e7:bf:09:4b:ba:
                    b4:c2:f1:e8:33:db:4a:1f:97:01:28:0f:f7:a7:0d:
                    89:2e:21:29:0d:6f:8a:30:3a:78:98:cb:c5:4f:53:
                    6c:ac:6a:75:36:8a:f2:46:81:60:2c:09:58:ac:da:
                    31:89:58:df:04:d8:10:43:78:01:ed:33:2c:df:5f:
                    b4:9a:18:5f:84:c6:62:45:23:91:d9:f9:ea:e3:92:
                    28:99:42:19:52:5a:12:12:3d:76:20:c1:4a:fd:62:
                    75:94:a5:4d:4f:ba:3b:c3:fe:98:b5:82:e9:37:ff:
                    70:e1:d9:f4:10:c8:c8:75:2f:9a:56:7c:53:ff:52:
                    ae:e8:71:16:0d:a2:b3:45:e0:34:b8:09:b5:af:e1:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:F9:F9:F6:5A:A3:62:F6:3F:05:7B:1C:73:53:BC:D3:41:56:0A
            X509v3 Authority Key Identifier:
                keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a383030303a3a2f33332d3333203d3e20323634303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29d0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b3:9b:dc:4e:e0:a3:07:49:56:af:96:fe:69:7d:27:41:e4:99:
         e1:b8:0a:6c:92:d9:e5:f7:38:b2:d3:0a:1f:33:71:37:3b:05:
         5b:2e:18:4a:cb:f2:62:de:2b:9b:b2:40:45:e0:89:4c:ae:e3:
         02:19:79:cd:b3:11:51:db:80:7d:6a:93:f6:33:a1:57:c9:bc:
         ab:1d:2b:8c:52:bd:23:1a:98:84:10:67:d6:73:54:dc:d4:38:
         0b:06:e9:75:ea:e3:2e:2d:96:04:62:26:36:08:5e:b2:67:6e:
         89:c2:08:f3:e2:82:b8:d8:67:a0:65:a9:22:2c:6d:8f:e5:06:
         f9:41:63:12:67:ba:a7:09:a1:82:cf:2e:90:18:56:cb:f3:ce:
         e9:42:b2:96:0e:1b:18:d6:37:92:4a:b4:ec:6e:0d:e2:f3:f6:
         e0:4d:ce:43:bb:ce:52:be:72:31:b9:a5:e2:40:60:80:e6:73:
         30:a0:41:6b:9e:bf:c3:70:0f:dd:ec:13:c5:fe:40:e6:5f:57:
         61:3f:53:db:f8:25:38:5a:fc:68:7d:df:d2:d6:32:90:61:f3:
         75:8a:bf:5d:13:dc:2b:98:94:66:ff:5f:6c:43:80:7a:be:e4:
         73:e2:24:1f:f1:91:ea:5f:6a:c0:c9:83:4a:99:9e:6f:db:1f:
         63:8a:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 11:59:58 2024 by rpki-client on console-fra.rpki-client.org