Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/323830343a383932343a3a2f33322d313238203d3e20323733353833.roa
File:                     323830343a383932343a3a2f33322d313238203d3e20323733353833.roa (raw, json)
Hash identifier:          51bKAdaNAKxTqBzTbSUMSGgJzTbw6TX/Uh/fJI7liUY=
Subject key identifier:   6B:D2:2F:9D:B2:A7:EC:9A:6C:27:F1:CF:28:8A:8D:D6:3E:19:BC:54
Certificate issuer:       /CN=13B10A287389E55AEF186C7F7E3473FBBA6994CE
Certificate serial:       0150FAA19FA050433B56F030215404441D5AED16
Authority key identifier: 13:B1:0A:28:73:89:E5:5A:EF:18:6C:7F:7E:34:73:FB:BA:69:94:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/323830343a383932343a3a2f33322d313238203d3e20323733353833.roa
Signing time:             Thu 04 Apr 2024 10:10:49 +0000
ROA not before:           Thu 04 Apr 2024 10:05:49 +0000
ROA not after:            Thu 03 Apr 2025 10:10:49 +0000
asID:                     273583
IP address blocks:        2804:8924::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.crl
                          rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:50:fa:a1:9f:a0:50:43:3b:56:f0:30:21:54:04:44:1d:5a:ed:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B10A287389E55AEF186C7F7E3473FBBA6994CE
        Validity
            Not Before: Apr  4 10:05:49 2024 GMT
            Not After : Apr  3 10:10:49 2025 GMT
        Subject: CN=6BD22F9DB2A7EC9A6C27F1CF288A8DD63E19BC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:6f:31:b4:ef:5c:8e:82:e3:3b:07:8b:45:
                    ad:18:73:3f:c6:9e:d5:f9:06:cd:2f:4a:20:b1:92:
                    51:00:f1:4f:71:51:c2:41:f3:99:37:a9:65:bc:b9:
                    ac:23:80:14:4b:1a:eb:db:f9:0e:e3:22:a3:f6:c3:
                    99:d3:9a:30:22:b6:2a:f6:24:7e:97:3d:52:68:8b:
                    7a:a3:0a:2b:1f:48:fd:20:da:a8:8a:47:a0:68:e7:
                    d0:55:f2:bc:ad:cc:ad:94:a4:16:70:93:0e:49:40:
                    f3:e0:48:45:a0:e9:22:b8:98:f7:85:16:27:ea:fc:
                    59:ce:e1:7c:18:d9:c0:fe:27:ce:12:80:42:b1:3e:
                    66:0a:48:a1:ba:29:0e:a7:4b:a0:d7:ff:8e:88:5a:
                    0c:fc:35:cf:97:29:ff:cf:26:aa:bf:65:7a:b8:3a:
                    4b:e3:e6:4b:a1:5f:7c:ae:50:8a:77:ff:aa:16:06:
                    14:9d:d9:47:0a:61:99:fc:ec:b9:bd:5a:ba:96:e6:
                    aa:7a:86:fc:5c:3a:99:25:bf:a9:54:e0:ba:e1:19:
                    be:46:08:ef:83:b9:bf:bc:2a:cf:5e:56:9e:21:c8:
                    38:19:68:cb:36:a0:f5:a3:9e:7a:a2:e5:ea:2f:40:
                    b3:d7:dc:d6:95:f2:d9:9e:8e:b2:b3:e0:90:70:58:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D2:2F:9D:B2:A7:EC:9A:6C:27:F1:CF:28:8A:8D:D6:3E:19:BC:54
            X509v3 Authority Key Identifier:
                keyid:13:B1:0A:28:73:89:E5:5A:EF:18:6C:7F:7E:34:73:FB:BA:69:94:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13B10A287389E55AEF186C7F7E3473FBBA6994CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GCwP9pdoi5dvim88NoieosrwmJ3CxjmM91QcfQwER2Jv/1/323830343a383932343a3a2f33322d313238203d3e20323733353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8924::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ad:f9:42:c1:73:d4:45:b0:c2:8f:4e:4d:f4:ab:71:9c:b3:
         60:df:6f:21:43:84:aa:d1:b2:10:82:58:bd:38:9c:68:2d:dc:
         b6:d2:34:73:33:bb:f4:14:76:de:67:16:5d:21:93:ea:df:66:
         28:60:9c:f9:20:78:05:93:55:3b:71:d7:61:88:d5:c9:c8:b1:
         cf:db:32:e6:71:62:a2:fa:35:18:4c:ac:b8:27:f2:61:81:2c:
         1c:6a:2d:a3:2e:5b:3a:bf:b5:50:9d:a9:b2:c7:b4:e7:86:f3:
         7c:92:30:48:18:24:58:47:2b:3f:24:65:ec:57:7b:20:ca:6f:
         15:93:dc:cc:ca:cd:d6:fa:88:be:ca:fd:d8:c0:89:f6:b1:55:
         75:b5:27:6b:38:f2:55:f5:af:f4:93:16:39:87:17:5c:be:37:
         46:b6:41:d2:02:8b:37:5b:ed:f3:5f:fb:73:b3:7b:6f:c5:df:
         12:c4:05:bd:49:9e:c8:00:af:28:5f:f4:0d:b7:b9:80:ab:ce:
         48:ce:5d:9f:be:72:12:74:82:55:24:d8:cd:0f:66:f7:a1:d0:
         67:a7:16:98:e5:ef:7c:25:e9:ea:e5:84:63:17:dd:04:82:52:
         34:75:82:fd:96:aa:92:4b:1c:6c:a5:75:a2:50:40:54:17:75:
         a7:eb:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org