Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa
File:                     323830343a353636343a3a2f33322d3332203d3e20323637393935.roa (raw, json)
Hash identifier:          OE7PJBl6BlFLiT3UKK2fYJizTqqz7lCU1wSNUJgoc8A=
Subject key identifier:   E0:35:AC:DB:68:B3:2E:24:F8:AD:45:69:E2:AB:4F:A8:8B:B0:87:1D
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       016D17F9E221A38B337461F0846C0C1663E0ADC6
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa
Signing time:             Thu 04 Apr 2024 20:39:04 +0000
ROA not before:           Thu 04 Apr 2024 20:34:04 +0000
ROA not after:            Thu 03 Apr 2025 20:39:04 +0000
asID:                     267995
IP address blocks:        2804:5664::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:6d:17:f9:e2:21:a3:8b:33:74:61:f0:84:6c:0c:16:63:e0:ad:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Apr  4 20:34:04 2024 GMT
            Not After : Apr  3 20:39:04 2025 GMT
        Subject: CN=E035ACDB68B32E24F8AD4569E2AB4FA88BB0871D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5f:2c:76:66:d8:35:9d:9f:c4:48:d6:22:8f:
                    53:93:7e:ee:46:60:34:cd:da:77:01:cc:33:12:b9:
                    7d:fe:f8:ea:48:0b:e0:10:ee:a3:a6:0e:6a:23:b0:
                    64:c2:a4:89:c7:55:72:0d:f5:a2:46:8b:7a:29:54:
                    9e:c5:d8:f8:24:56:a6:9f:a3:95:2c:59:70:86:2e:
                    13:5b:93:66:71:43:2c:80:92:98:bc:74:8b:c7:be:
                    5a:be:9b:7a:a7:f0:66:33:e4:02:dd:9c:d3:83:8e:
                    8f:77:f0:84:f6:62:8d:d2:21:65:b5:04:6a:3a:2a:
                    8f:60:3b:f6:9f:c8:5b:36:a2:07:81:9a:cc:30:b4:
                    d1:e1:bf:4c:ef:f9:76:3a:d3:74:fd:51:66:d4:b1:
                    75:38:33:e1:43:e5:10:bf:17:6b:ec:a2:57:29:05:
                    05:cb:1d:c0:d4:8f:31:6d:f7:f6:23:c1:b3:de:46:
                    18:98:99:fb:e0:20:a8:83:13:79:45:a5:36:be:1a:
                    b5:bb:46:63:c3:f5:ae:cd:a0:b7:98:55:cf:35:f9:
                    f7:bf:dc:2c:e4:0d:66:73:67:89:e6:19:87:de:21:
                    18:45:80:49:69:af:50:ce:2e:49:c9:9a:01:ba:88:
                    28:06:ea:c2:04:a9:6f:b3:fe:99:91:02:97:3f:5f:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:AC:DB:68:B3:2E:24:F8:AD:45:69:E2:AB:4F:A8:8B:B0:87:1D
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d3332203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:81:a1:4d:82:c8:71:a7:06:32:f6:47:1b:d1:d3:6d:fd:52:
         e8:43:80:94:43:b9:19:09:7b:97:06:f8:ae:30:d9:b0:93:a4:
         9d:f0:f6:24:bf:06:df:b6:d1:71:e5:04:14:72:1e:28:2c:7a:
         3f:44:b9:da:c0:c7:ba:8b:72:06:55:1a:28:e8:e9:bd:17:12:
         bb:bd:89:16:dd:78:8e:42:03:85:96:9a:07:f6:b3:06:ed:c9:
         6e:75:8f:1d:8a:e2:ff:bf:d4:77:1d:db:4c:e7:38:ae:1f:45:
         98:28:d1:6b:fd:f2:26:bf:b3:b4:43:2a:2c:4d:ec:67:e8:08:
         da:de:cd:f1:7b:40:69:8b:c8:1f:26:2f:a6:b7:5e:74:3d:b9:
         e3:78:6b:5b:d7:64:bd:a2:92:e1:94:87:b1:8f:3b:e5:8f:3d:
         a5:7b:33:66:fc:e4:9d:d2:62:eb:c3:2f:e4:3c:4b:ad:24:c5:
         fd:b4:24:6c:f3:80:f9:e0:60:a3:f9:9c:1e:e4:45:c4:02:da:
         a2:74:d8:8a:7b:5e:df:55:0e:a4:06:d5:63:f1:ec:9f:ea:65:
         d8:f4:cb:d3:14:1e:3a:c7:94:4d:14:0b:0d:43:3a:c7:65:61:
         da:01:c1:5c:86:e6:56:b9:fc:fb:fb:60:b7:81:05:45:1a:df:
         59:00:16:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:23 2024 by rpki-client on console-fra.rpki-client.org