Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa
File:                     323830343a346262383a3a2f33322d3438203d3e20323637333236.roa (raw, json)
Hash identifier:          rdIcb700YxMfxdJ0qOOAerPgAU89pTH1E1dDTxGEN4o=
Subject key identifier:   13:0E:77:91:37:7E:80:CA:64:3C:C2:98:AE:E5:04:92:B1:5F:20:9E
Certificate issuer:       /CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
Certificate serial:       66DDEC4EA86E41948AB38C38CB661E955BBC61EE
Authority key identifier: BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa
Signing time:             Thu 04 Apr 2024 03:01:13 +0000
ROA not before:           Thu 04 Apr 2024 02:56:13 +0000
ROA not after:            Thu 03 Apr 2025 03:01:13 +0000
asID:                     267326
IP address blocks:        2804:4bb8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl
                          rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 04:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dd:ec:4e:a8:6e:41:94:8a:b3:8c:38:cb:66:1e:95:5b:bc:61:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE7C82FCD91A11CE5A95DCF80706992CF9D292EC
        Validity
            Not Before: Apr  4 02:56:13 2024 GMT
            Not After : Apr  3 03:01:13 2025 GMT
        Subject: CN=130E7791377E80CA643CC298AEE50492B15F209E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:69:fc:67:9a:53:03:17:04:67:47:79:5a:
                    08:b7:13:7a:17:2c:93:e8:b3:a6:4b:ed:8c:31:75:
                    aa:dc:b1:e3:61:27:4b:4f:cf:e7:07:a0:f0:c9:40:
                    2c:e6:0d:0e:5a:d0:8b:d8:e1:ff:27:5e:63:4f:76:
                    68:40:7c:2b:f4:85:73:79:b9:00:af:83:4f:56:ca:
                    1a:af:78:5a:0d:ed:20:b7:21:15:af:53:f3:eb:8e:
                    6b:19:2e:ee:40:e0:72:e4:86:43:ce:89:42:f5:65:
                    94:fd:6e:84:d3:21:4e:37:35:b2:4f:b5:be:7d:6d:
                    a6:d9:b1:1b:63:cd:10:c8:29:36:b1:98:87:0d:01:
                    f0:b9:5a:7e:e4:e2:d0:8c:7a:33:54:60:2f:e6:ee:
                    d9:d4:22:1d:70:96:81:f1:cc:3b:83:df:b9:6c:72:
                    42:83:ac:aa:ae:69:72:ac:ed:2e:10:cc:1c:11:2e:
                    6f:0a:d3:87:b1:d4:18:98:c1:57:b4:7a:d5:10:60:
                    cf:71:cc:98:0e:22:8f:21:45:63:08:59:d5:d8:42:
                    a5:40:f5:14:7e:6b:13:04:37:78:a8:ed:5d:73:90:
                    77:bd:e0:31:96:b8:9d:49:5a:08:4c:3f:7f:35:22:
                    b9:f7:53:99:e1:1e:37:c4:01:31:aa:a6:ac:ad:6f:
                    12:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0E:77:91:37:7E:80:CA:64:3C:C2:98:AE:E5:04:92:B1:5F:20:9E
            X509v3 Authority Key Identifier:
                keyid:BE:7C:82:FC:D9:1A:11:CE:5A:95:DC:F8:07:06:99:2C:F9:D2:92:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE7C82FCD91A11CE5A95DCF80706992CF9D292EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/1/323830343a346262383a3a2f33322d3438203d3e20323637333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e2:9e:b4:a5:85:ac:9c:97:39:39:de:3f:77:55:f4:24:c3:
         73:a9:fb:20:81:7a:69:cf:26:bd:a9:76:4a:92:13:92:df:72:
         af:62:4a:b4:61:01:2e:41:bd:3d:c2:1d:92:30:41:ef:6b:85:
         69:31:dd:f8:7a:52:c3:44:1d:d6:dc:40:26:c5:68:a9:79:8b:
         af:02:ee:61:1b:bb:67:cf:59:23:13:9a:54:b1:d0:5c:53:15:
         11:4d:4c:24:0b:a6:d0:83:fc:a6:7d:24:ca:e1:06:9b:13:74:
         87:4e:0f:8d:d9:b1:97:96:b2:b7:30:db:07:9f:c7:2e:56:05:
         e1:2b:ee:40:63:2d:5c:92:f0:65:82:32:98:be:ca:b9:4e:4d:
         7a:eb:c9:ed:1e:a8:92:34:7e:20:bb:b5:98:69:e6:9c:3d:78:
         7a:29:10:78:96:fb:bb:e1:f8:ec:16:98:74:7b:47:7f:03:11:
         3b:87:3c:2c:8d:13:e6:e4:4d:8e:80:26:67:e8:b5:3d:6a:6a:
         df:ff:8c:ed:6d:c0:2d:d7:28:e0:7b:c3:16:01:3f:31:e0:65:
         5d:b6:3a:06:f3:93:79:5f:31:5a:8c:31:63:9d:a5:32:38:3c:
         81:e2:0e:84:20:88:9f:95:e3:86:74:10:95:57:9d:36:20:61:
         24:65:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 04:52:56 2024 by rpki-client on console-ams.rpki-client.org