Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a343030303a3a2f33342d3334203d3e20323734363933.roa
File:                     323830343a393232383a343030303a3a2f33342d3334203d3e20323734363933.roa (raw, json)
Hash identifier:          QFuw7R4LXAtuWEVtokvpj6wreDRx91CATQucOLxry1U=
Subject key identifier:   B8:E0:89:92:43:10:36:25:F0:2D:DB:F7:55:CD:21:5C:DE:D6:19:53
Certificate issuer:       /CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
Certificate serial:       1AE9859CC3A596456F366DC704121DCD211D9A71
Authority key identifier: 9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a343030303a3a2f33342d3334203d3e20323734363933.roa
Signing time:             Thu 14 Nov 2024 13:57:08 +0000
ROA not before:           Thu 14 Nov 2024 13:52:08 +0000
ROA not after:            Thu 13 Nov 2025 13:57:08 +0000
asID:                     274693
IP address blocks:        2804:9228:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:85:9c:c3:a5:96:45:6f:36:6d:c7:04:12:1d:cd:21:1d:9a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
        Validity
            Not Before: Nov 14 13:52:08 2024 GMT
            Not After : Nov 13 13:57:08 2025 GMT
        Subject: CN=B8E0899243103625F02DDBF755CD215CDED61953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:ae:4a:5c:78:df:b3:bb:e5:de:0d:db:ea:
                    d0:8b:58:ec:db:f7:ad:a6:b7:6a:a5:e0:9b:a4:e5:
                    bb:ed:5b:39:37:ea:bb:15:66:3c:ca:79:cd:1c:8e:
                    32:e2:8c:a5:41:2f:77:80:dd:75:0a:8b:9f:ec:30:
                    9f:5a:c1:c6:0b:d7:5c:49:b7:8e:8f:ac:08:01:85:
                    aa:27:95:f3:4e:75:c7:a6:38:6a:11:28:a4:0f:dd:
                    14:5c:05:e0:09:39:c0:72:61:e5:2b:1f:e4:2b:49:
                    ed:9c:ed:d3:94:36:52:2f:8c:09:19:12:cf:34:f6:
                    48:de:4d:b9:15:a5:aa:5d:30:da:31:e4:6c:5e:7d:
                    7f:2a:83:a3:86:c6:ae:d1:1f:42:8b:6f:94:6c:8c:
                    88:0a:a4:dd:f1:fc:0a:50:e9:10:86:3b:96:70:ab:
                    c8:06:2c:e0:93:03:fd:68:68:28:d3:bf:af:b7:48:
                    1a:89:91:bf:b0:57:de:f7:8a:6f:bc:d9:08:91:3d:
                    66:c4:96:a4:d5:10:12:21:c3:c2:07:99:ee:e3:d9:
                    4a:0a:92:f6:aa:f7:13:19:5f:5f:d3:6b:32:17:a1:
                    a7:27:cd:90:50:33:e1:77:a7:4b:cc:f7:fa:9c:1d:
                    81:43:24:5a:d8:64:96:a2:7c:67:8d:78:d5:d6:be:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E0:89:92:43:10:36:25:F0:2D:DB:F7:55:CD:21:5C:DE:D6:19:53
            X509v3 Authority Key Identifier:
                keyid:9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a343030303a3a2f33342d3334203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9228:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:b0:b2:a6:49:43:c4:58:04:52:d7:12:2c:81:ae:e7:eb:5f:
         ba:b3:91:e5:7f:60:c4:3b:55:71:c8:1b:ec:9e:21:0c:f4:f5:
         19:80:e1:1d:97:97:08:26:b5:9b:23:e8:9e:89:d9:34:b7:7e:
         96:d7:f0:24:a5:53:43:d7:9e:f2:28:91:a6:13:bf:72:fa:dd:
         39:f0:47:86:73:62:ee:a2:f1:62:3a:b7:af:66:40:d6:ae:ca:
         2b:cd:68:ca:3d:3f:48:ec:ad:03:9e:db:d9:34:3a:ca:fa:fd:
         06:83:72:ac:42:8b:d4:cf:a8:b7:fe:0f:08:01:f4:26:fa:a1:
         8e:43:2b:61:93:3e:89:1d:b5:98:b4:b1:dd:07:2f:79:1f:a0:
         08:27:8c:b7:a3:5a:29:bf:62:e5:03:a2:27:20:8a:f5:2e:6b:
         9c:fb:6e:dc:30:48:71:09:a5:2b:65:d4:e5:3f:15:cc:31:ff:
         9e:4c:de:8d:49:93:6e:84:3b:05:cf:3c:5e:b0:a6:17:b7:72:
         60:f9:0a:7b:24:1f:63:23:59:ac:a9:9e:c4:92:f2:5e:e2:0a:
         d3:25:b3:90:9d:1a:0f:fe:a3:04:c1:06:15:8d:4b:3c:7e:87:
         c4:28:c5:b7:5e:6f:8d:66:b3:0d:f4:78:af:72:c8:24:90:ef:
         5d:1b:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org