Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
File:                     323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (raw, json)
Hash identifier:          j7kj2AWirqVKKxtGZ6H4BiIVvWwza6fVm6E6c+gtxyI=
Subject key identifier:   9B:AE:2A:EC:73:0C:8B:13:20:B8:85:2A:1D:C2:3F:51:60:DA:37:CE
Certificate issuer:       /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial:       5EC13DD7BCA1A6DFD85281F5B228C9596C70E37B
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
Signing time:             Fri 05 Apr 2024 02:12:00 +0000
ROA not before:           Fri 05 Apr 2024 02:07:00 +0000
ROA not after:            Fri 04 Apr 2025 02:12:00 +0000
asID:                     269184
IP address blocks:        2804:60b0::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
                          rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:3d:d7:bc:a1:a6:df:d8:52:81:f5:b2:28:c9:59:6c:70:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
        Validity
            Not Before: Apr  5 02:07:00 2024 GMT
            Not After : Apr  4 02:12:00 2025 GMT
        Subject: CN=9BAE2AEC730C8B1320B8852A1DC23F5160DA37CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8d:89:d1:16:c6:81:f6:17:e9:07:ea:85:61:
                    fd:5e:c2:a5:f2:3e:36:6c:3d:86:02:42:5f:d5:f4:
                    e4:ce:e6:e5:e6:b7:79:e1:a5:63:69:0b:55:bb:fb:
                    92:ee:84:db:91:b3:ab:71:a7:17:94:2e:22:94:97:
                    48:74:78:a9:ff:87:5b:df:79:c3:47:6b:72:9f:1c:
                    f3:05:08:20:50:23:21:f1:ed:a7:78:8f:8b:7f:15:
                    2d:2c:f9:b2:00:a6:49:6a:09:4d:3f:78:04:29:7b:
                    e0:af:16:78:cc:3f:50:be:25:e3:4d:59:99:e7:1d:
                    35:c3:e5:ce:7d:56:0b:13:96:bb:d5:a7:ae:a0:4e:
                    66:d6:aa:79:c5:a2:18:50:8a:97:0f:78:fa:68:9e:
                    5c:76:50:28:e1:13:2a:bb:1d:f9:51:1e:e2:c2:dd:
                    24:3b:85:bd:5c:ed:e9:fe:3c:1e:ad:d5:1d:3c:57:
                    a6:72:db:7e:91:db:8f:93:48:48:82:88:85:09:ff:
                    12:11:52:1b:18:15:18:11:cd:2e:05:bf:7a:86:67:
                    0f:41:ef:61:21:2e:fa:4f:c2:3a:03:60:45:72:18:
                    ac:19:02:d5:72:a9:35:6d:d0:d7:db:24:ef:c4:12:
                    91:e9:44:54:56:3f:69:27:75:ac:45:40:e8:ae:87:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:2A:EC:73:0C:8B:13:20:B8:85:2A:1D:C2:3F:51:60:DA:37:CE
            X509v3 Authority Key Identifier:
                keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:a6:2d:5b:65:07:e2:16:48:81:3b:ce:fa:f8:06:4f:aa:68:
         5e:28:41:ba:f3:c5:b6:15:01:ce:14:b0:bc:fb:1a:44:27:ea:
         b1:48:90:4a:09:e3:f9:74:9b:67:d7:42:f4:da:d1:49:09:d8:
         d1:64:97:56:c8:7a:7a:c5:03:c4:78:4e:8f:d7:fb:64:9d:3c:
         49:0e:e7:57:a9:20:55:d3:22:38:e3:c4:10:c3:54:52:46:6b:
         1a:12:6d:0f:68:04:ee:57:ca:79:71:31:d3:5b:ea:f7:dd:79:
         d6:3c:33:05:7f:49:ce:54:be:9f:b2:12:fe:82:7d:b6:43:af:
         18:cb:b4:c5:89:48:ad:24:99:dc:75:f3:e9:07:38:01:ab:63:
         fc:e4:2b:fa:c9:73:95:14:c1:2b:1e:f9:43:ae:c5:1b:16:3c:
         a3:aa:e6:da:2a:fb:7a:c9:7c:4e:30:74:9e:d5:55:12:3c:af:
         e9:f3:b8:ea:28:44:87:f4:97:34:d8:22:b7:95:0d:9a:39:de:
         7b:a7:1d:47:a5:8b:2d:88:0d:97:44:24:40:02:bc:6f:77:a1:
         37:10:69:a0:d4:49:a9:89:86:22:11:2e:47:d0:06:47:ef:c9:
         e1:bf:d7:0b:09:92:6f:87:7d:c1:d8:1a:f4:c1:2b:a7:e5:67:
         bc:e4:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org