Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
File:                     323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (raw, json)
Hash identifier:          N6UZQ3w13Ij2MAcDOi3gJUrnyGBsejDIErArsIX0YQg=
Subject key identifier:   7B:92:D2:C0:CE:8A:08:29:0D:ED:A3:3E:D4:20:60:94:BE:A1:96:7F
Certificate issuer:       /CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
Certificate serial:       0E63441F8D1D293CD01DEFC2BF56979B3B346CEC
Authority key identifier: F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
Signing time:             Tue 30 Jul 2024 15:36:44 +0000
ROA not before:           Tue 30 Jul 2024 15:31:44 +0000
ROA not after:            Tue 29 Jul 2025 15:36:44 +0000
asID:                     266196
IP address blocks:        2804:3c34::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:63:44:1f:8d:1d:29:3c:d0:1d:ef:c2:bf:56:97:9b:3b:34:6c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D184C64B07FEBABED43D8987829C30EDCF1D89
        Validity
            Not Before: Jul 30 15:31:44 2024 GMT
            Not After : Jul 29 15:36:44 2025 GMT
        Subject: CN=7B92D2C0CE8A08290DEDA33ED4206094BEA1967F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:7c:94:9c:00:e1:0a:e6:5c:ba:e7:2b:44:
                    bb:8d:02:55:48:de:7f:c8:24:14:c9:36:d5:be:49:
                    8f:2b:cf:23:44:4b:55:73:ec:0a:62:0d:97:e7:e8:
                    18:b5:90:d8:08:80:14:24:3c:13:57:fb:6a:1c:52:
                    97:60:e2:69:b7:ff:ce:9e:ca:94:c3:66:eb:5e:a5:
                    64:a2:f7:0a:75:df:28:8c:2f:66:f6:f2:4d:84:15:
                    27:a3:63:65:81:c5:a6:e3:c6:c5:a3:c8:0f:06:63:
                    5d:f9:0c:1d:da:b0:f7:15:10:4b:ba:2f:5c:f2:8e:
                    9d:80:00:a6:04:82:2f:32:cc:36:47:5b:b8:b6:99:
                    e3:d3:f2:fd:04:3a:41:9c:04:a2:0d:89:f8:bf:be:
                    e3:93:4f:51:55:f1:7a:74:4a:e1:97:b5:da:05:a6:
                    6a:54:b5:f1:36:9d:4e:c7:56:8b:cb:fa:fd:b9:f8:
                    d6:c1:e3:73:ff:78:f7:71:3a:09:35:e4:89:7b:58:
                    3d:b8:06:ef:e0:e3:9b:05:d4:57:9b:99:70:74:ca:
                    b9:6f:96:7c:55:f9:d7:5f:82:4b:74:d1:33:41:9d:
                    8e:a8:36:46:30:cc:a2:3d:dd:c9:b5:86:fc:75:93:
                    c4:20:b8:2e:31:09:a2:1c:b3:de:26:78:8a:5f:6c:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:92:D2:C0:CE:8A:08:29:0D:ED:A3:3E:D4:20:60:94:BE:A1:96:7F
            X509v3 Authority Key Identifier:
                keyid:F7:D1:84:C6:4B:07:FE:BA:BE:D4:3D:89:87:82:9C:30:ED:CF:1D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/F7D184C64B07FEBABED43D8987829C30EDCF1D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7D184C64B07FEBABED43D8987829C30EDCF1D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:06:b6:0e:e6:e5:4b:54:e2:a0:67:5e:f2:08:5c:bb:9d:cb:
         06:b1:bc:60:b0:3c:8e:69:f2:94:be:65:21:40:fc:95:80:6f:
         e9:45:d4:58:35:cf:0e:fd:40:88:dc:33:fb:8b:45:5a:a3:36:
         69:ae:d4:21:68:47:79:40:8f:9e:f9:95:54:b1:d2:a1:b0:9b:
         38:64:78:cc:18:9c:89:43:67:43:2d:4e:03:45:58:f1:29:9b:
         f9:e4:db:47:78:d0:bd:e2:de:de:7b:c5:4f:64:c6:cf:b9:18:
         a5:36:d5:7a:4e:a7:fa:71:aa:37:42:ab:e5:04:d9:7d:fc:e2:
         43:7b:01:d4:aa:97:82:9e:d1:5e:c3:a1:6c:2f:63:f1:4a:cc:
         3c:29:8c:89:05:8d:b7:96:14:49:30:11:8c:f5:1c:16:b4:d4:
         11:7a:eb:91:23:a8:5e:87:1a:a0:d7:75:46:92:02:1a:1c:57:
         2d:e4:3e:99:c7:6a:0c:4e:4a:c4:04:9c:96:46:ac:1d:20:25:
         56:af:af:ba:71:4f:ad:1f:87:f2:b3:9c:f8:f7:a1:9d:88:5c:
         c1:7b:e0:0d:ee:16:5f:83:f1:70:0c:46:7f:52:e9:38:9d:aa:
         3b:99:78:09:c0:75:4c:db:80:d0:9b:37:b5:22:77:84:f6:cf:
         1c:75:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:26:59 2024 by rpki-client on console-ams.rpki-client.org