Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33332d3333203d3e20323734363933.roa
File:                     323830343a393232383a3a2f33332d3333203d3e20323734363933.roa (raw, json)
Hash identifier:          3cjaKSAux1n7EIvNseKB8gI3qK1VtN2NZ06LSNySziY=
Subject key identifier:   0E:D2:83:BD:F2:F5:71:78:CF:8F:C8:8C:F3:A5:94:B8:50:4F:7C:25
Certificate issuer:       /CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
Certificate serial:       6926B860722405CF31C1C785972CCD541C0175E5
Authority key identifier: 9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33332d3333203d3e20323734363933.roa
Signing time:             Thu 14 Nov 2024 13:53:38 +0000
ROA not before:           Thu 14 Nov 2024 13:48:38 +0000
ROA not after:            Thu 13 Nov 2025 13:53:38 +0000
asID:                     274693
IP address blocks:        2804:9228::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl
                          rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:26:b8:60:72:24:05:cf:31:c1:c7:85:97:2c:cd:54:1c:01:75:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E24999C7D51597D527510F6CFDD01EB8C81B4C9
        Validity
            Not Before: Nov 14 13:48:38 2024 GMT
            Not After : Nov 13 13:53:38 2025 GMT
        Subject: CN=0ED283BDF2F57178CF8FC88CF3A594B8504F7C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:b6:d2:2d:6c:7f:1c:9f:c8:13:9e:fc:81:
                    f8:2a:c2:12:20:83:36:c0:d0:02:20:d7:fd:1d:13:
                    77:e2:96:33:93:c6:1e:37:7b:35:85:f2:a0:a7:0c:
                    a8:ef:45:b1:aa:45:80:b3:f4:40:8f:89:96:76:33:
                    93:47:4d:0e:ce:4e:89:bc:14:e8:43:df:43:88:e3:
                    fe:1b:f2:70:7c:2b:4d:d8:1c:0d:44:7c:90:ab:f1:
                    72:2d:32:4a:b5:93:76:35:15:5d:94:51:45:63:ad:
                    25:34:23:86:70:65:4d:0e:1d:e7:0b:ab:27:c5:2f:
                    8c:c4:04:28:2a:bd:8f:0f:45:2e:35:72:e1:0e:a7:
                    e2:c7:33:a6:c4:e5:ce:c7:95:d1:30:2f:65:bc:d5:
                    04:33:1f:0b:87:12:a6:f8:a0:b0:aa:8c:06:f5:31:
                    87:d1:0e:59:21:68:76:32:9b:3e:fc:7a:73:53:ac:
                    b1:1d:aa:ba:4f:8c:c2:c7:8c:e5:77:ae:a3:86:6b:
                    13:43:82:45:62:6f:81:14:6d:1b:fd:30:3d:2a:cf:
                    6d:92:b8:e8:8f:2b:91:89:d0:13:d1:33:42:90:55:
                    1a:08:ea:53:26:11:f1:98:48:6d:07:78:3e:5c:db:
                    37:c1:70:87:16:83:2d:14:cf:5e:42:51:84:e6:d9:
                    24:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D2:83:BD:F2:F5:71:78:CF:8F:C8:8C:F3:A5:94:B8:50:4F:7C:25
            X509v3 Authority Key Identifier:
                keyid:9E:24:99:9C:7D:51:59:7D:52:75:10:F6:CF:DD:01:EB:8C:81:B4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E24999C7D51597D527510F6CFDD01EB8C81B4C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCpWgdXZQLAMHC8WRh9AAbhmNSijdtGy8yg6nRPS6UQy/0/323830343a393232383a3a2f33332d3333203d3e20323734363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9228::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:93:83:28:f4:58:22:38:11:e1:76:68:35:11:56:47:d6:18:
         f9:76:cb:f8:8c:3e:7b:86:c8:75:33:8f:6d:aa:b4:0c:4d:76:
         f5:6e:72:5d:86:fb:ad:70:66:bf:6e:40:83:06:f6:cd:4d:21:
         0d:ad:d8:19:b7:a2:5e:89:76:a1:74:56:8a:67:5e:32:ef:70:
         09:af:1e:a3:3e:0f:73:ea:ed:93:b3:ec:cc:74:cc:8b:91:92:
         90:cf:f4:62:20:c6:c0:34:5c:70:b5:d0:0d:98:dc:c4:b2:dc:
         87:48:08:e6:d5:9e:f8:bf:1d:45:80:cd:14:07:6b:23:2f:cd:
         95:84:ac:b6:b9:42:25:ee:75:5b:be:5b:7b:96:b7:67:ed:6e:
         cc:ef:71:98:ae:03:c0:4b:c8:ac:08:9c:b7:3a:f3:69:7e:98:
         c8:4b:ef:0a:46:e1:a4:48:e9:4a:15:17:40:84:92:29:0c:1e:
         dc:5d:b9:c2:18:69:02:95:a6:b0:0e:39:e0:8c:30:ea:15:4c:
         a0:44:ec:e0:aa:ba:30:22:27:0f:74:1b:12:c8:15:21:e4:c0:
         e1:62:b7:e9:22:73:98:f7:f5:2e:3a:08:1a:cd:a9:ae:15:0a:
         73:9b:52:b5:5c:fe:e0:88:a1:18:8e:14:39:44:23:cc:0d:c0:
         01:88:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:38 2024 by rpki-client on console-ams.rpki-client.org