Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa
File:                     323830343a346132303a3a2f33322d3336203d3e20323637323230.roa (raw, json)
Hash identifier:          6DV4waoHrA1UwG4swriam6wDtDQmAIfsKHR5f7wKom4=
Subject key identifier:   7E:E3:FC:F3:7B:DA:09:3D:9C:C1:CB:7C:FE:4D:F0:2B:71:AC:9A:EE
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       64A44E5B1349CDF0070CF3989D967195D5562C8C
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa
Signing time:             Wed 03 Apr 2024 18:39:17 +0000
ROA not before:           Wed 03 Apr 2024 18:34:17 +0000
ROA not after:            Wed 02 Apr 2025 18:39:17 +0000
asID:                     267220
IP address blocks:        2804:4a20::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 10:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a4:4e:5b:13:49:cd:f0:07:0c:f3:98:9d:96:71:95:d5:56:2c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Apr  3 18:34:17 2024 GMT
            Not After : Apr  2 18:39:17 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:d0:7c:b1:4a:ca:14:5a:70:71:37:3e:03:
                    27:ac:87:00:b0:c1:12:f4:d4:b1:8f:6e:61:4e:c6:
                    5c:f4:17:ba:60:5b:71:c6:d3:3c:10:dc:84:3a:cd:
                    bf:7a:22:15:48:9e:08:c7:72:06:0d:5c:94:7e:8c:
                    60:8e:88:0c:95:5b:6d:e2:99:99:27:e5:21:ec:80:
                    c8:38:56:89:60:a0:66:58:08:32:3d:79:ea:03:7f:
                    81:18:05:98:0f:ed:d7:dc:27:dd:56:3f:81:7c:5a:
                    ca:aa:75:c9:c2:ff:d6:e1:53:f3:42:cb:21:ba:93:
                    4f:07:5c:b0:c7:57:b0:d0:19:6f:e7:de:72:82:04:
                    49:c0:27:4a:82:57:a2:a4:86:8d:3b:77:9a:d6:c2:
                    02:1f:ee:26:78:7a:fa:a8:e8:fa:3a:1b:94:d6:2b:
                    96:3f:c1:1a:2c:c0:20:a9:3c:78:ed:00:b7:ed:a3:
                    e3:fa:40:fa:04:8e:68:35:57:5f:99:fc:91:0f:24:
                    31:62:30:8a:6f:11:7c:f1:80:91:bd:36:50:ce:65:
                    37:45:6e:de:4f:0e:6c:0c:2b:76:d3:1a:54:92:4a:
                    c0:78:32:39:14:15:8c:23:d9:e5:61:01:d8:f9:5e:
                    17:32:03:ab:be:b3:10:2d:11:8e:f9:20:07:80:85:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:FC:F3:7B:DA:09:3D:9C:C1:CB:7C:FE:4D:F0:2B:71:AC:9A:EE
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a3a2f33322d3336203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:ac:ae:36:ce:a4:c1:c3:11:36:08:c3:f7:71:63:24:14:
         bb:3b:a4:5d:5d:df:89:e8:9e:b9:5a:7b:81:36:78:29:3e:db:
         d2:bc:95:ed:1c:cb:72:8b:27:31:86:89:f3:ee:f2:7e:07:d5:
         08:02:b4:b9:91:24:8b:61:1a:1f:2d:eb:f0:52:4d:3f:f1:f8:
         d9:e7:4f:c0:2d:ae:4d:68:d3:ed:9d:52:c1:d6:71:93:82:ff:
         22:2f:a6:93:39:40:18:46:be:52:97:bf:3f:b1:4b:36:2e:67:
         53:6a:95:c1:05:52:e6:b4:c8:0a:91:ff:ae:f2:a2:15:a8:19:
         6a:a0:98:51:49:e1:9c:91:e6:a9:2e:2c:c7:3b:db:3d:2b:8f:
         0b:42:a9:cd:e9:7d:f8:b0:f3:6d:1a:81:c9:52:b6:6f:69:ce:
         54:cf:5e:8b:1a:de:d6:97:29:4e:15:6c:ba:86:ec:91:45:c5:
         61:e5:6d:3c:58:fe:c3:40:2e:7e:98:2e:a5:a0:78:6d:ef:aa:
         00:ca:42:09:99:38:9b:de:f1:60:3d:03:f4:9b:f7:9b:bb:9e:
         dd:aa:03:e9:c3:ec:66:2e:61:58:5c:79:39:d6:94:45:77:a0:
         26:63:30:0f:85:1d:db:46:9f:16:f7:13:51:72:8f:16:59:62:
         9c:2d:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:13 2024 by rpki-client on console-ams.rpki-client.org