Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
File:                     323830343a366332633a3a2f33322d3438203d3e20323730343530.roa (raw, json)
Hash identifier:          5znLcISYDmIH24RWNiQO4DkXwlpGACKLzvu51EDpIWc=
Subject key identifier:   B2:D1:FA:3F:CC:34:79:83:00:AD:67:F6:28:2F:49:51:23:F1:77:4E
Certificate issuer:       /CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
Certificate serial:       02E5E5F00082F9F8CEAA035F89CC4692A08A19E1
Authority key identifier: 51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa
Signing time:             Thu 04 Apr 2024 05:37:02 +0000
ROA not before:           Thu 04 Apr 2024 05:32:02 +0000
ROA not after:            Thu 03 Apr 2025 05:37:02 +0000
asID:                     270450
IP address blocks:        2804:6c2c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl
                          rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e5:e5:f0:00:82:f9:f8:ce:aa:03:5f:89:cc:46:92:a0:8a:19:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF
        Validity
            Not Before: Apr  4 05:32:02 2024 GMT
            Not After : Apr  3 05:37:02 2025 GMT
        Subject: CN=B2D1FA3FCC34798300AD67F6282F495123F1774E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:1f:8f:ed:d0:26:c7:1c:99:8f:35:d6:ee:
                    54:11:e8:cf:12:65:dd:70:c5:cf:a3:57:e0:d9:3a:
                    e9:78:9d:52:29:34:ec:46:72:d6:8f:8f:e8:95:2e:
                    97:36:a4:2c:16:79:8f:63:a0:ef:36:59:eb:1a:a5:
                    c1:02:ee:11:a8:eb:14:28:17:58:48:62:05:9a:ff:
                    e5:c5:ea:85:d3:f2:93:a7:b9:30:2c:42:f3:4b:6b:
                    38:0e:bb:76:80:6a:f1:81:e7:26:2c:85:71:eb:eb:
                    54:b6:39:04:a2:2a:e5:cb:11:0d:c6:ac:23:8f:0e:
                    2e:85:58:02:3e:c8:b2:dc:99:5f:d1:81:51:30:be:
                    5f:d4:80:9d:52:3a:cc:5a:9a:bc:4f:5a:c0:e1:5a:
                    02:56:a4:cd:82:92:af:5a:ea:b3:f1:4f:fb:d5:2d:
                    62:86:b6:c6:9e:34:9d:92:41:96:cd:1d:72:2d:71:
                    1e:b7:ba:76:6b:e2:aa:e1:8b:31:d7:e1:9c:f9:58:
                    54:11:a5:89:c1:2d:8d:33:3e:92:bf:6c:f5:b7:be:
                    dc:f0:3f:73:1f:a5:e2:6b:9f:2b:da:26:79:42:68:
                    b8:eb:de:e5:c4:b4:f4:03:0c:39:44:fe:21:d0:69:
                    45:03:ab:09:6b:f0:88:9b:ca:ee:dd:2d:55:6e:09:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D1:FA:3F:CC:34:79:83:00:AD:67:F6:28:2F:49:51:23:F1:77:4E
            X509v3 Authority Key Identifier:
                keyid:51:95:7F:33:8D:0D:F1:C4:9A:0F:AB:7B:E0:86:D4:F2:F6:F0:1D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51957F338D0DF1C49A0FAB7BE086D4F2F6F01DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGRbPQREs7xGNG6W2GchxZ6CpWDQ37bjenESruCQKcD9/1/323830343a366332633a3a2f33322d3438203d3e20323730343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:21:74:3a:08:da:43:6f:fe:41:0e:52:e0:3f:64:c0:c6:
         5f:ab:c7:64:13:7e:ec:0f:f2:d4:b8:fb:16:98:71:b6:8d:1b:
         e5:6b:6b:0b:b5:bd:b8:5d:e1:f5:0f:ed:5d:f5:00:3b:61:6f:
         c0:8b:43:26:5c:64:69:1b:9a:96:94:62:b0:64:a7:0b:1c:90:
         dd:d2:ff:a4:b1:65:51:2c:f9:f5:09:0e:60:48:c8:45:76:57:
         54:5c:f8:3e:29:2e:fa:06:60:f4:56:1b:49:18:7b:b8:df:5c:
         02:a2:99:b9:db:78:9a:6d:fe:e6:6c:0e:8a:c5:52:13:a9:a5:
         61:9c:e4:1e:5d:0e:68:91:b1:35:c9:2f:74:78:7b:f5:f4:16:
         4b:34:44:7a:a2:b6:e4:e8:64:13:52:e6:c9:3d:1c:e0:89:29:
         31:06:08:9f:d5:59:be:70:78:f9:be:83:06:ba:47:c3:8c:62:
         1b:87:f8:55:91:2a:5d:b0:53:64:5d:a7:8e:aa:28:35:58:44:
         95:a1:3b:73:96:73:51:75:38:99:9a:af:46:a4:07:75:83:ec:
         7b:cf:ca:31:47:80:8b:ff:31:39:3e:1f:b3:f0:73:71:6f:7f:
         f0:d0:cc:56:a7:12:b0:c5:72:01:87:d8:1a:26:15:ce:2b:18:
         24:67:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:15 2024 by rpki-client on console-ams.rpki-client.org