Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa
File:                     323830343a333330343a3a2f33322d3438203d3e20323635313131.roa (raw, json)
Hash identifier:          6zcQJE8pzzTrf+4zAxGggoiK886z5GeiAkjc4HBcMb4=
Subject key identifier:   9B:00:0D:77:A6:AA:19:38:C8:A3:96:E0:71:C7:57:25:4D:DF:57:BA
Certificate issuer:       /CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
Certificate serial:       562B61AFF84868D56E79BF7FC6EBF32E5EB0093B
Authority key identifier: 4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa
Signing time:             Thu 04 Apr 2024 03:13:03 +0000
ROA not before:           Thu 04 Apr 2024 03:08:03 +0000
ROA not after:            Thu 03 Apr 2025 03:13:03 +0000
asID:                     265111
IP address blocks:        2804:3304::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.crl
                          rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2b:61:af:f8:48:68:d5:6e:79:bf:7f:c6:eb:f3:2e:5e:b0:09:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
        Validity
            Not Before: Apr  4 03:08:03 2024 GMT
            Not After : Apr  3 03:13:03 2025 GMT
        Subject: CN=9B000D77A6AA1938C8A396E071C757254DDF57BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2b:6b:4a:22:9b:01:b8:43:93:e5:77:6a:34:
                    20:84:c1:e7:95:12:e7:6b:2f:8d:36:b8:26:30:b0:
                    63:1b:66:b1:33:b8:a9:2e:28:ca:95:0d:8b:6f:8f:
                    b4:0c:81:67:72:d6:c8:38:9e:57:5a:61:d9:e6:b9:
                    9b:bf:d6:6f:67:92:b9:d6:a8:10:36:e1:30:df:a4:
                    07:f1:8a:6a:17:4b:82:b8:08:69:0a:c3:13:f0:8b:
                    6f:57:5c:a7:8e:96:f2:c7:d9:75:39:db:67:fe:a6:
                    3e:ca:9c:a1:d1:42:0d:91:76:38:a5:a0:f4:ca:f5:
                    ca:b6:c9:a6:37:75:8f:b1:26:55:19:ad:14:c7:18:
                    9f:c1:d4:37:4d:e9:cd:50:6e:8e:6f:e3:07:ae:c6:
                    20:8a:db:9a:9f:8a:47:7f:aa:61:59:0d:8d:26:41:
                    42:f4:51:2e:95:07:60:3f:57:7b:80:92:3f:95:ca:
                    69:28:8e:ac:43:8c:ac:c6:69:83:04:02:4d:3a:bf:
                    16:c4:53:50:fe:e6:54:6a:63:e2:08:a0:3a:1e:21:
                    02:ad:cf:d4:23:88:12:5d:ab:03:fc:f7:62:a8:5f:
                    07:d4:45:4e:80:db:86:99:26:c3:06:ac:08:ba:a5:
                    bb:a0:d0:ac:72:49:88:71:a8:22:f8:90:86:b9:2a:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:0D:77:A6:AA:19:38:C8:A3:96:E0:71:C7:57:25:4D:DF:57:BA
            X509v3 Authority Key Identifier:
                keyid:4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/323830343a333330343a3a2f33322d3438203d3e20323635313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3304::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:56:e4:20:51:76:5d:5c:77:04:8d:ab:36:ad:d4:7e:fe:d9:
         85:fb:e0:b2:e5:42:bd:fe:2c:d2:7f:37:e8:97:86:9a:74:9d:
         44:c2:88:8f:fa:27:83:67:5b:4d:5f:f5:a8:23:17:c1:b7:cc:
         69:38:ee:00:39:26:f2:e7:af:77:14:43:91:a1:b1:c4:ef:3b:
         6c:ec:c4:a1:e2:df:dd:34:27:91:d0:d6:9e:78:58:6e:0e:7c:
         3f:bd:4e:5d:61:ba:f8:6d:5a:4e:33:30:ad:e0:ba:50:52:e9:
         15:31:06:3c:98:70:82:4a:1d:10:36:d3:91:24:90:33:0a:1d:
         ff:e1:53:e8:69:c5:a7:35:91:f3:31:14:f6:cb:42:4a:9b:f3:
         81:d9:42:04:7f:21:95:d9:16:f8:77:0b:5e:5d:dc:95:71:78:
         5a:82:ba:bb:1a:e2:88:71:ed:eb:67:12:9d:ba:2a:09:5e:5d:
         40:0d:88:af:92:49:ee:5d:21:b4:ab:0f:3a:53:36:7c:02:52:
         1e:8f:4e:3b:4e:e0:52:c4:88:43:f0:c8:67:b9:2e:b4:13:38:
         54:d1:f7:d5:73:ab:aa:eb:4e:7e:8d:82:ca:cd:26:4c:01:5c:
         d1:d8:dc:41:ba:d9:ec:b5:4a:16:7a:4c:e5:ac:d3:64:7f:2a:
         98:54:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:53 2024 by rpki-client on console-fra.rpki-client.org