Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a633030303a3a2f33342d3334203d3e20323635393233.roa
File:                     323830343a336666303a633030303a3a2f33342d3334203d3e20323635393233.roa (raw, json)
Hash identifier:          IS64mXpAlcW2PkhTuIc6JJlQcBbmOmwy9xzFY0TqAd4=
Subject key identifier:   7B:D4:15:91:15:78:9F:DF:1A:9D:51:A7:A6:7E:41:A6:99:37:35:72
Certificate issuer:       /CN=56FA1262F260972F129A8C634E9B1017D011C283
Certificate serial:       73F7E3845CAD47AB8AFA2B58DF7B2B09BA6F3F6A
Authority key identifier: 56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a633030303a3a2f33342d3334203d3e20323635393233.roa
Signing time:             Mon 22 Jul 2024 23:50:23 +0000
ROA not before:           Mon 22 Jul 2024 23:45:23 +0000
ROA not after:            Mon 21 Jul 2025 23:50:23 +0000
asID:                     265923
IP address blocks:        2804:3ff0:c000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl
                          rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 13:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f7:e3:84:5c:ad:47:ab:8a:fa:2b:58:df:7b:2b:09:ba:6f:3f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56FA1262F260972F129A8C634E9B1017D011C283
        Validity
            Not Before: Jul 22 23:45:23 2024 GMT
            Not After : Jul 21 23:50:23 2025 GMT
        Subject: CN=7BD4159115789FDF1A9D51A7A67E41A699373572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:a1:59:67:b7:62:a8:ea:e8:34:09:26:3f:
                    7f:48:be:ac:36:bd:4d:52:2d:aa:48:7b:9b:4b:4c:
                    73:5e:6d:95:ec:35:5c:6a:e1:50:44:b3:e8:72:d1:
                    5d:c8:51:a7:b2:b4:0e:77:91:3c:e1:6a:c3:54:4c:
                    2d:cc:3a:40:45:11:30:c9:25:75:ed:81:46:15:cc:
                    8d:64:17:e9:73:0a:a1:e9:47:4b:76:60:0e:7d:17:
                    e4:bb:6f:1e:45:97:d0:54:fe:e7:da:af:1a:6d:85:
                    b8:35:31:79:36:fb:25:f7:0a:5d:2c:27:d0:ae:6e:
                    6a:a4:ba:cf:7d:19:fe:49:38:b8:8b:64:d4:b0:9a:
                    c9:dc:3d:b0:b9:e2:9e:d4:fd:d3:b3:ff:e6:32:a8:
                    e5:74:69:e3:95:e5:93:f8:62:41:20:fd:90:d7:42:
                    31:8a:9c:8f:fd:92:e2:cf:c4:85:84:13:24:80:c0:
                    24:91:a4:67:59:c5:f2:44:4e:7a:0b:57:88:33:a4:
                    01:21:6c:1b:36:6e:15:fd:e8:7d:fe:c9:b9:f6:6e:
                    41:97:63:39:1b:e6:2e:23:c8:77:42:a8:ec:0f:2b:
                    8c:18:a4:b6:75:a8:a6:44:9d:d1:4d:05:a2:1c:bb:
                    96:2f:56:9a:53:69:4b:78:f7:11:3a:37:40:d5:05:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D4:15:91:15:78:9F:DF:1A:9D:51:A7:A6:7E:41:A6:99:37:35:72
            X509v3 Authority Key Identifier:
                keyid:56:FA:12:62:F2:60:97:2F:12:9A:8C:63:4E:9B:10:17:D0:11:C2:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/56FA1262F260972F129A8C634E9B1017D011C283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56FA1262F260972F129A8C634E9B1017D011C283.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GLvMmZLQ6DPuzj34BCx8Vy5KPcycndEgqc1Wd373TkkQ/0/323830343a336666303a633030303a3a2f33342d3334203d3e20323635393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ff0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:22:54:c6:79:ef:79:b7:ad:f6:26:58:fd:ab:f0:63:ed:
         17:80:2e:d3:3a:8f:f3:cb:19:b1:56:da:f4:82:fd:0a:4b:35:
         50:6a:87:f5:c9:ca:d5:b1:1c:84:a7:f1:43:8d:bb:f8:66:e2:
         93:f5:22:fb:2a:89:6e:f3:bd:c9:0e:2f:ae:69:86:32:2b:62:
         0c:2a:df:65:9b:7a:63:9b:f6:a2:d7:59:65:85:13:7a:7a:6e:
         4b:f1:5c:de:d0:0c:90:f8:26:54:20:e0:dd:2d:eb:14:49:08:
         8a:37:9d:ac:a4:22:4c:68:4f:4e:87:2e:0a:c4:d6:cc:30:bc:
         04:de:87:d6:d6:39:5e:7d:5d:96:be:63:1f:af:e0:c8:2d:d1:
         4e:d1:12:38:10:8b:be:2f:7c:2d:cc:83:94:af:cd:83:20:22:
         8b:d2:9c:d9:e0:f8:c2:55:81:ff:1e:ed:6c:e6:6e:8c:7f:4c:
         d7:c4:51:39:76:98:e1:cd:5c:80:6c:25:ec:de:35:a0:00:b2:
         9e:22:79:70:0e:d6:54:9d:44:61:77:d2:0c:36:8d:69:f8:5b:
         d0:9d:cd:35:e3:4d:af:46:7d:86:08:82:5c:a5:7d:f8:19:dd:
         64:b4:03:b4:d0:55:03:d6:56:8f:b0:bb:67:32:56:a2:29:a5:
         95:53:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:17:04 2024 by rpki-client on console-ams.rpki-client.org