Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
File:                     323830343a356661633a3a2f33322d3332203d3e20323639313136.roa (raw, json)
Hash identifier:          p1uNNCNlif+l+u9fLCkjPTxpkfv1cvVuASBJwSkd0dY=
Subject key identifier:   18:55:F1:C4:2B:21:48:5F:06:DF:55:D6:A5:8B:0C:09:58:6F:BE:32
Certificate issuer:       /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial:       2084C72C7B9C7643200E7A677D2F65F8CFAF6FD0
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
Signing time:             Thu 04 Apr 2024 15:30:24 +0000
ROA not before:           Thu 04 Apr 2024 15:25:24 +0000
ROA not after:            Thu 03 Apr 2025 15:30:24 +0000
asID:                     269116
IP address blocks:        2804:5fac::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
                          rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:84:c7:2c:7b:9c:76:43:20:0e:7a:67:7d:2f:65:f8:cf:af:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
        Validity
            Not Before: Apr  4 15:25:24 2024 GMT
            Not After : Apr  3 15:30:24 2025 GMT
        Subject: CN=1855F1C42B21485F06DF55D6A58B0C09586FBE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:0e:b0:6c:53:70:ee:8c:9b:c5:1e:b6:1d:
                    0f:a3:2b:5a:d7:98:77:0d:f4:e5:c7:ba:ac:e0:b2:
                    37:1a:e0:66:13:11:3b:80:5d:f5:99:db:c0:d1:60:
                    53:c1:c2:08:70:c3:2d:c1:54:2a:9d:fa:90:fe:d4:
                    5a:eb:1f:f5:7b:39:44:98:48:aa:c7:2b:ad:e5:7c:
                    04:d8:30:aa:24:be:db:a1:1b:70:ac:4c:e5:04:7f:
                    fc:07:d1:b7:4b:fa:bd:13:5c:fe:ec:f9:c0:0c:d1:
                    0b:d2:d9:d2:b3:d9:0f:52:95:ef:f4:34:41:05:8f:
                    a6:51:46:ce:9e:5e:b9:44:58:47:b1:7d:36:0d:6f:
                    0b:ea:d5:e3:76:45:d5:ed:be:ab:4e:07:44:0a:a9:
                    b0:7b:2e:3c:26:66:48:d0:ce:55:e9:c7:6b:fb:95:
                    3f:02:9f:28:7d:e5:04:91:1e:03:cf:ef:ed:8e:5c:
                    0d:49:6f:f4:a5:ad:e8:2c:18:a7:4f:bc:68:01:5b:
                    ce:f4:60:97:fe:82:7d:4c:33:62:f7:64:01:f8:9a:
                    69:0d:13:0d:b8:56:ee:e7:ab:36:61:53:1c:d6:93:
                    93:89:09:42:76:c0:fe:bc:cd:fd:ed:3a:ae:74:88:
                    b5:5c:c0:99:5d:20:1b:9f:1b:57:3d:f8:5e:be:9a:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:55:F1:C4:2B:21:48:5F:06:DF:55:D6:A5:8B:0C:09:58:6F:BE:32
            X509v3 Authority Key Identifier:
                keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fac::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:64:78:91:90:b9:cc:b7:66:0e:4e:cb:3a:3d:32:29:6d:a8:
         13:c3:89:54:5f:cf:6f:f9:09:42:25:ef:54:79:d4:00:6b:2b:
         96:1b:07:48:0b:21:14:98:2e:26:30:91:03:99:d5:9d:68:db:
         35:bf:31:7d:52:22:68:90:5c:22:90:a4:34:53:37:22:ac:eb:
         07:33:72:cd:ce:41:ac:fe:9f:62:6a:c2:90:86:28:37:88:31:
         07:6d:a8:b8:af:a0:1b:81:66:26:82:2f:d4:cb:de:25:62:02:
         d5:95:b3:3f:7f:65:55:fe:03:01:67:87:96:de:dd:95:bf:f4:
         42:e2:de:dd:65:5c:11:4d:f7:9e:fb:28:2d:3a:72:46:a5:62:
         25:5b:11:9e:c7:29:0a:4e:be:a8:7c:49:f9:4d:af:45:81:03:
         ee:04:3d:58:76:0c:a2:b5:36:52:62:01:ba:00:e4:78:66:7f:
         31:82:e5:ad:85:1c:18:cc:c3:0d:25:f6:7d:87:79:10:c6:ac:
         a1:d7:1b:06:39:93:9d:e9:b4:07:ef:e5:52:9f:a0:12:b2:86:
         f1:ec:93:2d:66:6b:1e:8a:10:ca:a4:ea:08:59:b3:a5:f6:09:
         94:ef:92:07:7a:1d:51:da:e9:27:4d:d1:12:bf:0e:a2:88:ab:
         5b:50:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:44:09 2024 by rpki-client on console-ams.rpki-client.org