Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a343030303a3a2f33342d3334203d3e20323635393233.roa
File:                     323830343a336666303a343030303a3a2f33342d3334203d3e20323635393233.roa (raw, json)
Hash identifier:          hIC94W386/Sm6Nt5Bi0m2mfOpuGtjo2NaoblqAyIwq4=
Subject key identifier:   83:95:F4:8F:FE:EC:F4:9A:83:07:98:00:B7:A0:E5:5C:65:76:C3:0D
Certificate issuer:       /CN=56FA1262F260972F129A8C634E9B1017D011C283
Certificate serial:       39642CE9BCE8D516E4C67391C0EA8190A0D9354C
Authority key identifier: 56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a343030303a3a2f33342d3334203d3e20323635393233.roa
Signing time:             Mon 22 Jul 2024 23:50:19 +0000
ROA not before:           Mon 22 Jul 2024 23:45:19 +0000
ROA not after:            Mon 21 Jul 2025 23:50:19 +0000
asID:                     265923
IP address blocks:        2804:3ff0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl
                          rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:64:2c:e9:bc:e8:d5:16:e4:c6:73:91:c0:ea:81:90:a0:d9:35:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56FA1262F260972F129A8C634E9B1017D011C283
        Validity
            Not Before: Jul 22 23:45:19 2024 GMT
            Not After : Jul 21 23:50:19 2025 GMT
        Subject: CN=8395F48FFEECF49A83079800B7A0E55C6576C30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:7e:33:88:7c:02:bd:0a:ba:79:a4:3d:47:
                    f7:85:97:58:de:5c:c8:27:7e:b3:3c:ba:c9:e1:c2:
                    49:a4:91:e1:f3:e5:48:a4:93:2b:3f:a2:3b:89:b8:
                    17:73:87:45:30:8b:21:2a:58:f5:24:92:d0:a8:8c:
                    a7:2f:25:5e:63:56:c9:ba:f1:48:f6:81:eb:50:a0:
                    31:f4:e2:33:1c:12:dc:ae:a6:4a:21:3f:24:00:b1:
                    8c:ce:c2:ed:e8:23:d6:a4:44:12:77:92:39:df:3c:
                    39:94:b7:20:af:22:46:3f:92:a3:ba:29:15:43:3f:
                    56:a8:08:9c:57:dd:da:a4:5e:92:3a:3a:52:9c:a5:
                    bb:3a:87:d1:91:73:b1:2f:56:53:07:b3:85:f7:46:
                    a5:14:81:f7:25:cf:f6:33:bc:b0:80:fb:b1:d7:26:
                    cb:ea:2f:0a:16:a5:bc:7d:1f:ec:23:f6:19:8e:34:
                    bd:66:d5:59:73:c2:aa:1c:0d:e4:ec:a3:9b:30:20:
                    d6:e2:8b:f6:a6:68:9f:7d:f5:49:e5:df:94:cc:ac:
                    cd:bb:60:5a:1f:d5:e9:e3:55:f4:10:6c:53:47:5e:
                    de:34:9e:e7:0d:e1:c8:db:dd:7d:c8:ca:87:a8:c2:
                    cb:0a:ec:b3:e3:b8:75:0e:14:fb:b0:58:cb:8d:41:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:95:F4:8F:FE:EC:F4:9A:83:07:98:00:B7:A0:E5:5C:65:76:C3:0D
            X509v3 Authority Key Identifier:
                keyid:56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a343030303a3a2f33342d3334203d3e20323635393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ff0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:59:9f:25:83:ab:f4:d1:12:63:d1:dd:ee:71:89:d0:f3:
         18:ab:1e:71:7e:01:9f:7b:04:cd:27:35:c2:a1:1f:3f:29:17:
         e9:04:39:ad:98:c7:2b:0e:38:c7:14:74:71:36:58:3f:53:eb:
         c5:8d:24:3f:1c:dc:d6:7b:22:dd:6d:67:ca:04:67:95:c7:70:
         79:bd:74:f9:c7:6a:37:a2:c7:a9:9e:f9:4f:9e:2f:45:10:90:
         87:e3:a5:0e:09:07:7c:e4:8a:db:4a:a9:35:e9:9b:4f:98:66:
         34:0a:9d:93:6b:da:ee:15:57:8a:4d:4f:f7:22:e2:ee:7d:6c:
         af:4b:96:f7:2e:29:ca:15:71:84:4e:6a:0b:f1:1a:7c:ea:a3:
         81:07:c9:67:d7:f5:bc:36:3f:74:ed:a9:dd:0e:81:49:0a:a5:
         84:1c:ee:e2:87:9b:08:ca:93:1f:6f:fa:69:31:d9:fa:b2:51:
         df:4c:46:a2:48:de:9d:f2:51:e0:d1:b2:a9:0e:0d:71:d6:15:
         40:00:fc:1a:96:5d:13:cc:ed:25:02:50:63:20:03:a7:e1:3d:
         ff:81:ca:f2:dc:88:ad:46:58:b1:15:c3:e6:c0:d9:63:df:de:
         07:3e:c8:c8:0a:df:19:9b:10:2a:48:4f:65:8e:1e:72:53:bc:
         f8:bb:7c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:57:38 2024 by rpki-client on console-fra.rpki-client.org